Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/68409e2f-b646-3c23-a4e7-90fb9fdc9562.roa
File:                     68409e2f-b646-3c23-a4e7-90fb9fdc9562.roa (raw, json)
Hash identifier:          vJ5dW9Isdk80bGJ+tz1AEYQx/LAOj8ZzHtiRdYyP8+4=
Subject key identifier:   6A:53:9C:1C:D5:B5:5E:85:33:33:FA:B7:2E:8A:BF:5F:02:B7:D7:54
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584A769A31465CBE8BE20371F63A
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/68409e2f-b646-3c23-a4e7-90fb9fdc9562.roa
Signing time:             Wed 09 Jul 2025 17:16:50 +0000
ROA not before:           Wed 09 Jul 2025 17:16:50 +0000
ROA not after:            Tue 07 Oct 2025 17:16:50 +0000
asID:                     16509
IP address blocks:        64.40.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:9a:31:46:5c:be:8b:e2:03:71:f6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Jul  9 17:16:50 2025 GMT
            Not After : Oct  7 17:16:50 2025 GMT
        Subject: CN=7c623f8c-b3de-4c17-902c-c8190dac2772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:a8:3e:6e:8f:e0:9c:8f:6e:69:2a:71:0c:
                    30:fb:f2:22:12:47:36:3c:94:a6:a8:13:b8:48:ce:
                    cc:fa:99:cf:5a:2f:60:03:ac:e0:e1:3f:aa:7c:ca:
                    20:61:d1:d3:27:cb:71:f3:7e:8d:ad:07:14:fa:14:
                    28:f9:b2:70:d2:f5:0a:d2:90:e1:10:f8:91:79:58:
                    b9:13:22:de:c5:25:44:98:d5:35:67:9c:bf:b4:49:
                    32:95:6f:49:09:66:c4:7d:f3:45:94:6a:6b:dc:1a:
                    f2:0c:2c:5c:01:cc:a3:b6:bb:86:1d:bb:36:36:9d:
                    98:d7:42:f5:e3:db:77:87:e2:38:b6:23:f9:ba:ca:
                    ac:06:9e:58:5d:5e:92:12:2e:4e:f3:8a:48:27:ca:
                    df:7f:cc:37:06:d3:3b:fc:5a:2c:bf:9d:55:1f:2b:
                    c9:38:57:ad:e7:30:7e:53:54:f2:a7:38:d3:d0:4f:
                    bc:ae:68:4c:e9:e9:e8:32:97:bf:cd:f2:09:7a:e4:
                    96:c5:66:f9:18:8b:6c:6b:ca:a9:b2:2b:e2:04:64:
                    17:55:dd:4e:34:30:78:e1:8a:66:66:ea:61:7c:12:
                    f2:e5:ff:7e:3c:04:72:b7:c2:aa:f4:c1:ad:dc:ad:
                    d4:80:e2:0d:06:29:73:51:80:5c:d0:8e:4e:f4:12:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:9C:1C:D5:B5:5E:85:33:33:FA:B7:2E:8A:BF:5F:02:B7:D7:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/68409e2f-b646-3c23-a4e7-90fb9fdc9562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:dd:77:99:20:3b:2e:8f:ca:f4:a1:82:de:27:aa:b1:b5:57:
         0e:86:47:51:b2:37:d5:67:63:2a:d6:c8:3a:a4:86:5d:ec:b5:
         4e:68:51:b6:b3:a5:d7:7c:eb:8b:87:51:3d:fe:e7:c1:4f:54:
         9f:e5:5b:6f:68:ce:80:51:bc:37:21:49:57:d8:48:c0:f4:06:
         4e:ab:d6:a2:a7:3e:3b:d5:0d:0b:a0:11:ca:e9:ea:06:25:cd:
         f3:25:b4:f3:98:60:eb:73:05:5b:ae:08:de:6a:98:7d:0a:42:
         d3:6a:13:53:32:28:74:e3:62:8e:91:cf:7c:ed:9b:84:9e:10:
         53:c7:00:92:a8:5b:90:5a:9d:48:96:d8:30:31:2d:94:0a:15:
         f0:ac:43:d5:44:e9:c3:08:e8:1a:b8:1c:9f:ee:db:70:b5:79:
         83:00:21:a8:65:48:24:b9:16:51:39:e1:6f:1e:89:2b:11:73:
         a4:ff:aa:24:f1:4d:1a:ab:31:cc:c8:73:6d:db:b6:1a:9a:c3:
         8e:92:93:64:4d:2a:4f:28:fd:32:9a:00:eb:5d:b6:0e:c4:29:
         8c:ec:04:20:c9:3a:31:d5:6e:c1:76:88:9b:5d:66:85:5c:1e:
         cd:86:42:03:fd:5a:7a:99:51:c7:e8:b3:b0:9b:d4:97:29:fa:
         d9:80:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:08 2025 by rpki-client