Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/4e65b898-361e-3f80-89a7-4214db7b7086.roa
File:                     4e65b898-361e-3f80-89a7-4214db7b7086.roa (raw, json)
Hash identifier:          RZvl+9F+C3RB3d7teDCBX2694YfuDZVpGpTXIAzjNu0=
Subject key identifier:   87:8D:7F:09:06:8B:01:A5:86:33:71:CF:77:AE:A2:C2:0D:9E:11:C3
Certificate issuer:       /CN=64b51de8-9235-4199-90c9-93aee2696fab
Certificate serial:       010D0C9F4328584A07D53782244717C1631218A0
Authority key identifier: 09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/4e65b898-361e-3f80-89a7-4214db7b7086.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     3791
IP address blocks:        199.47.26.0/24 maxlen: 24
                          199.47.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:37:82:24:47:17:c1:63:12:18:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b51de8-9235-4199-90c9-93aee2696fab
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=385e23a2-8714-434a-a9b9-0cfd4587288e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:56:49:97:0c:2d:cb:20:6f:f0:d7:41:4d:9b:
                    d2:2b:81:ff:97:a8:83:1d:4d:74:b6:f3:69:02:0e:
                    10:2c:85:d0:f4:f1:09:3a:88:99:bc:5c:a0:84:74:
                    2c:c9:3b:f5:16:7d:29:d1:5f:1f:0c:29:d4:63:6f:
                    9e:e5:d4:35:b5:79:8e:f6:22:56:80:0a:64:77:c1:
                    e9:e7:c6:07:72:7b:f1:74:c8:53:fc:2b:62:63:63:
                    1f:0e:e3:d4:5a:5e:4a:e9:4f:2e:b1:6d:82:82:d7:
                    a0:42:45:be:eb:69:b7:aa:15:11:33:85:b3:c1:a2:
                    6c:88:5a:ba:32:db:16:4d:87:79:77:2a:0d:e0:e2:
                    e8:28:bf:14:f1:cb:00:e2:de:c2:49:72:b9:fd:6d:
                    18:83:3d:53:0f:41:38:ed:c2:e3:9a:ac:ea:94:ca:
                    a4:e4:53:e4:c2:18:4e:7b:fb:06:89:3a:3a:29:c1:
                    c8:d1:ea:c8:b5:b9:7f:01:8d:82:49:0a:e9:21:ba:
                    0a:f7:e3:0f:1e:4b:ec:25:27:49:be:d7:56:5d:02:
                    00:ed:e8:e9:35:73:fb:33:4b:7b:3c:72:26:46:67:
                    32:6a:5b:e2:43:f6:20:4d:f1:e1:e2:fd:5c:c5:6e:
                    96:dd:22:39:2c:a3:3e:28:fb:3e:b1:54:55:d2:ee:
                    3d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8D:7F:09:06:8B:01:A5:86:33:71:CF:77:AE:A2:C2:0D:9E:11:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/4e65b898-361e-3f80-89a7-4214db7b7086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.crl

            X509v3 Authority Key Identifier:
                keyid:09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c0:fe:e1:65:0d:a2:8c:cd:60:7f:b9:60:68:c6:9d:fe:ef:
         63:5b:d7:09:2a:69:38:ac:03:fe:09:fb:bd:02:04:52:51:db:
         4f:95:a2:70:a6:7d:e4:15:02:f1:af:fe:ec:e6:80:4d:ff:11:
         d9:20:c8:9a:40:da:18:3e:31:a3:97:92:d7:7b:a7:f7:fa:93:
         f6:a7:7f:cd:c7:1e:ae:2e:b9:23:d3:49:2c:6e:42:df:13:3a:
         f5:3a:15:72:7a:cc:c0:f4:ee:d0:3a:fe:5b:74:26:5e:d2:41:
         07:7a:de:af:e8:02:44:ba:12:20:bf:b2:ce:ca:3d:4c:51:67:
         a7:37:16:4d:e2:87:e6:48:ea:39:7e:37:a0:95:8e:f3:7c:0b:
         9a:f9:41:19:85:98:ff:26:d4:d1:1d:ad:7e:c4:e4:a1:2a:18:
         54:f1:f9:5d:12:4f:37:21:09:ce:06:64:45:1c:3f:87:9d:cb:
         25:6b:9f:06:04:c2:9d:27:19:8e:28:fd:3f:cd:56:91:2e:17:
         b9:c9:a9:f2:44:74:38:4b:9d:f4:51:9d:2a:ea:86:d1:33:12:
         f8:66:c7:52:97:5b:2f:4f:37:1a:fa:07:14:b8:ac:30:cc:39:
         f6:f2:d2:36:ed:18:43:65:ab:6e:8f:44:46:51:a0:9b:b9:ed:
         e2:44:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:09:25 2025 by rpki-client