Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa
File:                     58132a11-8e2a-354a-b569-5f5fc420c67f.roa (raw, json)
Hash identifier:          mknpHnTxxywgxVBaja4x+6yc3QoP7x5ndzkae1fE4NY=
Subject key identifier:   B5:77:DB:30:AF:43:57:C8:BD:68:74:7A:F7:1E:A8:5F:6F:20:02:D7
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F4328584A30503B7A2566B86F9AA51500
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     399628
IP address blocks:        64.7.197.0/24 maxlen: 24
                          64.94.153.0/24 maxlen: 24
                          64.94.156.0/24 maxlen: 24
                          64.94.159.0/24 maxlen: 24
                          64.95.9.0/24 maxlen: 24
                          64.95.14.0/24 maxlen: 24
                          2620:96:a002::/48 maxlen: 48
                          2620:96:a003::/48 maxlen: 48
                          2620:96:a004::/48 maxlen: 48
                          2620:96:a005::/48 maxlen: 48
                          2620:96:a006::/48 maxlen: 48
                          2620:96:a007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3b:7a:25:66:b8:6f:9a:a5:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=17b5cf4a-4677-471a-bcd5-f2aaec03bf94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:e3:8f:4d:7f:a5:26:e2:05:6c:14:81:a8:
                    45:5d:01:97:1d:59:70:82:94:70:59:79:38:d3:eb:
                    f6:74:09:c9:0a:27:04:48:9e:34:a9:52:0d:d4:6c:
                    ce:b5:a6:7d:1b:ee:7c:1f:95:00:69:32:8e:40:c6:
                    cc:02:10:7f:c0:84:a8:1e:93:47:fd:9e:7e:c7:a5:
                    c9:47:14:24:ce:09:22:2b:70:43:a0:e1:f4:73:73:
                    87:06:78:8e:94:98:d4:ce:fc:ce:a5:61:8f:1f:50:
                    e3:19:0d:6a:cf:9a:0f:08:66:64:b6:5f:1b:7e:19:
                    61:fb:51:b8:75:5a:20:1e:94:25:e6:95:3e:60:69:
                    ec:14:40:98:98:3b:ab:13:21:d7:5c:71:4c:70:f8:
                    83:70:10:f1:35:81:33:40:2c:a1:10:85:6b:a4:14:
                    4e:fc:bf:57:16:b1:f8:08:78:4f:01:bc:ca:27:d3:
                    d2:b3:82:46:e8:5d:3b:9c:29:33:96:e6:c6:43:6a:
                    1c:00:65:97:b7:f3:93:0e:9e:16:06:a3:5d:75:fd:
                    f4:62:9e:c3:77:5a:43:36:fb:ae:13:d9:8b:78:9f:
                    6a:9b:97:da:91:35:18:27:4c:a7:f9:87:06:7e:43:
                    16:73:b3:65:c7:41:9b:4c:c6:cf:b4:8d:74:93:b9:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:77:DB:30:AF:43:57:C8:BD:68:74:7A:F7:1E:A8:5F:6F:20:02:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.197.0/24
                  64.94.153.0/24
                  64.94.156.0/24
                  64.94.159.0/24
                  64.95.9.0/24
                  64.95.14.0/24
                IPv6:
                  2620:96:a002::-2620:96:a007:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e7:92:32:5c:28:52:56:e2:98:45:73:fe:d0:cc:d1:c3:b6:
         0c:5e:cc:d4:09:b3:33:92:92:fa:14:1e:3d:0c:a3:0f:95:a1:
         9b:89:cd:2a:0f:a7:55:8c:03:30:ac:35:ed:f1:eb:bf:a0:1b:
         aa:1c:d8:d4:50:93:18:7e:bc:de:40:09:77:cb:92:f6:5b:36:
         43:47:e4:43:e5:6a:ae:05:5a:c4:13:59:ba:8d:ca:74:64:39:
         31:f3:94:89:5d:00:db:db:e2:a9:00:98:1e:8e:31:1d:ee:1c:
         e3:35:3b:39:13:c9:ea:53:29:b9:0d:e0:cf:39:4b:de:70:10:
         ab:30:e4:00:1f:35:29:5a:3f:60:36:7a:45:7f:a9:32:2e:17:
         6e:14:b8:58:5c:31:0a:29:f9:a5:47:cc:31:79:1c:5a:04:45:
         fb:2c:35:2e:9d:10:2f:e0:3a:33:5f:92:1c:74:c8:46:8b:ec:
         7e:9e:46:ba:35:2b:88:4e:a8:6a:7e:af:1c:86:88:92:49:20:
         49:aa:21:55:2e:74:f6:c7:db:38:db:22:fc:db:98:c6:ea:e0:
         3c:a0:37:b8:40:05:79:3b:12:c3:bc:ca:9b:ce:fd:49:72:78:
         5c:a1:c8:04:71:c9:f0:af:b6:c7:35:af:fc:84:74:28:f8:44:
         94:f9:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:31:22 2025 by rpki-client