Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa
File:                     2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa (raw, json)
Hash identifier:          2a6ac4wYyiJpuMX2vnbpp8X4Awe8XN35BLMriGxxgcQ=
Subject key identifier:   FA:D7:42:73:29:50:A8:75:D5:D6:65:D1:23:03:B7:89:09:1B:09:6B
Certificate issuer:       /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Certificate serial:       010D0C9F4328584AADF116497F44069689D2F740
Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     32402
IP address blocks:        64.251.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:16:49:7f:44:06:96:89:d2:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=a543f97d-7bea-4c4c-a609-b5093fc78872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:46:6e:67:81:2f:5d:ec:1a:db:aa:45:e3:c5:
                    6c:59:29:ba:92:8d:39:1e:a6:4f:79:47:f9:2e:0b:
                    57:fa:fa:9f:d0:4c:00:b1:a5:eb:97:03:35:a9:32:
                    83:97:b2:48:a1:5c:f8:3f:c2:28:af:91:32:c8:49:
                    51:05:48:b6:97:90:97:bc:c8:7f:95:26:6e:73:36:
                    7b:7b:6a:b5:6e:0f:db:2c:90:a9:5c:52:7c:fa:30:
                    09:76:51:06:6f:ed:17:f9:c4:74:c4:8a:27:03:2f:
                    b7:38:51:3d:9c:79:0a:38:55:eb:1f:4a:22:1c:6a:
                    48:59:f8:9a:44:1e:6a:5c:79:12:2e:e3:14:32:5c:
                    a4:7f:73:f6:81:6e:91:2f:d6:f9:64:b4:11:9b:08:
                    c5:a5:5b:df:f5:b3:3b:54:57:b7:75:4a:bb:5b:87:
                    47:a3:2a:f9:a6:94:e6:17:66:b6:7f:5f:71:03:39:
                    ca:a7:33:bd:73:a7:92:6f:e3:ed:cf:40:7b:81:d4:
                    a2:6d:78:bc:9f:90:94:14:81:88:d3:75:d2:97:03:
                    96:65:bf:2d:3c:8e:d0:06:da:40:c7:2c:0d:ca:06:
                    1b:47:7b:67:e3:b7:7a:d4:6d:b9:9a:77:4c:dd:63:
                    67:d0:3f:c2:30:a0:d4:bb:7f:b2:8b:e4:f7:05:17:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D7:42:73:29:50:A8:75:D5:D6:65:D1:23:03:B7:89:09:1B:09:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/2ee506e0-1d05-39ea-b7f4-9e908608ae9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.251.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:7d:34:63:7e:5c:0d:0d:c9:74:31:34:e3:12:67:7d:c0:1f:
         c0:9d:5a:b3:8e:2b:18:33:43:69:c8:63:43:9b:84:36:fa:03:
         f5:07:79:3d:dd:eb:e5:99:41:85:25:c4:e6:1a:d1:c5:34:4f:
         45:60:ce:f0:49:78:ff:e2:47:55:f5:ea:ee:3e:ae:83:41:25:
         26:73:ed:dd:63:21:43:fb:3b:6f:3c:b5:33:57:d6:3f:1c:34:
         fa:88:33:8b:b0:ac:ec:b4:ee:bf:ff:1d:2e:da:76:bf:17:73:
         07:95:61:e3:af:93:3a:4c:10:4e:b6:cf:30:d7:d0:5a:92:8a:
         1e:c2:dc:14:b5:5e:7e:59:69:2d:c4:96:00:1a:fb:06:3b:1e:
         0e:26:9d:d7:3c:16:30:d0:58:f2:70:7f:84:75:65:3d:22:ad:
         15:fd:31:26:29:f2:50:09:a3:af:a8:b3:43:ad:08:93:21:09:
         b8:62:02:d2:c6:54:a1:4a:ed:ec:14:8d:25:54:ed:db:5d:79:
         98:30:fa:fd:b4:cb:9f:98:65:18:00:4b:07:26:5d:72:da:ef:
         89:f5:70:c8:a4:8f:d2:a1:73:aa:4d:0e:6e:e4:90:e0:30:d9:
         e8:25:d9:a5:bc:83:7e:19:3b:14:68:82:eb:8f:4b:8a:4a:4c:
         dc:7e:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:34 2025 by rpki-client