Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa
File:                     d55da693-e506-31b8-be3f-ec86fb9e0b12.roa (raw, json)
Hash identifier:          Um9Q0kWFiytxz4c9UnZsCUfRwgFTk7VpXgny97qhV9k=
Subject key identifier:   58:2C:8D:CD:9E:36:70:AF:E3:B6:FF:B2:93:C4:55:40:19:84:E2:96
Certificate issuer:       /CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
Certificate serial:       010D0C9F4328584A9E9613E9A828E87716DB6680
Authority key identifier: C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     400731
IP address blocks:        64.239.70.0/24 maxlen: 24
                          2602:812:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:13:e9:a8:28:e8:77:16:db:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=f19078ce-addf-480f-9d4c-0d65818b90b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:0f:44:e5:dd:ef:56:57:d5:ed:d3:01:d4:
                    8f:19:28:32:31:6a:98:0b:da:01:bb:1f:c4:ba:84:
                    a6:e5:a2:e2:18:48:4c:cb:89:79:97:4d:3d:8d:cc:
                    71:a9:9b:5c:c0:9c:c1:f3:75:c7:db:ba:f5:78:bb:
                    0e:3b:d5:b7:0c:01:d8:99:10:c2:39:35:47:a0:fc:
                    c3:16:32:73:3a:e3:76:2b:ac:11:33:46:8a:d2:e4:
                    d5:cb:9e:5e:5d:e2:b5:d0:f6:68:00:b2:ab:d8:57:
                    24:00:23:0a:09:6a:2f:1d:ca:1e:69:45:ec:18:61:
                    4e:95:05:38:99:c6:e5:8a:5a:e5:e6:f4:18:fe:52:
                    1b:2f:34:a7:c9:36:7b:a0:7f:b8:7e:0c:d3:d6:17:
                    a5:bd:dd:49:02:fd:f6:34:91:fc:eb:00:1b:5b:c6:
                    aa:97:9b:f5:57:d6:e9:b0:a0:de:71:f6:44:5f:9c:
                    f6:c1:d3:d8:0f:51:4c:0c:4d:bf:69:48:32:33:8a:
                    60:91:0d:39:ab:9e:e5:1e:2b:9c:ba:71:24:c2:a0:
                    cd:ca:ee:27:58:89:b2:f2:ee:88:19:5e:fc:bc:4f:
                    99:26:4b:57:5b:6f:13:ce:b1:35:b3:38:21:e4:4c:
                    06:8b:82:02:7a:9b:25:e0:ac:92:07:a1:7f:e1:4f:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2C:8D:CD:9E:36:70:AF:E3:B6:FF:B2:93:C4:55:40:19:84:E2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl

            X509v3 Authority Key Identifier:
                keyid:C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.70.0/24
                IPv6:
                  2602:812:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2a:fe:e8:0a:0f:c5:46:41:15:90:e2:e6:a1:73:6a:87:35:
         94:46:45:51:f0:49:7d:66:22:eb:f5:f6:ec:9c:32:c3:f4:df:
         67:eb:56:4b:a9:c2:2f:14:94:52:d0:4c:76:5d:fa:2c:24:20:
         55:c2:87:b3:0d:ee:ce:6e:a5:d6:93:73:ec:4a:8d:a7:3f:9c:
         58:6d:4f:9a:5c:54:fe:44:c7:24:f4:3a:a9:21:6a:46:3e:0e:
         42:22:a1:1c:99:a2:dd:4d:d9:26:a9:67:a3:7c:2a:5c:c9:45:
         4a:bc:f6:a4:58:92:65:c3:86:53:94:1e:a3:4f:87:3f:35:1e:
         0a:ae:9d:03:86:af:a9:4a:49:ea:3b:50:1f:45:c4:7d:0c:48:
         49:a3:9f:77:44:8f:87:6a:61:32:6b:49:9d:99:b6:5a:3e:65:
         f3:93:a1:7a:f7:d3:d8:85:13:8d:af:61:ad:ae:47:26:e7:04:
         f2:04:d3:15:e0:20:9e:44:4f:01:e1:87:16:46:f0:f1:ac:54:
         3b:96:40:af:89:04:6a:46:b5:8e:28:12:e4:78:af:9f:c0:00:
         5a:d4:f3:37:78:3a:d2:e3:30:df:c6:ce:84:e9:33:87:29:9f:
         6a:53:0e:c7:cc:b2:52:bb:94:7f:f1:3a:99:f2:39:18:18:48:
         5b:18:e1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:01 2025 by rpki-client