Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa
File:                     43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa (raw, json)
Hash identifier:          HPBsie0oMAcPUPZiRjG+/u6ypKEKD3ANt4vDINFy+0k=
Subject key identifier:   B5:08:EA:16:50:25:9D:65:82:CE:0C:EB:62:6B:16:6D:F7:3C:3E:D0
Certificate issuer:       /CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
Certificate serial:       010D0C9F4328584979743F175F7CDD7663C6F7C0
Authority key identifier: 26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     20220
IP address blocks:        97.64.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:3f:17:5f:7c:dd:76:63:c6:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=b20e6aac-b0ee-45f2-82c5-a8761d4ad500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:d1:cc:b1:d3:c0:4f:98:74:a6:c0:e1:71:
                    68:51:59:a8:14:ef:c8:b2:b7:49:98:e0:d9:15:6a:
                    58:16:76:4b:d4:09:5d:1b:2a:a7:ab:95:2a:e8:7a:
                    d7:a4:44:2a:75:bf:79:b1:63:b4:f6:e0:a4:f3:b5:
                    b6:21:e1:a9:cc:e6:d3:7c:2c:3e:2f:d7:78:0d:d4:
                    c0:30:a1:26:91:0e:2a:4e:50:97:e3:63:cb:21:8a:
                    ad:ff:ef:d9:d0:bf:bc:9a:b6:97:ac:63:b7:78:26:
                    c0:12:56:cf:40:29:34:9a:51:7d:69:8d:a6:8a:c5:
                    eb:7a:f2:12:a5:d5:0c:32:89:6b:11:74:5a:1d:bd:
                    23:a1:df:2a:71:a4:f8:90:7b:a2:35:bb:df:db:92:
                    74:0a:7e:90:d5:7c:c7:fb:92:12:33:b5:99:ef:b7:
                    24:95:25:9d:28:c4:78:65:a4:df:a4:7b:47:e1:22:
                    49:16:4f:13:b2:ed:da:52:70:ad:41:ab:22:98:1a:
                    01:60:86:b5:b5:8e:dd:22:b4:3c:89:ed:96:a6:ec:
                    88:63:da:9a:45:cb:71:8a:4d:88:0f:20:f4:4e:8e:
                    cd:53:64:88:d0:9e:cd:ac:bb:21:69:7f:fc:a6:8a:
                    93:ad:8e:61:e7:f2:ad:bc:98:5e:1b:54:c5:77:39:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:08:EA:16:50:25:9D:65:82:CE:0C:EB:62:6B:16:6D:F7:3C:3E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl

            X509v3 Authority Key Identifier:
                keyid:26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:40:d6:54:34:48:36:09:f0:10:24:e3:8a:33:13:89:5b:4d:
         cc:69:f8:03:90:22:e1:b5:ec:ed:ef:b2:28:06:ad:b0:81:99:
         08:d2:57:3a:a7:f3:a5:e0:34:45:f3:a0:ad:0a:9e:a9:ea:17:
         81:12:49:05:d3:c6:06:37:3b:a3:07:3f:f7:2c:13:ce:77:de:
         c4:e5:00:68:69:cf:a6:3e:d4:54:f9:80:23:8e:26:48:40:c5:
         86:ff:f5:fc:3b:bc:69:1a:41:aa:98:20:61:d1:7f:9b:0d:02:
         37:cc:2a:1d:ba:c3:72:de:36:7a:d4:fa:92:8e:ef:d4:07:49:
         f5:e0:94:04:9b:00:96:14:6a:20:46:85:cc:39:5b:f2:48:b0:
         7a:17:3a:21:31:f8:43:ea:ff:d3:46:26:59:71:e5:3c:2b:ab:
         f2:09:bd:45:50:20:d1:97:86:7c:5b:27:9c:0f:c2:4c:f4:73:
         2b:b6:3a:6c:df:22:9d:aa:4a:db:10:b9:01:d0:99:c2:28:c1:
         91:09:58:1d:37:41:d9:ec:11:37:b5:90:40:5a:70:a9:ce:a0:
         94:35:19:0e:57:b0:9c:4d:1e:20:4f:39:59:a4:68:e9:4a:1c:
         3b:19:e5:a9:66:b7:60:dd:bd:2a:b8:3f:a0:57:b5:a4:0f:43:
         34:1e:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:22:42 2025 by rpki-client