Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa
File:                     42218378-fc67-3b7b-af80-93064b4e7d2a.roa (raw, json)
Hash identifier:          zh/6c80ELzYnk/3UURA5ZKBqQ49MHBNj6kG9N9H7FGI=
Subject key identifier:   FA:3D:94:52:F7:FE:95:01:A1:73:6F:1C:C6:A9:38:43:E3:ED:D8:6C
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285849D165015DD7BEAA085001FF80
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     7131
IP address blocks:        64.86.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:01:5d:d7:be:aa:08:50:01:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=6d398512-4c78-4634-8e02-1377df765bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:db:ba:bc:ba:06:75:33:0d:90:47:bc:e0:18:
                    c8:09:0c:86:17:a7:29:c9:c6:38:93:1c:c1:f0:32:
                    09:90:1f:b2:c6:f2:00:09:fd:a5:c0:61:b4:45:80:
                    e5:80:d1:90:44:b5:f4:2e:f3:ff:6b:ae:a4:eb:e1:
                    60:a3:80:67:30:87:ac:d3:68:4c:a3:7e:be:8b:b2:
                    dc:ea:6b:22:a7:81:bb:fa:db:7b:f8:57:09:d1:ff:
                    c3:f4:86:e8:45:e2:21:c4:8e:1f:39:8b:ec:5b:57:
                    e6:da:28:4e:e2:d4:a2:b5:97:e6:7f:12:23:23:f3:
                    03:b8:0d:c8:61:58:9c:e8:88:11:03:fb:79:67:6b:
                    37:08:a0:1c:d3:f5:17:b6:d9:ec:30:db:5f:92:0e:
                    9c:07:51:99:ef:14:87:cd:aa:bc:4d:85:c9:c7:79:
                    94:7a:dd:5e:d0:d4:a7:4c:dc:6a:08:c5:95:3e:b4:
                    37:97:e3:a8:85:fa:a6:67:1c:f9:8e:34:13:1a:c5:
                    6b:f7:f7:91:25:7a:28:47:de:df:48:89:0a:ad:6d:
                    a2:70:f9:fa:43:16:23:1e:dc:ae:8d:f9:9f:51:0e:
                    df:a3:4f:33:7f:d4:cb:35:0b:8d:f1:3a:2f:a1:c0:
                    63:c1:3a:db:2c:71:f9:81:b7:4e:5c:c8:89:3b:00:
                    c4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3D:94:52:F7:FE:95:01:A1:73:6F:1C:C6:A9:38:43:E3:ED:D8:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:61:64:71:ce:eb:e3:a7:be:ad:73:06:a8:03:6b:85:2f:
         ca:17:13:3a:65:fe:e1:94:87:28:07:da:c6:64:4d:79:dc:8d:
         be:c5:7a:3d:34:06:dd:95:1e:a3:ec:57:7a:1d:a1:dd:db:3a:
         82:94:91:e1:71:b2:03:f1:be:b0:8f:bf:08:c9:b1:28:85:26:
         af:83:78:38:44:16:83:18:30:82:4c:80:5c:8e:a9:c8:5a:d4:
         6f:c0:05:7b:eb:49:1f:e9:28:12:7c:2d:4f:22:0f:a1:c9:76:
         5f:72:f1:53:27:c2:4b:aa:cc:cf:97:a1:dd:ea:b9:7c:22:87:
         20:6d:26:15:64:17:02:9e:3a:a8:5f:3e:72:75:4a:cd:0c:4e:
         a9:2e:2d:92:0e:27:29:16:ee:cd:b4:fb:c7:d0:a7:7f:50:7c:
         3b:19:e6:bb:97:55:24:4f:78:73:68:2f:42:4b:e3:67:36:7a:
         00:37:6f:ae:15:34:c2:54:d8:e0:3e:c8:75:3e:5d:4a:13:84:
         1a:2a:c7:95:08:bb:f6:c1:a5:56:ae:38:b2:63:df:41:a3:8d:
         1f:a8:01:3e:df:a5:96:3d:d8:b9:aa:df:89:af:cf:4d:85:b0:
         c6:1f:1b:6e:2b:a7:c9:2c:ac:b5:86:de:01:43:22:32:02:0c:
         2a:c6:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:06 2025 by rpki-client