Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/c277aea4-c8ac-3a83-b93a-1bcf9a7cf488.roa
File:                     c277aea4-c8ac-3a83-b93a-1bcf9a7cf488.roa (raw, json)
Hash identifier:          G94KYAPIKh+icLoG1oP5Wdu7G3knUgHztFfVWkFhXwI=
Subject key identifier:   AB:71:8E:B4:38:7D:FF:98:52:9C:7F:17:7B:95:C6:99:84:84:3C:B2
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584A7699EE0BC26271BE89D7ABC0
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/c277aea4-c8ac-3a83-b93a-1bcf9a7cf488.roa
Signing time:             Wed 09 Jul 2025 17:16:18 +0000
ROA not before:           Wed 09 Jul 2025 17:16:18 +0000
ROA not after:            Tue 07 Oct 2025 17:16:18 +0000
asID:                     14618
IP address blocks:        64.40.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:99:ee:0b:c2:62:71:be:89:d7:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Jul  9 17:16:18 2025 GMT
            Not After : Oct  7 17:16:18 2025 GMT
        Subject: CN=71b8e061-a76e-4388-85ec-2de36403a5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:87:75:d0:60:68:bd:d8:64:35:6a:1a:54:
                    c5:56:ec:f7:ac:8a:10:04:78:86:e3:72:05:7a:fa:
                    62:5c:fa:1d:e3:a5:30:bb:47:5b:5e:b3:f4:ef:6f:
                    5c:9b:c1:ea:21:82:c4:a8:5e:96:96:a3:80:78:8a:
                    33:70:8c:a2:bb:40:53:93:cd:1e:1c:30:95:30:ea:
                    2f:4f:a7:2a:cd:9d:1f:7c:97:00:87:fd:be:81:15:
                    72:16:54:6a:31:4d:2c:82:d1:c6:d9:af:fa:6f:e3:
                    2b:c0:fd:21:ad:cd:2f:1d:e0:7a:64:06:a3:3f:0b:
                    66:4f:e8:60:62:ff:84:e1:d5:f3:fe:0f:75:cb:0f:
                    9e:bf:38:db:28:6a:a2:74:13:de:ef:6e:38:35:65:
                    f6:81:99:4e:26:81:63:02:5b:65:8b:a4:31:ff:1c:
                    1d:0e:d5:d1:30:87:94:be:2a:a4:7b:4c:8f:45:06:
                    9f:c1:ad:69:83:c3:74:b3:2b:e8:34:35:d3:37:5d:
                    8f:8e:c8:e6:4f:14:88:43:f5:2e:34:d7:f3:4c:e4:
                    30:f6:fc:b5:7d:c8:4d:f3:53:6f:07:ea:9d:d1:b2:
                    86:b2:b1:90:d4:12:43:8e:16:0d:34:8f:08:24:7c:
                    53:9c:ee:78:33:f1:7b:8f:c1:ff:67:54:28:00:26:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:71:8E:B4:38:7D:FF:98:52:9C:7F:17:7B:95:C6:99:84:84:3C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/c277aea4-c8ac-3a83-b93a-1bcf9a7cf488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:50:a9:d3:22:c6:ee:93:f9:dd:e1:e4:3e:2b:4c:77:a5:
         ca:b0:a3:bb:ff:d5:a7:8c:1e:d8:0a:77:95:3c:14:b0:46:cc:
         39:12:82:7b:d3:0b:2d:16:c1:09:47:82:b5:70:0a:7d:4f:04:
         b8:38:44:ed:c6:b6:83:5b:bd:7a:f4:a5:b6:3b:ec:56:f0:03:
         09:26:aa:26:42:4c:94:91:64:b0:ef:81:17:12:22:b3:5c:05:
         5f:23:79:d6:3e:47:91:f8:6f:56:f6:d8:1e:c7:73:f6:dc:af:
         00:ee:2c:70:f0:cf:a3:75:3c:42:22:5c:06:8e:b3:7f:51:8b:
         cb:fb:60:4e:66:07:3d:9b:c2:0b:99:b7:75:e5:7f:f8:1e:38:
         e7:9f:99:cc:08:56:5f:6f:df:a1:65:cf:69:81:f5:f1:5d:6e:
         e2:dc:1b:99:b9:0c:58:83:77:33:55:9c:08:ef:0a:27:ca:dd:
         95:d6:d8:07:09:10:7e:a1:93:66:6e:d6:8b:97:85:40:06:f0:
         38:57:20:b6:56:a4:ea:85:e3:23:e0:3d:22:d4:ff:94:3b:cb:
         a1:c0:25:1c:85:4b:69:97:d8:56:1c:f0:20:cb:36:d2:fc:6a:
         41:9b:a0:61:8b:63:ed:54:f4:0c:80:40:ff:22:d6:55:08:7c:
         49:86:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:44:45 2025 by rpki-client