Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa
File:                     a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa (raw, json)
Hash identifier:          ujzyGTGYvDE1K82mpaQHR7FJaKSBuweTvOUNGMsm2z8=
Subject key identifier:   F6:DF:02:8F:DF:D2:60:EB:A5:C3:22:97:5D:55:C8:84:D5:52:78:59
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F4328584A1035356F1087D5520BE1C380
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     32298
IP address blocks:        64.255.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:35:6f:10:87:d5:52:0b:e1:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=3739a728-cd98-4773-8732-1d51803520f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:7f:3a:53:34:f7:ae:ff:21:1a:99:5f:f3:
                    88:df:c0:61:e9:43:b7:0d:00:38:2f:2c:0c:0d:96:
                    d1:3c:ab:38:3b:81:3b:28:af:bf:31:17:9b:b1:64:
                    ee:43:99:1c:75:a9:31:e6:ca:44:62:13:be:35:6c:
                    77:ad:58:38:2f:b4:cf:ce:a7:f9:38:f1:6e:0b:4f:
                    d3:67:81:9c:f4:e4:e0:fd:38:7e:30:4a:79:b1:94:
                    a4:83:5e:41:eb:74:fb:67:16:cc:1e:43:51:5b:eb:
                    74:c2:0b:70:b9:d7:77:24:be:fa:54:33:d0:48:07:
                    04:18:f5:c2:79:f2:26:0b:98:d2:de:15:a2:d3:5f:
                    08:ee:af:62:98:7a:31:ae:e0:88:eb:a4:5e:36:49:
                    30:b9:85:4a:28:10:37:f6:d0:d8:31:12:51:7f:ae:
                    7a:78:ad:f2:33:a0:b3:9c:77:43:e7:e9:a8:58:31:
                    8e:2f:c2:86:fc:2b:bc:d5:e0:88:e5:56:fd:6d:47:
                    99:70:f7:3b:f8:e3:8e:da:a6:20:12:4a:8d:53:85:
                    88:3d:7c:bb:89:c9:6f:9d:07:97:5e:ef:e5:f8:c0:
                    57:7e:e0:83:3d:66:9d:d0:65:45:3b:c8:6d:79:5b:
                    bd:a4:dc:36:cd:1a:7f:39:09:d6:de:37:51:4e:b7:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DF:02:8F:DF:D2:60:EB:A5:C3:22:97:5D:55:C8:84:D5:52:78:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:de:e2:aa:ec:2f:65:49:20:18:09:e8:9f:cd:0d:66:9f:de:
         d7:28:22:58:7c:4a:95:fc:c3:df:21:56:69:6d:63:40:9a:1b:
         10:e8:73:fe:e9:c0:a5:dd:d0:29:37:12:03:cc:f5:5d:66:99:
         7d:7e:8d:09:7b:94:60:0b:de:28:a2:8d:f1:12:43:04:ba:1c:
         38:bb:b3:d5:46:e2:8c:a9:12:14:a5:0c:00:cb:6f:bd:0a:3c:
         68:85:42:8a:f8:3a:71:8f:19:06:ea:69:fc:04:63:4a:90:2e:
         ca:c4:21:84:c0:9f:09:3d:fd:a6:24:ab:2b:40:bd:cb:42:6f:
         b5:04:98:60:96:f8:a9:1a:85:b2:46:28:24:78:c6:bc:0c:86:
         5c:cf:47:c7:5c:bc:fd:7e:b3:e8:b1:d0:39:1c:05:c5:a9:e9:
         93:5a:02:47:56:2b:81:a5:aa:4e:83:d3:a8:d2:11:43:9d:be:
         ad:04:d4:41:b8:79:b2:46:e7:f7:32:de:b5:bc:76:f1:dc:3f:
         1f:82:f4:37:92:b7:54:a4:4c:a8:7a:11:9c:f8:ab:2e:99:d4:
         ee:2d:6e:0d:6b:d5:40:6d:40:11:96:6e:63:25:89:be:df:87:
         18:1b:5d:6d:c2:a5:0f:e6:c4:da:f3:ed:67:3e:0d:78:a2:6c:
         29:9f:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:54 2025 by rpki-client