Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa
File:                     7aa03dbb-c767-31ad-805f-79f186089aa4.roa (raw, json)
Hash identifier:          qNUjubYX8QoJI1WSQQBS3Ev7xAiAKby0uuODjj71Ypw=
Subject key identifier:   D7:D9:05:68:93:53:C2:9A:6E:5C:45:6D:D7:32:A0:46:18:3F:0E:0E
Certificate issuer:       /CN=a5227ba9-e279-4048-a93b-e62de3502f68
Certificate serial:       010D0C9F4328584A1465708F22639A7171751080
Authority key identifier: 44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     395896
IP address blocks:        64.89.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:70:8f:22:63:9a:71:71:75:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5227ba9-e279-4048-a93b-e62de3502f68
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=7522712f-dfc5-4001-885f-c80fc3add6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:7a:8a:ae:f3:29:2d:81:cf:de:10:99:d0:
                    0f:0e:b9:d7:89:8a:87:88:4b:7f:a5:d7:17:e9:a1:
                    77:1e:7b:e6:50:d7:1f:ca:17:c9:26:b1:2e:c7:2f:
                    d7:9d:4f:56:18:32:a5:a8:0f:fc:c5:56:7c:dd:d1:
                    31:a4:1f:1d:98:e7:0b:11:4d:d2:ea:78:f1:40:16:
                    62:10:d8:0c:4a:24:d0:36:59:cf:4c:d2:e2:98:4a:
                    99:6f:3b:4d:db:3b:f3:2b:99:b2:61:4c:2e:09:73:
                    36:6a:4d:08:8d:be:a3:41:b0:5e:9f:5c:84:28:fb:
                    e1:11:ca:ab:57:04:00:01:c4:63:2b:8e:a0:7a:4a:
                    65:9d:53:36:49:3b:75:2f:eb:cf:1b:58:b7:73:1c:
                    0e:48:cf:7c:e3:cf:b9:80:e1:15:8f:17:56:c6:50:
                    a6:c0:0e:5c:cf:61:7c:4b:0a:55:85:21:fd:f6:93:
                    48:e8:49:f4:5d:be:2f:a9:a0:f5:e6:d8:59:d4:8d:
                    11:a1:8b:0c:58:6e:a4:0a:a8:22:6e:3e:55:35:10:
                    19:f6:90:86:06:3d:65:ee:73:bb:72:48:e2:d7:de:
                    db:a5:c3:04:6b:ab:08:0f:c2:21:ca:00:6d:dc:7c:
                    56:82:00:11:39:0c:58:5c:f9:6b:f4:3c:bf:6c:5e:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D9:05:68:93:53:C2:9A:6E:5C:45:6D:D7:32:A0:46:18:3F:0E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.crl

            X509v3 Authority Key Identifier:
                keyid:44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:78:5a:c1:e1:22:61:04:3d:64:51:5e:ac:56:c9:2a:6e:60:
         08:5b:cf:ec:4f:1e:09:0f:49:c8:13:09:c5:25:46:11:aa:1e:
         e1:d7:59:d3:f0:5c:f2:4a:5d:8d:83:20:3b:34:57:d1:0b:90:
         b9:17:db:87:b6:a1:51:98:c4:ad:a3:2d:d0:a2:1a:8f:e7:ff:
         fa:7c:c7:61:22:b3:91:06:35:04:f4:43:ce:b9:44:0d:e0:3c:
         76:d5:50:5c:25:a8:fc:b1:fc:43:df:a5:dd:b4:3a:48:64:2a:
         c2:1e:c2:2c:c4:4c:49:2a:b0:9e:ee:82:51:8b:a8:9c:16:d3:
         a9:ea:9e:49:ed:94:a0:cf:45:61:90:c8:87:0e:af:72:5d:0d:
         b5:53:a6:ce:50:2d:ec:e5:be:24:98:ed:2d:a8:95:f2:43:d3:
         03:32:49:7e:51:48:b1:24:2a:32:0b:d4:64:fd:ad:f5:60:d7:
         a4:87:16:83:01:5b:02:74:c9:56:9d:06:6b:ef:8f:8f:3d:ea:
         86:1d:fc:1a:17:35:cb:9d:66:a3:aa:bd:4e:d8:fc:1d:35:67:
         68:aa:a0:fe:95:8d:8a:ac:50:c0:c1:f4:73:6f:06:5c:92:74:
         82:18:60:81:a0:af:8e:da:15:4a:04:22:93:fa:3e:46:77:17:
         05:f9:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:07:41 2025 by rpki-client