Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa
File:                     f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa (raw, json)
Hash identifier:          wtFV+EyZoUKhU2fb5E9dwwob0towO+3YyNK97QeGT08=
Subject key identifier:   6B:4E:39:C4:84:32:E3:86:A0:E8:56:44:71:46:E6:57:25:C0:E9:96
Certificate issuer:       /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
Certificate serial:       010D0C9F4328584AB91B963DCFAD567F21ED3120
Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     395035
IP address blocks:        64.239.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:96:3d:cf:ad:56:7f:21:ed:31:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=c6cf438e-8a72-4d24-a22d-a66ef1bd6029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2e:c8:f9:c6:15:e0:d7:0f:c7:e0:e5:1e:46:
                    fc:38:fc:d1:e3:9e:66:25:2e:5b:77:94:d3:34:a1:
                    c7:19:ad:30:56:6c:70:67:d1:c0:20:1f:f1:e3:d6:
                    41:18:27:65:ab:fa:11:ac:0d:09:55:c6:f2:d3:ce:
                    73:63:54:39:59:b0:fc:6f:05:ef:59:30:33:50:7c:
                    bf:c9:8a:f4:73:6d:8e:5a:71:c4:b8:b8:d3:2e:5b:
                    c0:b2:d7:4d:9f:4e:06:0f:78:73:0e:c5:3c:01:dc:
                    d5:76:90:2f:b3:15:ff:06:1d:33:d7:5f:63:b7:38:
                    6a:ce:a1:1d:33:ec:9c:6c:30:53:b4:c2:85:78:d3:
                    c0:08:5e:f6:b1:6a:a1:dd:2f:9c:f8:0f:ff:9d:46:
                    92:27:00:ba:98:df:34:63:b3:7b:3a:8a:77:00:0b:
                    a6:20:59:64:e8:6a:0f:b1:e1:eb:0d:ae:2b:04:40:
                    bc:d7:bb:4e:3c:c7:ca:dd:ce:bd:92:d1:d4:47:57:
                    5d:c8:03:5f:31:d5:a0:8e:ed:5f:0b:c8:b7:a9:34:
                    e2:97:0c:fa:98:3a:f7:8d:b8:9d:e0:bd:67:9f:ff:
                    e0:b3:05:ac:0a:9a:dd:ab:a3:e6:b5:b6:d7:5a:bd:
                    88:df:cb:7e:22:d8:64:a2:e9:a5:8c:11:70:78:74:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4E:39:C4:84:32:E3:86:A0:E8:56:44:71:46:E6:57:25:C0:E9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl

            X509v3 Authority Key Identifier:
                keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:58:8b:b3:1b:6d:04:25:66:72:01:19:2b:17:e4:f2:22:fa:
         d5:92:e1:e4:5f:9e:32:c5:ec:6f:9a:a9:f2:7a:bb:3d:27:c8:
         4e:9a:b4:86:81:d9:17:3e:64:ce:a3:7c:80:cb:92:67:c3:aa:
         e0:96:23:33:61:20:a4:d8:c3:4c:12:19:20:16:4e:af:8c:00:
         52:9a:d2:8b:48:65:a7:44:d7:1f:19:5b:6c:43:09:ad:a3:bd:
         dd:a6:55:fe:a9:0e:8c:73:4a:f3:bf:e4:9d:5c:26:31:b6:37:
         92:47:68:08:ad:5a:e8:7f:10:fd:0c:c4:99:d6:2f:dc:37:9b:
         69:6e:5b:39:b6:39:46:5e:2f:ed:5e:88:3b:a9:fb:58:fd:7b:
         0e:ee:6e:58:f0:e4:2d:5a:0c:7c:67:20:b5:73:b4:9b:7a:f0:
         96:9e:c0:a8:a7:89:c7:34:de:15:f1:e0:77:9d:23:b4:af:c9:
         be:40:7e:8f:02:be:b2:c2:26:0e:e1:52:ea:c6:61:5a:ee:13:
         f6:4e:22:37:eb:99:ef:fc:58:be:13:db:a5:d5:64:fd:f1:91:
         83:59:64:fd:9f:38:b5:2d:7d:4d:ed:be:29:71:a2:68:a4:67:
         4b:09:46:75:76:7c:d7:8a:02:93:b0:22:20:d2:86:a5:ba:f6:
         e1:a0:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:27 2025 by rpki-client