Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/86b85971-9067-3bf6-a919-91da36766beb.roa
File:                     86b85971-9067-3bf6-a919-91da36766beb.roa (raw, json)
Hash identifier:          857pZIoOgwyKmL0MQHPqvaAGL2in+OjqfXLJF/JHppc=
Subject key identifier:   BD:24:85:30:8A:BD:84:56:1F:81:77:19:EB:AF:A3:EC:8B:9A:23:DB
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F43285849BF3F652617DB4B3A35649A00
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/86b85971-9067-3bf6-a919-91da36766beb.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     397041
IP address blocks:        64.112.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:65:26:17:db:4b:3a:35:64:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=75104653-196f-4149-b8bd-d33bdae218c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:df:da:70:93:10:37:96:43:6c:81:14:2d:
                    eb:ea:b4:2d:57:df:40:9f:e5:8e:e8:cb:8a:6b:80:
                    1a:a0:3a:b9:d0:47:2c:13:08:c8:32:ba:d0:a1:20:
                    73:fc:8f:3c:27:10:8d:5f:13:c6:6c:b0:75:34:ea:
                    59:de:43:f8:07:21:83:92:b9:b4:3d:38:63:06:c3:
                    4e:83:8f:26:8c:43:83:02:95:eb:ab:33:8b:29:84:
                    da:82:e7:78:bb:62:26:88:f6:09:bc:16:3b:ac:38:
                    06:47:83:00:7e:95:11:8c:4e:6c:35:ce:74:6d:dc:
                    82:11:26:66:75:94:5f:96:cd:8d:ba:4b:cb:fa:96:
                    b1:23:08:fc:97:08:74:aa:8e:ec:4e:72:2b:fd:5c:
                    c1:f8:e5:53:7f:09:db:fe:c9:48:6c:41:c7:a4:a3:
                    94:0b:ff:ee:73:ae:17:86:53:bc:6b:a5:26:e3:ee:
                    e3:42:55:f6:77:8c:ee:61:20:b4:d5:80:d1:5a:9b:
                    06:35:37:c7:9a:d4:c4:81:ce:72:86:93:02:05:5b:
                    ba:86:e8:7c:30:29:cc:9a:7b:89:a4:89:53:ff:dc:
                    58:5f:8a:81:a4:fd:7c:91:3c:47:08:18:8e:95:39:
                    00:5d:4a:b8:9d:c6:3f:43:61:f3:8f:bf:7f:cd:cf:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:85:30:8A:BD:84:56:1F:81:77:19:EB:AF:A3:EC:8B:9A:23:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/86b85971-9067-3bf6-a919-91da36766beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e9:06:4c:94:5c:93:d6:b1:36:43:5a:b3:17:e6:e5:d7:06:
         c9:c9:16:b5:fb:a6:fd:23:f0:d3:3d:a3:51:76:11:1c:48:d5:
         fc:81:b3:91:4e:31:7c:64:8f:c0:9b:1f:09:b6:e2:b3:3b:6d:
         fa:f6:3e:27:95:33:a8:94:07:b5:a3:0b:cd:20:75:bb:ff:9d:
         57:68:f5:ea:50:96:bd:b4:8c:b9:47:56:2d:e1:01:2f:a4:31:
         6a:e4:b5:07:b8:88:73:d6:f0:aa:e3:11:d0:7b:d5:b1:3f:e8:
         76:d1:4a:78:4a:cf:1e:fc:91:2b:52:a8:74:08:53:c1:39:fc:
         ef:a2:66:8f:a0:ee:3f:dc:7e:1e:14:8f:67:29:2a:4b:83:31:
         55:67:e9:f0:33:84:97:4d:1f:34:90:ce:4b:2a:bd:b4:d9:3b:
         c1:da:1b:91:ea:0b:2e:e5:c8:b6:9e:3a:b1:2c:00:be:83:f1:
         94:80:04:82:17:45:86:96:47:89:3f:80:7e:33:b0:0c:2e:bd:
         d2:ae:ea:bc:39:6c:8c:dd:85:b1:42:42:6f:b6:e9:3d:81:b2:
         df:ec:ff:b9:3a:a9:03:f7:d7:c0:63:63:00:ca:b8:51:fa:88:
         b6:9c:53:9c:35:a9:21:4c:f0:07:f4:76:65:4b:c1:e9:94:41:
         ba:52:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:33:00 2025 by rpki-client