Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3526f2a3-dccf-3946-9b39-3d800a9fe9ca.roa
File:                     3526f2a3-dccf-3946-9b39-3d800a9fe9ca.roa (raw, json)
Hash identifier:          aMhqOyTFuVfP1OY4E130o7ZRNBfrsX+2moRBwgHrZsc=
Subject key identifier:   2F:DC:93:60:35:CC:74:58:60:17:DC:D5:E0:99:BF:2F:93:46:E1:85
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A2ABAF68123A06F887EC6FCC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3526f2a3-dccf-3946-9b39-3d800a9fe9ca.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     397218
IP address blocks:        64.6.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:f6:81:23:a0:6f:88:7e:c6:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=66320ddc-be65-4e3a-89b7-3d1c45b84557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:b0:e1:be:d4:93:4e:f3:31:ff:fb:a7:aa:
                    ec:d2:48:d0:d2:95:26:63:d9:12:14:7f:28:96:7f:
                    b0:83:87:a1:0e:bb:59:98:ee:45:0d:3d:62:3f:64:
                    cc:74:28:b6:04:4a:12:05:4c:9f:86:bc:63:28:16:
                    3b:c6:d8:2d:2a:2a:c0:58:92:27:19:d1:bb:a1:3b:
                    35:79:2c:46:6b:9c:49:c4:90:5c:f2:dc:cc:48:4d:
                    b4:3f:c3:30:db:bb:b3:c3:e3:ae:48:ae:b7:f8:2d:
                    5c:a1:a2:67:54:ac:96:67:1d:27:6e:d0:eb:e2:6c:
                    8f:99:b5:f1:81:df:72:60:b2:e3:2f:5e:ce:85:d8:
                    1d:d1:f0:bd:25:62:d7:b0:27:9b:be:06:2d:8e:28:
                    ae:4d:a1:e7:a7:86:ea:b0:3c:1e:bf:33:a4:b1:a6:
                    8a:a6:f3:d3:2f:01:ea:80:17:fc:a0:de:f3:7e:48:
                    d0:2a:0e:d8:47:57:95:47:42:eb:56:42:22:c3:49:
                    3b:99:44:f3:04:17:de:3b:9e:fc:9b:56:a9:a6:e4:
                    94:53:3a:d5:69:ad:4b:55:78:05:4a:d4:9f:e8:56:
                    ed:c1:b4:43:e1:77:65:92:f7:e2:78:0d:ae:7b:91:
                    d6:97:3e:b6:fa:75:ab:5b:50:55:82:82:74:bf:11:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DC:93:60:35:CC:74:58:60:17:DC:D5:E0:99:BF:2F:93:46:E1:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3526f2a3-dccf-3946-9b39-3d800a9fe9ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:d9:4f:19:33:09:02:3f:52:64:56:24:16:2c:b3:d6:c2:
         be:7a:e2:25:eb:db:b7:51:3c:de:81:4b:20:64:8b:8c:9f:cb:
         6a:4b:fc:2a:dc:11:45:35:30:0e:ef:09:5e:a9:24:0b:da:3a:
         77:da:f4:35:ca:04:f5:1e:96:a9:0a:e9:c9:56:2c:26:bc:15:
         e9:da:a0:e8:10:55:cd:bf:fa:a0:5d:f5:2a:8d:5f:6f:71:d2:
         17:69:7f:5f:aa:77:27:b8:d2:be:56:89:29:23:d0:11:8a:85:
         98:01:60:02:59:83:7e:26:e2:73:0d:84:2e:d3:ed:f6:49:44:
         52:ec:1a:c7:b8:17:42:63:98:03:91:a6:47:eb:0a:4a:b4:39:
         20:fc:89:a7:4c:40:f3:e6:7c:ca:29:77:cc:1e:6a:bd:2a:c0:
         bd:36:70:b8:2f:69:38:a6:03:82:e0:0b:03:35:c7:a1:0d:c8:
         08:62:c3:ff:4e:fa:11:50:a5:0d:de:8f:ee:78:d4:bf:54:68:
         74:dc:03:be:b8:99:2e:5c:99:85:b2:a6:73:93:ef:cf:87:3f:
         06:9c:6b:2b:bc:6b:9b:1a:c0:93:b0:ee:af:d7:fe:81:14:d3:
         27:e5:5a:d9:99:82:8f:83:76:cd:8c:a8:dd:10:da:a2:07:38:
         2f:76:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:16:50 2025 by rpki-client