Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3283ff9c-17da-3aa6-8466-04396e8c63ef.roa
File:                     3283ff9c-17da-3aa6-8466-04396e8c63ef.roa (raw, json)
Hash identifier:          VPkurwYmK2SnS3rYItQYGV+XifWiLlHOkPaWReLQCoU=
Subject key identifier:   A7:3C:EF:32:5C:00:FE:AF:29:49:02:4A:C1:D1:51:84:E7:62:8A:F4
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A86DBC2AAC55929957602FE00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3283ff9c-17da-3aa6-8466-04396e8c63ef.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        64.15.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:c2:aa:c5:59:29:95:76:02:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=2a56ebdf-fde4-456b-a742-1c2c44a5e9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:d3:ec:24:ea:34:77:72:b9:bb:36:7e:a7:
                    a6:80:11:ce:ec:55:03:2e:a1:1a:a7:41:0c:83:67:
                    1a:38:9e:cb:4a:3a:d9:a7:cb:a6:3e:08:ee:94:71:
                    9e:31:90:32:8c:69:68:1c:21:23:fa:a3:cb:f9:f1:
                    81:d9:67:98:21:8f:0f:c5:9c:ff:00:da:b5:09:81:
                    20:bb:8f:06:49:83:3b:57:e8:f7:bd:55:97:51:9c:
                    d4:9a:3c:d7:e2:3d:ed:c6:dd:07:45:e0:ca:4c:3f:
                    96:fa:89:51:a8:e4:fc:1b:69:4a:13:f5:b5:a5:94:
                    22:9d:89:c3:d1:49:d2:c3:fb:53:5a:76:c7:be:27:
                    e5:a3:61:d6:4f:f8:e1:22:41:5a:fd:ac:b3:b8:7d:
                    8d:b4:b1:a5:fb:00:d2:29:fe:a0:07:26:8a:e3:64:
                    5f:41:8a:11:8b:39:4e:45:8c:02:02:9f:b2:f3:81:
                    9c:6c:3e:3e:a1:3a:8e:05:61:13:13:a6:ee:93:a0:
                    a0:bd:c1:f4:38:3e:89:37:2e:6d:4d:af:10:9a:cf:
                    44:4d:51:81:eb:87:9a:bc:39:1a:9e:0f:5a:90:94:
                    73:29:98:66:3a:9e:8f:d4:bb:e0:63:48:14:cc:dc:
                    c8:46:bb:ea:93:8a:f9:80:08:7d:8a:99:c1:21:47:
                    5d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3C:EF:32:5C:00:FE:AF:29:49:02:4A:C1:D1:51:84:E7:62:8A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3283ff9c-17da-3aa6-8466-04396e8c63ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b2:c3:43:3c:bb:3e:b9:ae:db:8a:b7:6c:6b:29:b4:07:01:
         36:3b:f8:95:35:24:f4:59:11:32:36:a2:cf:3b:14:aa:0b:6c:
         e5:7f:f2:7f:77:0f:4e:c5:cd:36:3c:c8:58:66:7a:be:8c:6b:
         8b:00:c6:49:95:53:cd:dc:3f:62:6c:73:1a:1d:40:23:f8:49:
         5c:9a:76:cc:d8:7a:08:0b:dd:35:eb:23:20:5a:f2:21:ce:fb:
         42:6a:eb:39:32:48:90:45:44:54:d8:ef:94:1c:7e:fc:1b:58:
         40:1e:c5:a5:2a:52:56:9e:e9:1e:61:b5:5a:35:1d:0a:1b:43:
         2a:ab:64:16:ff:ec:38:0b:e0:93:a4:b8:aa:82:38:ec:db:6b:
         40:40:63:e2:64:cb:bb:3d:84:8c:44:6c:ec:e2:f6:da:87:ed:
         ce:37:dd:29:65:0e:da:58:a1:be:8a:d3:55:7e:05:6a:fb:dc:
         26:29:8b:00:e3:d5:07:d2:7c:0c:f7:ff:b9:1d:ec:51:63:98:
         64:c9:a9:71:59:d0:c9:77:87:90:f5:cf:6d:75:44:8e:97:48:
         9f:a3:d3:3e:aa:24:63:52:89:bc:de:55:40:14:5e:12:9d:3a:
         aa:2e:22:ca:46:af:c4:6b:37:b7:2f:e2:2f:bd:4f:75:34:8b:
         95:c3:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:58:24 2025 by rpki-client