Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
File:                     2f245cec-1abd-398c-a715-037e988d18d1.roa (raw, json)
Hash identifier:          acIYhahnAzCJA+W22LMyaGlLiXIYWZmnYXgFNHc4F08=
Subject key identifier:   4A:56:FE:04:44:7D:99:42:20:20:C4:89:46:81:6E:E5:99:01:27:0D
Certificate issuer:       /CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
Certificate serial:       010D0C9F4328584ABD4B742FD2FC1CA17E6AD480
Authority key identifier: BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     10584
IP address blocks:        64.237.108.0/22 maxlen: 24
                          64.237.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:74:2f:d2:fc:1c:a1:7e:6a:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=8e52ab49-546c-43ce-8f6b-15cd5ecdc84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:f1:6c:c2:19:d5:54:34:87:9d:f0:8d:a4:
                    44:f6:e8:1d:e2:8b:f5:19:cc:0f:b7:0e:03:57:ca:
                    dd:da:0a:b8:e6:01:46:7e:da:0d:a5:fa:fd:14:58:
                    8d:35:5f:84:68:50:99:ef:c0:7a:00:9b:a9:a6:23:
                    86:5a:1d:0f:e6:40:5f:17:66:5a:dc:73:af:a9:81:
                    ca:d2:2f:92:9b:9b:e0:0e:2b:f0:3a:bd:7c:fc:1a:
                    6c:04:ac:4e:40:e4:49:4a:67:0f:b5:9b:87:1f:18:
                    0e:97:cf:c3:46:8d:43:39:e9:4d:ab:35:a0:f5:2b:
                    44:fe:14:eb:9f:9a:d8:5b:a7:25:d3:9e:5f:a2:17:
                    f1:b2:0f:47:35:c6:af:17:13:5b:e1:d1:9f:60:4e:
                    70:74:b6:29:08:1f:28:21:27:b9:2e:ab:db:10:6f:
                    24:81:ec:a5:b2:e7:0c:13:18:a6:bb:cf:bc:22:a4:
                    c1:86:35:5e:d1:f0:14:f2:e9:d4:29:05:1d:0d:42:
                    84:3a:ca:e2:c9:a7:90:15:f5:08:ed:45:18:33:8f:
                    72:2c:8b:15:50:23:82:1b:10:9f:ee:e9:53:19:e4:
                    24:d9:8c:c9:f5:6a:19:aa:34:4a:02:dc:86:05:2d:
                    e9:ac:6d:1b:c7:6c:b9:ba:a7:88:41:1e:06:26:4c:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:56:FE:04:44:7D:99:42:20:20:C4:89:46:81:6E:E5:99:01:27:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:54:d2:56:c3:0a:43:8c:ab:a1:10:79:7b:39:28:a2:9d:23:
         e3:21:0a:88:ba:c2:b1:52:3e:66:a8:6f:94:fc:c4:2e:26:a8:
         9d:7b:3a:ac:06:03:65:f9:1a:3d:c6:b3:21:35:16:d1:58:48:
         f7:ec:6e:56:42:ff:de:58:b0:e4:f6:95:62:2d:d6:23:81:64:
         a1:28:71:f5:21:93:f7:cf:71:b1:bc:57:33:ce:ff:e8:09:0b:
         7a:a9:63:88:4f:3c:1c:94:0b:19:4a:ff:6f:da:2b:c1:2f:72:
         40:25:8b:a7:cc:a3:7c:06:ea:e6:9f:82:32:0d:6a:fe:7d:3c:
         b6:af:15:05:22:a9:60:9a:44:e7:e4:ad:c5:81:d2:a8:d3:9b:
         db:87:1a:64:b2:7d:3d:5e:0f:70:95:38:a1:35:2f:78:1a:46:
         b4:49:42:14:a0:37:6a:e1:a7:72:97:ce:44:26:a7:13:5b:8c:
         ba:93:47:d2:12:ed:72:e0:b3:2f:38:0f:a5:ce:da:22:33:50:
         35:14:72:83:82:90:52:83:74:4d:66:53:05:6d:52:4c:1a:e2:
         bc:e0:5f:8e:32:20:16:ea:9e:a1:01:16:69:95:81:18:a4:96:
         19:ae:4d:cd:8f:17:56:de:be:a9:41:8a:38:56:64:d4:85:86:
         ce:13:c7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:42:18 2025 by rpki-client