Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa
File:                     1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa (raw, json)
Hash identifier:          6gt2M5Dsvk58BnTMRjCA89N3zpJdVrJeVZC7L6qz7PU=
Subject key identifier:   4F:92:C0:40:80:E3:53:7E:95:39:ED:25:3E:8C:75:9E:A7:72:09:E2
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584AC016353B1AEE956C05C15D80
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     6142
IP address blocks:        64.39.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:35:3b:1a:ee:95:6c:05:c1:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=adc6f616-efd1-42b6-a6c9-6a00b1d521ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:be:2e:fb:5d:d8:5f:a7:56:b7:f4:03:ea:
                    55:9f:4f:95:42:ff:dd:98:51:f6:bc:54:de:04:c2:
                    f2:46:f3:af:96:ca:c2:e5:16:a1:df:8d:4d:aa:e9:
                    c9:7a:d7:36:84:61:0c:4e:be:1e:74:17:19:77:9c:
                    bd:b3:ea:3a:b5:72:6b:f9:dd:1f:16:6a:5e:94:2c:
                    7f:a1:15:84:b8:2f:03:de:c4:a7:e9:cd:de:73:34:
                    7e:5e:c2:7c:d5:87:03:67:d3:5a:38:72:56:b2:72:
                    dc:ba:01:56:7b:9d:ee:2d:12:60:be:26:a2:f8:67:
                    ec:d4:12:d2:51:56:e0:ec:61:91:fd:79:46:9e:15:
                    f2:bc:c6:63:da:78:fc:6e:69:39:76:90:0c:97:66:
                    a6:25:69:90:c7:cf:e1:7f:51:d6:1f:5f:5f:18:c6:
                    72:d1:a7:26:d9:66:07:a6:4b:74:ba:f4:e1:e2:8f:
                    1c:ec:76:60:6b:ae:08:fe:1a:7b:5c:24:f8:25:dc:
                    f8:a3:05:dc:0e:12:35:ee:57:18:f9:5b:fe:3b:95:
                    23:c4:4a:d9:0c:c9:9b:59:29:04:03:34:1f:24:f1:
                    71:93:e3:e3:62:85:e0:69:ee:4e:ac:3a:bc:59:e6:
                    cf:e3:2c:83:7b:28:dc:16:c1:df:ce:3e:34:c8:b7:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:92:C0:40:80:E3:53:7E:95:39:ED:25:3E:8C:75:9E:A7:72:09:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f0:6f:dd:b8:79:a1:8b:46:f9:bb:75:b8:7d:69:97:ae:06:
         d4:3e:30:9a:22:f5:c2:77:da:ee:ca:c2:04:ef:5b:87:7a:fb:
         0e:35:7e:ae:99:93:f9:a5:47:e0:3c:44:f6:84:27:17:28:9b:
         29:2e:71:f5:e0:fb:91:0b:69:c0:c5:d3:f8:10:3b:3a:aa:10:
         32:95:7a:b0:95:07:7c:fe:81:14:bf:32:19:07:17:b5:50:5b:
         bb:4a:67:42:bf:7b:38:14:e2:f4:74:4d:a3:e2:f9:b0:3b:b3:
         c3:b5:9a:fd:53:d8:84:eb:3b:cd:e8:32:c8:8b:43:db:48:c3:
         b4:16:52:de:ae:96:58:b6:80:f9:fa:02:d7:cc:5f:f4:8b:41:
         ee:cb:f0:90:94:6e:6e:ba:d3:c2:b5:b2:ce:a6:2b:73:12:a1:
         d9:d2:04:04:94:1c:48:7d:9f:35:4f:39:42:ae:70:bc:b7:2f:
         1f:e2:db:14:57:f4:5f:a7:4a:c8:6b:46:d3:f6:2a:4a:05:d0:
         8e:96:f6:87:0e:2c:37:43:49:04:7e:8a:52:e5:a9:0a:6d:b3:
         5d:05:35:eb:ec:c7:84:b3:79:91:13:5c:20:ec:0b:b7:32:49:
         95:db:53:c0:05:42:74:c5:47:9e:71:e9:4f:43:55:92:df:97:
         93:39:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:39:11 2025 by rpki-client