Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/8a0dcecf-8d56-3dcb-b5db-f39f1b01fc45.roa
File:                     8a0dcecf-8d56-3dcb-b5db-f39f1b01fc45.roa (raw, json)
Hash identifier:          /p+JC2IqNZg5Es+hb7nL50MV2lvWspOR8d+4eOhoRpM=
Subject key identifier:   F1:DB:63:64:59:05:A9:F7:87:95:60:4C:A2:C0:48:61:CC:68:B3:D3
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584A1B5FF171E18F8F2ED55ABBA0
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/8a0dcecf-8d56-3dcb-b5db-f39f1b01fc45.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     0
IP address blocks:        107.97.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f1:71:e1:8f:8f:2e:d5:5a:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=bdc906ac-fcf9-49d0-95c9-6cce6a307501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:df:59:f2:81:a8:a5:2e:1d:87:91:76:7f:
                    1c:91:b4:bb:84:fa:52:7f:2d:28:1a:94:6a:cc:69:
                    57:72:18:29:21:9d:08:0e:3a:79:64:38:f4:95:78:
                    0a:62:96:4f:a4:4f:74:98:5a:46:79:78:43:de:de:
                    19:42:0f:24:a5:be:57:db:70:03:13:d4:46:82:7d:
                    b7:21:d3:f2:e7:ac:2a:dc:7a:2c:f0:94:b5:d2:14:
                    31:f2:b5:7f:03:85:2c:a2:b8:e6:64:6c:bf:ec:0f:
                    90:ef:63:ce:f1:8f:cf:1b:12:ea:9c:d4:d4:5a:c0:
                    8d:54:0a:bb:4e:e1:c6:47:5a:07:67:65:a2:48:97:
                    78:f7:ba:82:70:f7:82:18:b1:f4:d1:5e:ec:8a:a1:
                    de:97:b4:d6:78:18:9d:dc:75:43:68:2b:39:51:19:
                    49:e6:27:73:ed:66:4e:e7:e0:fa:dd:d7:1f:e8:4f:
                    d8:1b:7f:6d:3d:dd:f2:ef:6f:c1:d6:3b:bc:42:d3:
                    51:10:6b:18:88:3f:89:54:8e:6e:5f:0f:c4:c9:33:
                    d9:61:dc:95:9a:d5:7a:af:99:4d:b5:7c:43:6e:f5:
                    a2:05:92:63:13:15:02:b9:a6:fc:a3:f5:9c:e0:be:
                    1e:20:ec:f7:11:d1:53:ab:b6:11:33:f0:b6:56:9d:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DB:63:64:59:05:A9:F7:87:95:60:4C:A2:C0:48:61:CC:68:B3:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/8a0dcecf-8d56-3dcb-b5db-f39f1b01fc45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.97.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:18:78:c6:cf:a7:bd:2b:7e:bb:d1:a2:0c:a2:4d:ec:1b:
         31:d6:d7:59:a2:dc:92:42:31:39:b9:18:05:d6:5a:8f:9e:70:
         bd:ef:5d:d0:7f:89:6d:9f:e4:af:f8:fa:7d:57:5a:51:07:de:
         4f:c6:9e:40:f6:05:85:01:c4:b1:0e:58:0f:24:f8:22:8a:87:
         45:9d:00:0c:88:24:98:cc:a2:db:35:9d:3c:7e:65:97:64:de:
         ef:67:b4:67:5f:fe:b3:83:89:e7:21:c8:96:3a:58:78:d3:f8:
         99:bb:0a:8a:a9:e6:d3:fe:c0:1d:a5:b0:87:58:92:09:9e:5b:
         db:c5:89:94:31:14:05:13:43:2e:0e:f8:c2:03:5c:69:a5:23:
         d6:ab:8c:53:6d:f7:f1:be:31:54:10:a2:ae:05:ab:d7:8b:54:
         32:d7:24:1e:3e:3b:f7:97:c5:85:b9:82:84:ac:3b:f0:45:83:
         80:40:33:1f:43:08:74:73:8b:b6:8c:4e:92:af:b8:2d:da:4f:
         a1:44:21:ba:c8:00:90:9c:ea:9e:be:96:0f:74:05:27:b7:3c:
         45:f2:b3:33:38:8b:31:b2:96:5f:3e:c7:ce:76:37:11:5f:c3:
         db:c3:09:58:00:32:d5:a5:23:52:b1:e9:63:59:ad:c5:e8:60:
         62:00:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:43:40 2025 by rpki-client