Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/de7086f2-ede9-3869-8c0d-d146cf89d838.roa
File:                     de7086f2-ede9-3869-8c0d-d146cf89d838.roa (raw, json)
Hash identifier:          /oErFQeaZbVOUHayf/FsdAYGbdfAPflmIhknqk3KYZ0=
Subject key identifier:   A4:FA:69:9D:5E:5A:65:59:E0:5E:79:FE:3E:16:56:57:3A:18:D5:08
Certificate issuer:       /CN=6d36385f-7427-4130-8bf6-9e2a1e89b1f3
Certificate serial:       010D0C9F4328584A8146033256B49D9105A34700
Authority key identifier: BA:14:A8:F1:39:74:61:8A:EB:63:3C:1B:1A:9A:61:AD:91:16:C9:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/de7086f2-ede9-3869-8c0d-d146cf89d838.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        199.34.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:03:32:56:b4:9d:91:05:a3:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d36385f-7427-4130-8bf6-9e2a1e89b1f3
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=4e364bc4-4c11-4bb8-8e60-a62b7e507e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:33:43:f6:9f:39:8c:d4:b1:71:8e:f1:d1:
                    42:95:ce:e6:d7:41:f9:3d:4a:8d:79:d1:40:bd:7f:
                    2e:63:68:ac:bd:47:e7:04:49:27:65:12:b1:e3:b6:
                    ad:7b:e2:2b:e0:a8:bb:41:53:2b:8b:89:a1:aa:38:
                    ae:82:bf:22:f3:fd:f4:a5:f9:65:02:7c:ea:fc:7e:
                    a6:6b:b6:4e:6a:1c:ec:cd:20:0d:bc:9e:42:da:d4:
                    c5:cd:13:2a:bb:08:b2:c6:03:00:ab:cc:27:d0:5d:
                    ab:04:94:70:7a:03:ed:55:c9:b4:69:c9:dc:15:c2:
                    f0:0d:40:16:80:05:65:56:7e:f9:10:f8:dc:22:05:
                    f1:da:bf:85:60:7a:d2:da:60:37:36:33:fc:72:79:
                    fe:26:5e:35:9d:ec:94:e7:2d:7a:b1:28:2a:3f:15:
                    32:e1:3e:35:5c:e0:a0:9b:80:47:c7:b1:d3:fc:36:
                    94:a2:ff:5a:dd:20:c3:30:40:38:78:bb:ff:d2:35:
                    cd:04:cb:53:c4:6e:5a:40:15:8f:b5:28:ac:b2:5c:
                    9b:f2:f9:9b:8b:6a:57:a3:ba:1a:a9:f1:5a:70:77:
                    b9:77:e8:c4:c6:5d:3c:f3:3f:34:91:4b:80:47:43:
                    1e:d8:30:2e:b9:11:b7:f4:9a:3a:16:54:a6:1d:50:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FA:69:9D:5E:5A:65:59:E0:5E:79:FE:3E:16:56:57:3A:18:D5:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/de7086f2-ede9-3869-8c0d-d146cf89d838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.crl

            X509v3 Authority Key Identifier:
                keyid:BA:14:A8:F1:39:74:61:8A:EB:63:3C:1B:1A:9A:61:AD:91:16:C9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d36385f-7427-4130-8bf6-9e2a1e89b1f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:60:38:e0:61:ae:96:4a:cb:32:ab:f1:7a:95:f0:f7:e2:ff:
         71:89:7b:e5:6f:f8:5b:da:db:d7:9d:f0:06:3f:9a:73:b1:0a:
         c5:3a:01:1e:de:ab:ab:6f:26:d2:d0:dc:b2:4c:89:b3:7a:4e:
         0e:5a:da:1d:53:88:f5:dc:a5:4f:a5:47:bd:e8:5f:5c:68:4f:
         87:87:98:ff:c4:84:ff:96:89:5c:b1:b0:23:e9:20:0f:3a:4d:
         4a:da:92:cb:c2:8c:df:0e:88:b9:90:05:4a:db:67:23:a2:5d:
         39:73:65:30:1a:d6:ab:47:5b:31:98:cc:b9:5d:c6:71:7c:46:
         42:74:18:5b:7f:5b:28:9a:e4:e2:d2:5a:1d:c5:56:a1:1c:a3:
         66:d5:b0:8f:e5:f7:d0:da:ba:c5:dd:0d:8a:f6:0f:87:7e:ff:
         bd:73:f0:3e:87:2f:5b:42:56:87:2a:2e:e1:3a:00:4c:09:b4:
         83:da:e8:c1:e8:bf:fe:8d:72:be:56:0d:d8:96:99:c7:07:6a:
         74:84:e1:0d:3a:53:a6:09:a3:cb:ab:cc:59:26:85:4d:43:4c:
         06:92:88:27:7b:ca:49:04:e6:9f:fa:91:a3:74:86:65:76:ce:
         78:90:00:61:ed:ee:76:5d:ce:4d:f5:0d:ba:7d:44:69:05:01:
         b5:3d:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:30:52 2025 by rpki-client