Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/a3b19a12-3d6b-30ed-b249-6ec868ac7738.roa
File:                     a3b19a12-3d6b-30ed-b249-6ec868ac7738.roa (raw, json)
Hash identifier:          1UmF+jg/FglcVSQvQ2lynxhQBGsT7OEhwdML2LLl4Iw=
Subject key identifier:   19:B9:91:F6:A3:FB:B9:3E:0D:B9:A8:92:E1:AB:AE:CA:9A:4D:D5:0D
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F4328584A7FE090077D3F06FE622CF280
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/a3b19a12-3d6b-30ed-b249-6ec868ac7738.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     21859
IP address blocks:        64.72.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:90:07:7d:3f:06:fe:62:2c:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=44545bc7-5fc3-4af6-af7b-dba0bb33c0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:0a:0d:c6:ad:2d:47:9a:7d:64:ec:71:e3:
                    a6:c7:62:8d:5d:83:35:45:d4:30:de:4a:d2:22:25:
                    e2:78:d8:50:3e:ab:66:0f:14:e8:09:11:36:d9:e2:
                    ae:0c:cf:96:42:77:01:c2:c5:a8:f9:5f:f2:8d:11:
                    9b:54:37:f3:81:e0:5c:39:fe:ac:bc:29:2a:3e:bb:
                    b8:9a:c7:b9:eb:2f:6b:d4:5b:f3:d5:ab:18:a8:10:
                    76:2e:05:54:ac:44:2c:25:3b:1d:42:ef:1d:4a:d8:
                    29:25:f2:13:7d:d5:a7:28:95:5d:48:5e:26:f3:40:
                    8c:74:db:af:04:6c:09:c0:c8:af:51:1e:fd:a0:20:
                    d3:99:51:a8:06:72:c8:5a:62:6f:9f:29:ab:fe:7f:
                    b8:5b:4c:d0:c9:0e:d2:ed:69:86:f9:3e:7b:2d:a9:
                    41:f4:df:56:44:69:72:23:f3:eb:42:2a:10:11:d1:
                    ea:04:f9:8b:c2:48:8f:8e:65:a1:7a:68:69:31:72:
                    8d:e3:09:28:ca:03:d9:94:ef:45:99:87:d6:d3:f6:
                    e1:a8:90:46:96:e0:fe:81:87:96:38:38:a1:e0:59:
                    30:c5:df:4c:df:d8:c5:f9:ea:11:f8:54:0e:ba:3b:
                    75:c1:e4:9d:6d:35:ea:05:77:9c:ca:48:ea:30:0b:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B9:91:F6:A3:FB:B9:3E:0D:B9:A8:92:E1:AB:AE:CA:9A:4D:D5:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/a3b19a12-3d6b-30ed-b249-6ec868ac7738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:37:b0:1b:0e:ef:55:84:94:15:9b:bd:9a:20:6c:f9:78:66:
         3c:13:bc:37:25:f6:ab:42:4b:4f:92:e1:c6:e5:96:03:a3:d0:
         5d:e7:5c:36:d8:36:57:48:6b:ff:0f:56:68:21:fd:6e:b0:4a:
         2c:9b:27:6b:bc:20:9f:df:30:13:d7:94:56:dc:86:aa:8c:8a:
         26:0c:17:5c:0e:db:01:d6:67:fb:05:c5:7a:eb:d8:d8:87:2c:
         99:19:44:95:83:09:01:19:42:2e:78:a4:1f:f9:78:45:49:52:
         86:6d:4d:1c:45:8b:db:7e:7e:62:14:37:a6:27:22:43:ca:e5:
         dc:6b:6d:1b:4a:bc:f2:e1:fc:9f:36:d0:5e:16:aa:d2:29:7d:
         99:a2:63:96:8c:50:ce:9d:23:35:33:c1:e4:aa:dd:4d:e3:bb:
         b9:1f:a1:09:fb:8f:f7:d6:7c:5d:e6:f2:53:85:23:7b:1e:85:
         d7:bf:e0:11:05:84:51:6e:8c:50:2c:dd:99:cf:78:0c:6b:c6:
         92:47:36:70:fc:cc:5a:79:42:e1:38:24:49:4c:46:35:92:c7:
         20:ad:ad:96:b6:31:39:23:ef:22:da:24:1c:df:c5:79:c5:2e:
         d1:90:51:72:92:9b:5e:6a:a8:44:29:f8:0d:db:f2:25:d2:e4:
         d7:07:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:10:19 2025 by rpki-client