Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa
File:                     3253d608-779d-3d49-9ec9-04e34cf6f872.roa (raw, json)
Hash identifier:          eENIeJCbeWwL3bKHTdwY7eLVhvrAiLwu+II8YKNrz6M=
Subject key identifier:   D4:88:C7:5A:27:B7:F0:21:4D:73:75:98:13:B1:BD:A9:8C:41:C2:57
Certificate issuer:       /CN=0432b247-64bf-4a12-bc99-32dbce58a455
Certificate serial:       010D0C9F43285849E7BA6882FA4FFB4B94B14440
Authority key identifier: 00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        64.110.138.0/24 maxlen: 24
                          2620:104:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:68:82:fa:4f:fb:4b:94:b1:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0432b247-64bf-4a12-bc99-32dbce58a455
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=bd23ba59-5e6e-42c0-8b54-1c571e0db774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:80:a6:31:cb:40:d9:42:4e:7c:05:99:e5:c2:
                    3b:0e:40:c8:f0:be:25:e5:c9:1a:c3:31:a6:b7:7e:
                    db:c2:21:56:fe:94:42:98:e3:17:f4:87:8b:7a:87:
                    0b:8c:cb:8f:38:94:ef:f2:01:88:0b:9a:52:c0:48:
                    c7:d5:8b:fb:36:09:e6:dc:18:ef:e8:a5:45:aa:0f:
                    1d:a2:e3:d3:b5:44:c3:ee:c5:02:13:ae:6e:35:04:
                    44:bf:bf:2b:b6:95:f5:27:9d:d7:48:ba:f5:be:29:
                    db:5f:1e:5f:37:4b:a3:92:0d:73:9b:fa:18:2a:29:
                    6b:de:17:7b:c8:37:65:db:ef:53:4b:1a:9e:6d:28:
                    b7:a9:df:05:e6:ce:0e:5f:37:fe:5d:66:54:a7:85:
                    5b:7f:ce:f3:3a:6a:b8:74:1b:2f:86:e1:e0:90:fb:
                    ee:ec:84:82:d4:47:27:b0:ab:40:b5:83:5b:28:bd:
                    29:48:9e:17:a5:d1:6d:10:74:53:b4:bb:17:0f:96:
                    5a:b8:8d:ec:f4:e0:27:f9:61:ad:98:59:cd:31:c9:
                    2f:51:ae:f7:40:ad:3b:92:31:8b:6f:68:d6:00:dc:
                    32:31:17:f1:bb:96:f8:d3:5d:8b:08:12:23:86:e0:
                    96:4f:a9:31:13:dd:51:5c:c7:4f:b2:10:b0:a5:1b:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:88:C7:5A:27:B7:F0:21:4D:73:75:98:13:B1:BD:A9:8C:41:C2:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl

            X509v3 Authority Key Identifier:
                keyid:00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.138.0/24
                IPv6:
                  2620:104:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:b6:e8:35:91:1f:d5:60:8b:78:57:92:3a:aa:38:b9:d4:
         a5:eb:40:e7:f7:87:05:c7:10:f3:92:8d:17:8e:42:93:ae:72:
         cd:f7:4c:42:da:b5:f1:41:8a:fb:f6:de:61:0a:d4:4a:12:bb:
         4f:bf:2f:e0:fd:b5:50:6f:7e:8b:2d:98:f9:94:a0:05:94:74:
         2d:08:81:d0:17:87:31:ac:d2:fc:81:87:9a:3e:8a:dc:96:75:
         a6:16:1b:e7:18:f1:5b:22:44:a0:bb:8d:31:c6:fe:9a:e0:7a:
         7f:8f:1f:7a:0d:33:46:fe:4c:7d:00:60:ef:d2:b2:8a:ec:bc:
         8a:c3:f0:50:7a:97:ad:c2:e8:66:cf:00:13:9e:8e:aa:a7:f2:
         7b:2d:67:7c:20:fa:4a:28:f0:ba:e9:a0:16:06:4b:7e:22:7f:
         9b:bb:db:33:6d:a0:5d:44:dc:a5:c3:3f:d6:97:43:91:3c:7f:
         32:81:2c:7f:2d:24:de:b0:8a:c1:4e:31:a1:29:c7:44:71:a5:
         95:b6:c5:ea:2f:b2:1e:95:5b:d1:9b:c2:18:da:d5:5d:54:7d:
         58:94:9c:62:dd:2d:cd:09:0c:67:bd:8b:0e:33:ad:d7:ee:10:
         fb:0b:40:df:72:3b:f5:38:49:b2:33:24:db:c4:59:36:09:f2:
         df:7d:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:54:04 2025 by rpki-client