Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa
File:                     8b7a8af7-f7ba-312f-8140-005dd293f00c.roa (raw, json)
Hash identifier:          wWtfLy4wmm61ZACMfmTsthJ6ZrEmYBTRONq+LwMGUo4=
Subject key identifier:   C7:AB:99:8E:F6:61:E7:E7:0A:2B:4C:80:7D:67:53:FE:98:99:A7:BA
Certificate issuer:       /CN=04b45e42-c2e7-4254-9ecb-472a7693a730
Certificate serial:       010D0C9F4328584AADF101087383F626981E9F80
Authority key identifier: DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     397377
IP address blocks:        63.246.143.0/24 maxlen: 24
                          161.199.88.0/24 maxlen: 24
                          207.229.66.0/24 maxlen: 24
                          2605:51c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:01:08:73:83:f6:26:98:1e:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b45e42-c2e7-4254-9ecb-472a7693a730
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=6b9259c8-d34f-4f59-82b6-7a7c61131260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:42:0c:c7:6f:fb:7d:8d:62:a6:0d:a4:16:
                    2c:72:a9:8c:0c:92:0a:ef:b7:f4:75:a7:a4:da:8c:
                    73:02:4b:03:be:bc:f3:5d:cb:4a:77:82:44:c1:d8:
                    51:45:4c:29:61:53:7a:4b:ce:dd:8a:f1:7d:99:ce:
                    84:f4:de:62:a3:13:fe:86:44:a5:47:3f:6d:33:e6:
                    c2:6a:50:8d:90:30:2c:cd:8a:86:4f:08:c4:de:0b:
                    34:7c:28:0c:bf:75:47:9c:c5:a2:42:e1:ec:36:ee:
                    3c:18:67:e3:a5:18:0e:2d:e8:12:f2:fd:32:a9:52:
                    bc:23:8f:92:55:01:7e:c6:96:d2:5c:71:0b:d9:f2:
                    23:2a:7b:c2:96:c7:8e:ac:ab:14:e8:b7:6b:2d:36:
                    2f:99:d4:f1:c5:ed:ae:0e:05:15:ab:2d:86:9f:e7:
                    c3:e9:00:af:11:b3:e8:a1:35:d2:1b:cb:75:a2:ab:
                    49:b1:42:6a:40:17:0d:b6:69:73:32:37:87:d5:a0:
                    ac:d9:4c:ad:75:56:28:cc:29:29:3d:d2:db:50:5e:
                    b4:6b:3d:28:fe:af:fe:e4:77:7e:be:1b:0e:8b:c7:
                    d5:94:9f:77:f1:0c:6a:66:1b:b4:a0:b2:78:b8:49:
                    34:2b:1d:d4:e7:e0:d2:4b:74:cd:44:41:5c:39:a4:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AB:99:8E:F6:61:E7:E7:0A:2B:4C:80:7D:67:53:FE:98:99:A7:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.crl

            X509v3 Authority Key Identifier:
                keyid:DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.143.0/24
                  161.199.88.0/24
                  207.229.66.0/24
                IPv6:
                  2605:51c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:27:42:29:2f:37:de:5d:a2:8e:55:8f:da:2c:bb:2e:3f:3d:
         8f:a2:01:f1:3b:a3:ed:70:40:f1:17:9d:b3:59:d7:9c:09:13:
         78:fb:cf:2a:0c:ab:3a:1b:af:e8:fe:91:a1:b5:ca:9c:10:d8:
         09:81:e1:3a:1b:74:04:32:79:3a:e4:8c:c0:a8:6b:b8:01:8d:
         86:72:74:cd:7e:18:aa:b2:16:37:a9:8e:3f:6c:1f:e4:15:41:
         32:76:ce:f8:03:8d:44:95:10:59:33:b9:1e:06:9c:f5:62:5a:
         42:c0:a2:6d:1b:09:cc:9a:66:0f:9d:92:36:c6:32:2a:9d:40:
         bd:b5:b2:25:54:08:97:48:ec:95:cd:9a:ff:f8:5f:67:a5:17:
         99:49:1d:8c:83:b3:12:5f:1a:bd:8e:c5:2b:12:2d:15:f3:8f:
         44:13:ae:ee:b3:bb:93:27:b4:c2:0b:72:eb:e8:f4:ab:a5:7b:
         34:38:2f:14:63:65:d9:06:8f:14:97:39:d4:aa:20:cf:5f:ca:
         f9:da:0d:d5:fd:34:fe:bc:51:35:04:d5:24:7f:62:db:88:1e:
         91:68:c6:6d:26:08:58:17:81:d5:b2:fa:f6:0c:5c:42:46:0f:
         84:66:5b:98:b5:ef:0b:8a:9b:b4:5e:6c:54:e1:fd:3c:c0:a2:
         59:1a:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:02 2025 by rpki-client