Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b9787ee1-302f-3d19-adb2-4f91823ffd84.roa
File:                     b9787ee1-302f-3d19-adb2-4f91823ffd84.roa (raw, json)
Hash identifier:          X7q5fW9SNxCb7jYozX1mjXtAACQDfiz2jrQj3PNva6g=
Subject key identifier:   8B:A3:D4:A1:7A:4E:BD:25:69:64:6E:DC:AE:B5:F5:B5:0C:AF:82:2F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AADF12450ED2B215AADF49580
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b9787ee1-302f-3d19-adb2-4f91823ffd84.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     32834
IP address blocks:        64.124.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:24:50:ed:2b:21:5a:ad:f4:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=6939dc3c-fe6c-441d-b632-a973fa37e37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:22:a8:40:6b:88:85:97:13:f5:79:29:4b:
                    b9:4d:e6:87:b0:0b:36:1f:23:df:12:29:b9:8c:ea:
                    2a:41:7b:0d:3f:b2:30:60:8a:70:6e:7f:5a:7a:b6:
                    0b:cc:af:fd:0c:1b:a5:3d:c6:7a:9a:2c:ed:08:d1:
                    ee:ab:dc:2c:63:94:de:50:27:29:54:f3:4b:52:96:
                    ae:be:57:ea:88:6d:42:6c:ad:b3:a2:df:99:d6:fd:
                    96:7a:2b:98:7e:88:56:83:de:d9:78:7f:e9:b2:49:
                    a1:54:1d:30:93:03:45:f3:cb:a1:ae:c9:69:65:04:
                    db:f7:86:c7:43:16:4b:e9:89:7b:28:bc:41:26:0d:
                    17:ed:2d:9b:af:96:01:d7:28:e2:e3:21:3c:c6:ef:
                    3b:c7:10:25:90:2f:22:52:6f:f0:ce:ec:33:b8:94:
                    79:a2:20:8f:d6:22:f1:a8:d1:b8:5d:18:bf:df:b4:
                    de:1b:3f:a6:2b:00:19:1e:7e:55:81:48:1f:d1:a1:
                    0b:08:a2:46:6f:1c:98:b7:fb:48:7e:f1:bb:f8:77:
                    ea:d3:e9:84:09:1d:55:47:f5:89:fe:61:20:50:bd:
                    a5:d8:c8:0c:a2:ee:5c:57:72:5a:08:00:5e:e5:e5:
                    26:f5:7b:b1:fc:7d:21:eb:f1:23:36:c4:61:e8:25:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:D4:A1:7A:4E:BD:25:69:64:6E:DC:AE:B5:F5:B5:0C:AF:82:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b9787ee1-302f-3d19-adb2-4f91823ffd84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:66:ab:1f:7c:bf:04:f5:e0:3c:14:f9:e7:15:8f:6d:44:82:
         1c:37:27:44:30:7e:15:17:3f:8e:be:ee:0f:06:55:ff:29:37:
         cc:75:c7:3a:f2:54:40:f0:46:43:e3:76:4d:77:e2:e9:dd:d9:
         94:c8:7e:36:9e:fa:bc:65:02:e3:a9:fc:ed:46:fe:89:f3:40:
         3e:c1:74:fc:20:9c:9c:e8:97:bd:fa:20:7b:57:53:39:be:c4:
         22:1a:8d:74:51:e0:2d:91:38:d6:bb:e5:fc:9d:c2:49:97:dc:
         67:3d:1e:1c:7a:17:2d:2a:29:22:8a:07:d7:14:d2:47:4a:8f:
         4d:59:30:31:40:40:92:cc:d9:f4:c2:87:48:27:0f:ec:d4:31:
         cc:22:20:af:ee:a1:b8:d6:a8:ba:c2:04:96:34:08:ba:f4:fe:
         c3:8d:6e:7e:2b:94:97:27:9f:48:0e:3a:a9:df:c2:e0:76:6e:
         29:fc:d5:27:58:dc:95:ea:ba:39:12:e8:38:75:fd:94:93:fc:
         3b:fb:01:33:0b:dc:74:b4:d5:15:af:0f:65:7e:1c:21:98:4e:
         12:a1:ea:5a:55:54:59:7d:60:61:bc:ed:06:33:39:fa:f3:f2:
         1b:dc:f2:d4:8c:02:a5:79:ac:72:bf:28:8f:82:4e:c2:ed:d5:
         ff:41:a7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:11:50 2025 by rpki-client