Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa
File:                     d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa (raw, json)
Hash identifier:          Ee7kpyZ9upknB3aO3K+yhFldjwZETX95v/C8dUx+U4M=
Subject key identifier:   EB:4F:6B:4D:AC:A0:B0:1B:39:A7:E5:E2:11:B7:11:3F:E7:30:56:52
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F43285849D16508B0F623B9F887FDCA80
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     11650
IP address blocks:        64.250.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:08:b0:f6:23:b9:f8:87:fd:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=acaf2566-c0ed-4080-b37b-00a2ef2cfa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:f0:1c:aa:c0:f5:ca:5c:87:d8:df:9c:f4:
                    f8:ce:88:28:76:8f:fb:03:90:4d:0c:77:be:70:25:
                    3e:22:2c:9d:a1:d0:b6:2a:8a:37:8f:94:6c:92:6b:
                    00:27:59:b7:0a:9f:e7:09:77:db:70:d4:8a:e9:e1:
                    7f:c2:ad:bd:73:a9:39:33:72:e5:c0:ce:87:47:59:
                    0f:b0:dc:f1:a5:e6:81:77:c7:92:ef:1a:2b:16:92:
                    74:1a:f2:21:c5:9b:d5:ae:8a:c2:75:1a:3d:49:8c:
                    ce:a2:b3:86:d6:37:14:3e:ed:01:91:64:68:63:ce:
                    3e:79:fb:c1:9c:b7:2f:c3:72:2f:b5:09:cb:a5:04:
                    21:83:a6:a5:98:d2:38:a0:33:82:e1:69:25:bd:50:
                    e9:34:3d:0e:95:56:38:fc:8a:2b:43:3c:2a:c1:3d:
                    9c:46:84:6a:ed:c9:da:3d:05:3c:06:7b:6e:ad:3f:
                    50:b6:9e:86:ed:c5:a9:32:c2:24:54:1e:24:43:3a:
                    f6:8b:bd:ab:a9:a3:0a:5f:23:34:bd:e7:bc:a7:f3:
                    f9:13:45:da:d1:94:9a:ac:07:f4:29:8c:05:72:08:
                    df:0d:e3:ce:bd:ed:74:03:da:05:ff:61:e2:a1:31:
                    8c:d8:76:e8:9a:22:11:f7:db:82:6d:4a:8e:ce:b8:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4F:6B:4D:AC:A0:B0:1B:39:A7:E5:E2:11:B7:11:3F:E7:30:56:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:6a:fb:3b:0f:5a:fa:0e:18:0c:86:8f:b7:18:ab:77:8b:95:
         48:71:b0:98:19:f1:21:87:33:1b:26:2e:8f:c8:a6:14:71:86:
         9f:65:ae:3f:99:1d:16:7e:33:8c:37:22:d8:03:2c:77:68:e8:
         aa:04:ac:a9:8e:84:b7:8b:b5:a0:87:9c:82:a1:05:a4:9b:a8:
         6f:c1:ec:68:3b:ce:53:a0:ca:b9:34:d5:e0:a8:72:18:74:64:
         4d:d8:4f:03:d6:b6:72:65:58:c2:8b:be:8f:00:d4:37:49:1a:
         cd:d7:37:fb:fb:aa:a7:c0:91:3b:aa:77:84:7e:de:f2:94:cb:
         28:f5:75:29:59:fd:47:23:2d:a9:bc:1a:c9:c5:d2:c4:f2:6c:
         55:14:f8:f5:d0:72:ca:d6:30:18:fb:af:fe:6e:e5:56:0a:93:
         c8:aa:c4:44:d7:bd:10:d6:e7:cf:bc:92:8e:d3:7f:cf:5b:50:
         f6:77:22:22:3b:fe:1f:7c:5c:14:da:74:4e:73:f0:73:4f:05:
         98:99:3c:69:81:6f:cb:7a:e7:6f:f8:75:37:62:31:06:66:56:
         cf:67:94:9e:92:af:03:4e:93:0c:53:c6:0b:03:23:43:ce:e9:
         c4:c2:81:2f:08:97:30:b7:4f:ec:ae:df:05:c4:fc:3a:a8:e7:
         5d:d2:44:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:20 2025 by rpki-client