Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/a0f5cadb-8e77-3c15-8802-7b30c0f5f650.roa
File:                     a0f5cadb-8e77-3c15-8802-7b30c0f5f650.roa (raw, json)
Hash identifier:          26g6sPoYOYAjF8fdik7O9JfP4EbauE3+e1bmESj7qoQ=
Subject key identifier:   51:8A:A0:64:10:5F:CA:85:B0:18:BA:80:8F:A2:E2:25:29:7E:FF:3E
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584A8FF2E36218DC0A4339085D00
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/a0f5cadb-8e77-3c15-8802-7b30c0f5f650.roa
Signing time:             Fri 18 Jul 2025 19:10:45 +0000
ROA not before:           Fri 18 Jul 2025 19:10:45 +0000
ROA not after:            Thu 16 Oct 2025 19:10:45 +0000
asID:                     14618
IP address blocks:        64.40.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8f:f2:e3:62:18:dc:0a:43:39:08:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Jul 18 19:10:45 2025 GMT
            Not After : Oct 16 19:10:45 2025 GMT
        Subject: CN=93bd7933-cf8f-46ea-9d5b-d8d6968a4e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:24:80:0a:49:ba:38:3e:dc:fb:d1:49:dd:
                    13:e4:b2:da:2e:a4:64:eb:d1:81:0f:e3:57:11:bc:
                    97:29:1c:f3:a1:b2:3b:0a:90:0e:da:f3:00:eb:37:
                    c1:3c:d3:7d:18:46:4b:12:f4:36:c0:e5:26:b1:c4:
                    44:f0:87:7f:2a:f9:43:63:bd:b7:34:45:aa:0d:32:
                    db:49:8e:46:42:88:54:81:db:b6:ad:4a:d3:27:dc:
                    88:aa:a9:14:ce:01:b8:35:31:d9:89:10:57:8b:d7:
                    31:18:bb:f1:03:dc:e2:bb:bb:80:07:2c:af:5f:97:
                    32:9b:74:3c:b9:16:d1:05:7b:17:0e:3c:48:17:82:
                    c5:75:eb:7f:8d:ab:0c:4e:7c:a6:a0:7d:da:88:b2:
                    c2:f7:81:b0:60:3c:d4:92:16:16:bd:e5:0c:ca:e5:
                    34:80:64:24:18:12:08:89:ab:3e:08:2d:fb:64:51:
                    a7:52:c7:fc:9f:d6:9e:b8:68:5e:be:18:c1:5b:0a:
                    54:bd:f9:ae:61:d7:0c:d2:e8:16:02:c6:fc:4c:10:
                    4a:96:3f:bd:48:aa:36:12:c0:88:47:db:68:ac:a5:
                    0d:ea:8d:6c:aa:87:a1:e3:71:be:17:a0:c1:8a:96:
                    ef:ef:41:16:91:5b:b6:75:45:98:93:f7:b8:a5:12:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8A:A0:64:10:5F:CA:85:B0:18:BA:80:8F:A2:E2:25:29:7E:FF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/a0f5cadb-8e77-3c15-8802-7b30c0f5f650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:9a:c0:f1:a6:36:07:12:9a:86:db:dd:35:70:28:bd:54:
         37:ed:73:ba:c7:16:19:9a:e0:62:dd:67:69:d0:5b:e5:0d:fe:
         7f:3a:25:e0:f8:75:79:52:11:f0:19:2d:24:2c:19:26:6c:32:
         36:42:47:b2:9e:c6:51:2d:d2:d4:4a:48:ad:24:fb:eb:6a:36:
         76:34:d8:40:61:a2:fc:f2:9c:49:44:13:5a:8e:88:03:74:d0:
         21:2b:93:a7:3a:65:aa:1e:19:bb:3d:0d:03:1d:5c:f0:50:35:
         67:88:3f:27:45:ac:39:61:a1:44:6c:c2:0f:dc:d1:d6:20:03:
         9e:f5:ce:f9:11:6b:95:d8:a9:58:33:12:3f:9a:d3:6d:bb:5b:
         66:41:a3:18:af:2c:bf:f0:26:9f:79:af:86:8e:20:7a:42:0a:
         0f:ba:00:10:1b:e2:64:96:dd:be:c0:32:20:56:d2:90:9d:ee:
         11:ad:b3:b8:07:84:f4:64:b2:c7:01:c3:26:9c:79:67:ca:5f:
         e9:41:be:65:07:1a:1a:80:1f:ae:0d:4b:63:47:d0:1e:cf:2f:
         df:c4:8d:78:e2:10:97:cf:e0:92:3a:71:c8:7d:4a:46:4a:c6:
         65:7d:34:b7:b0:ef:1b:e9:29:6e:da:72:61:99:a2:92:1a:2c:
         0b:ac:d6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:46 2025 by rpki-client