Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa
File:                     f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa (raw, json)
Hash identifier:          CIvkJuisqmQEQrLhzzfE//dQoo04qxhfL/PeDssuPKI=
Subject key identifier:   93:EC:5A:90:49:D0:BD:19:32:A7:01:90:10:4D:E7:B0:B0:6D:DB:76
Certificate issuer:       /CN=7fb67441-9735-44cc-ae5f-20a79cca0b47
Certificate serial:       010D0C9F4328584AB3862400E48C6460BA7C2940
Authority key identifier: AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     29894
IP address blocks:        64.130.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:24:00:e4:8c:64:60:ba:7c:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb67441-9735-44cc-ae5f-20a79cca0b47
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=e86f1c18-5332-4a9c-884e-70d57139de01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:ea:6b:84:6b:0e:74:4b:8d:64:f9:44:6f:
                    1f:83:de:68:ae:a9:39:5c:b8:39:e7:24:20:5e:02:
                    97:db:ee:f3:7d:e9:35:1b:fb:2a:3c:85:30:c6:f8:
                    d6:dc:d6:f0:66:d3:c7:9a:66:74:73:68:2e:c9:7f:
                    97:5e:01:a6:d2:3d:54:ca:48:ca:19:ff:fd:9b:ef:
                    93:e4:75:a7:e3:48:8b:e6:24:68:a5:cf:d8:fb:75:
                    0a:3a:e8:cc:b6:da:53:8e:2b:dc:26:ee:34:f3:68:
                    16:9f:59:d1:da:97:95:88:90:67:b5:8b:6f:8b:a4:
                    01:a5:03:d7:bb:ea:f0:64:65:02:30:a4:85:91:ed:
                    bf:43:60:08:eb:cc:d3:fe:fa:71:d6:73:7c:54:b8:
                    52:de:46:4a:1e:19:35:3e:99:ce:15:ed:ac:71:48:
                    f8:06:75:a2:5d:c6:93:97:e7:52:c5:7e:ab:1c:8e:
                    2b:d2:83:1a:d9:58:33:af:bb:c0:e9:69:a8:77:16:
                    41:71:66:7d:d2:45:19:b4:cd:fa:d5:82:87:65:ad:
                    92:15:fb:f9:d7:14:84:fb:2f:fb:86:d4:75:5e:3b:
                    02:30:47:c2:07:af:b9:29:34:41:0f:c4:f0:c3:00:
                    96:4b:ab:13:74:bb:6f:3e:5d:42:6b:38:85:d8:ab:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EC:5A:90:49:D0:BD:19:32:A7:01:90:10:4D:E7:B0:B0:6D:DB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/f5cf5850-907d-3cfc-9897-ffdc99d6434b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47/7fb67441-9735-44cc-ae5f-20a79cca0b47.crl

            X509v3 Authority Key Identifier:
                keyid:AF:47:55:BD:2B:E8:4E:88:5F:48:1A:E3:E9:E9:32:6D:C9:AC:4E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fb67441-9735-44cc-ae5f-20a79cca0b47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:de:a8:40:0a:b8:00:1f:89:4b:26:63:3f:3a:29:a5:49:
         92:83:db:05:a4:a1:0e:92:a3:5f:36:23:5b:f0:d9:ec:01:e8:
         ad:b5:2a:50:10:33:9d:fd:07:46:a6:1f:e9:c9:b2:e1:5f:ac:
         89:41:6f:9c:7f:b6:00:11:e3:f8:01:d5:0f:58:f2:37:d0:2d:
         5e:5c:e3:a4:fd:a5:f2:f1:cf:9d:b7:fa:be:83:8a:92:6f:e7:
         25:b8:35:de:04:23:0b:e6:d2:95:a5:cf:0a:be:60:25:e9:54:
         92:f5:81:2d:ac:d7:fd:10:2c:10:1d:a4:b7:d5:4d:f9:16:7b:
         bb:27:d4:7f:7b:c7:e6:80:38:23:6d:92:26:5f:df:12:40:70:
         0e:d7:05:02:fb:c2:4b:e1:9e:1b:68:5c:40:6e:40:b0:b9:90:
         fb:70:39:67:b5:42:68:76:9d:ec:ac:e9:5e:5b:91:44:09:8f:
         26:9f:63:61:18:96:14:80:ec:c2:e5:d3:74:58:38:9b:24:5f:
         8d:af:a8:9f:35:44:b2:1c:cd:b4:77:33:8f:a7:43:d7:98:5f:
         53:da:ee:9b:68:f2:ca:1d:14:15:74:f9:23:9a:f0:e1:7e:f7:
         fe:50:47:c8:20:dd:73:f2:10:f1:25:0b:a4:e3:86:1b:93:02:
         a3:b7:f9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:28:02 2025 by rpki-client