Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa
File:                     603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa (raw, json)
Hash identifier:          3GXhZJUWo6RGyxM4falJSXicq8y+Bw/N/ba0iwgd8+E=
Subject key identifier:   4C:36:C4:E0:B3:A9:6F:59:AE:1D:F3:70:02:A3:46:6E:27:5B:D4:10
Certificate issuer:       /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
Certificate serial:       010D0C9F4328584AA85BB1E3BB944CE925E325C0
Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        199.30.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b1:e3:bb:94:4c:e9:25:e3:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=abbcb80a-fad7-4df4-91c6-b24b6f94eb42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:0b:8c:a1:78:fe:10:e9:01:c9:28:4e:11:
                    b7:13:c8:23:32:52:87:2e:8b:d9:f1:f4:16:24:f3:
                    3c:92:ec:9d:15:7f:12:02:89:11:ed:70:de:8b:6f:
                    bb:12:cc:9d:a2:7e:0d:0d:ab:7c:6f:0e:38:22:66:
                    07:b0:02:86:92:fc:7c:1c:7b:ac:fa:ff:4f:b5:63:
                    6f:95:b3:86:b0:ef:63:5a:c7:61:f3:ec:fb:29:ae:
                    b7:4b:93:17:72:ec:5f:0e:fe:d5:6b:8b:f5:01:01:
                    8b:0b:bd:a7:31:97:f0:8a:d3:d9:7d:63:90:c5:24:
                    0d:ce:a8:c5:bf:50:f1:0c:be:d8:6f:e4:26:c4:b5:
                    ad:30:4a:4f:64:c4:ad:fb:c4:ad:82:eb:2f:28:c9:
                    2d:b4:f1:47:12:60:16:d7:ac:b0:ac:c8:71:30:33:
                    89:67:e2:5f:e4:96:f9:03:7a:09:a7:99:42:af:24:
                    8a:b2:98:28:3e:bb:ea:64:0c:dd:d6:67:71:ff:9f:
                    ef:35:bc:97:f4:0a:db:77:e5:b4:76:52:7a:7b:f5:
                    2d:f7:ce:b8:7b:2f:b0:59:7f:60:5b:26:49:74:46:
                    ba:ca:37:60:8f:d5:50:12:f4:81:39:04:72:f7:97:
                    38:b3:ad:61:52:d4:ff:72:59:4e:38:91:02:23:78:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:36:C4:E0:B3:A9:6F:59:AE:1D:F3:70:02:A3:46:6E:27:5B:D4:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/603a50ba-9308-3f4c-af4b-7f81c183fc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e1:3b:5e:96:47:58:40:ae:14:57:1e:46:77:80:00:87:4c:
         ea:b0:9b:8f:1b:0b:91:ae:23:ca:0f:5b:4d:19:16:50:8e:3c:
         ed:0c:fc:8d:3a:c5:05:0b:bb:11:b6:a7:8c:67:d3:d0:14:0c:
         b4:3a:82:04:7e:87:a9:c3:05:e1:d0:2e:80:1d:d0:43:95:76:
         3b:e2:8d:df:07:c9:8e:99:1a:6e:7d:45:6d:36:c6:96:c1:7c:
         74:c5:9c:00:d1:9e:72:c2:00:3a:d8:11:34:3e:ce:45:82:ce:
         c7:c2:ae:e0:84:b5:04:97:eb:bf:59:25:45:45:74:54:9e:d6:
         7f:a6:bc:b5:08:c8:56:d5:cb:bc:39:dd:2a:bb:20:88:3e:64:
         f9:16:b4:d9:be:b1:52:69:70:7f:0f:79:d3:42:ad:17:36:2a:
         07:c6:f0:4a:7c:eb:f7:9e:59:99:a0:f5:18:bd:23:f1:b2:ff:
         73:0c:25:09:95:24:e1:32:70:d9:00:3f:78:d0:10:1d:3a:f1:
         be:0c:04:39:94:35:b7:1f:6e:da:d7:0e:34:e9:69:8a:8a:cb:
         93:65:86:86:a6:21:c4:f2:2c:8b:aa:6e:a5:2a:05:9a:bb:8e:
         c8:d4:22:68:26:bb:65:93:68:81:14:8a:94:30:77:76:d7:aa:
         c1:ed:2c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:53:44 2025 by rpki-client