Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/e7c2f987-15ce-3c09-93da-30643520c614.roa
File:                     e7c2f987-15ce-3c09-93da-30643520c614.roa (raw, json)
Hash identifier:          cYEaBNvka4jdH+HKLeKeg7aYvajJZssnmKbZh0LTWdM=
Subject key identifier:   ED:51:4E:C3:67:1E:38:36:EB:ED:5A:F7:B3:C1:DE:4D:BF:AF:E2:68
Certificate issuer:       /CN=0b883aa7-bd4f-4703-b044-59552058f266
Certificate serial:       010D0C9F43285849F7150FBCAEF41D4B7FBA3480
Authority key identifier: 83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/e7c2f987-15ce-3c09-93da-30643520c614.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     3257
IP address blocks:        64.112.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:0f:bc:ae:f4:1d:4b:7f:ba:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b883aa7-bd4f-4703-b044-59552058f266
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=50df6e8a-9e3c-4e85-85b8-9fe753101627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:69:9a:79:dd:74:63:3d:65:63:d5:57:b2:
                    32:02:97:8a:87:4d:d0:01:be:bd:e9:88:bc:30:b2:
                    35:55:34:8a:4f:0a:7d:90:55:20:bf:7f:fb:a7:ce:
                    1c:ba:22:00:ca:a5:76:78:ba:9f:3a:e8:ab:9f:6c:
                    72:83:ef:25:01:62:96:b4:58:f2:c0:29:2f:62:e1:
                    1b:44:e2:37:8d:d2:1e:cb:45:2e:01:e7:07:e4:d0:
                    06:a0:9a:27:4e:65:f0:16:56:1a:85:41:17:c1:23:
                    c4:4e:1f:50:92:bd:ba:2b:fd:d7:b1:26:6d:a6:44:
                    45:bc:d5:80:5b:b7:a3:df:f6:92:9a:75:23:5c:e4:
                    0c:64:d8:60:68:90:c1:9a:94:b6:c1:1e:cc:7e:da:
                    39:a9:19:c3:2c:74:b6:41:28:b6:31:a6:fe:89:f0:
                    79:3b:3a:10:32:ba:84:42:3b:5b:6f:56:a5:29:68:
                    a3:5f:98:ee:0d:83:b7:e9:71:1f:b1:36:a1:34:31:
                    e7:22:fe:a1:b4:ce:8c:9d:4a:46:19:49:0a:5e:94:
                    47:ae:a7:8f:19:84:4f:3d:1b:1c:a2:47:99:62:95:
                    5c:8e:1a:40:36:a6:21:d1:14:57:bd:97:10:51:74:
                    58:bb:70:94:28:ec:6f:85:11:57:63:47:45:09:7d:
                    80:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:4E:C3:67:1E:38:36:EB:ED:5A:F7:B3:C1:DE:4D:BF:AF:E2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/e7c2f987-15ce-3c09-93da-30643520c614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl

            X509v3 Authority Key Identifier:
                keyid:83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:92:b6:82:db:0d:75:f7:6f:f3:91:5e:09:7f:75:27:95:89:
         e1:f4:97:af:de:b0:77:0f:45:b4:16:33:5c:84:b0:78:c1:91:
         d8:c4:d3:7b:28:01:2a:16:3c:48:ab:08:5d:88:b2:f8:ff:7b:
         39:d5:92:e1:91:2a:53:51:72:6f:cb:4b:db:74:34:db:79:d0:
         d9:d3:25:46:ea:4f:cb:c4:33:87:cb:d9:36:a7:58:e5:c8:c2:
         69:a7:d0:0c:de:81:e1:ef:50:b0:be:f0:36:35:db:01:75:85:
         ba:ee:36:dd:5d:81:df:36:2c:98:76:f2:cf:f3:42:17:ba:b2:
         55:3a:9b:80:89:69:ea:b2:32:64:64:91:ea:c5:8f:fc:a6:d5:
         8a:91:ad:0b:1e:8d:35:8e:1e:29:0d:22:12:bc:41:4c:25:a1:
         28:19:17:28:72:d1:48:99:e8:d7:b7:f9:f9:62:73:a2:0d:6b:
         1e:7f:ac:d1:ba:35:2b:69:82:57:19:6a:4b:88:7e:69:88:1f:
         0b:b0:24:96:8b:a8:bc:f6:51:52:a9:b4:41:a0:46:78:9f:39:
         10:cd:52:8e:ef:07:76:52:88:da:d7:4c:52:56:27:36:06:16:
         6c:82:5e:75:e0:57:bd:50:c7:be:79:75:99:65:d0:43:70:95:
         82:db:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:46:06 2025 by rpki-client