Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/27acee0d-e846-3425-a894-1bca0653ddd9.roa
File:                     27acee0d-e846-3425-a894-1bca0653ddd9.roa (raw, json)
Hash identifier:          XvpmlCEIiJdaiUu3amCM1bJp1Vg/gz5JvpF0uUWFnns=
Subject key identifier:   6C:90:91:B1:C3:99:88:C7:3B:51:76:4F:56:81:15:08:FE:CF:76:EF
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584A2ABAE894D180EB728EE67000
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/27acee0d-e846-3425-a894-1bca0653ddd9.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     13576
IP address blocks:        64.33.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e8:94:d1:80:eb:72:8e:e6:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=8da0ec78-e4ce-4626-845e-c48e9081c813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:bc:12:63:d3:f7:a7:4f:05:23:bc:30:6f:
                    7d:25:90:ac:7d:19:53:7d:e4:5b:d9:b9:5b:83:a7:
                    bd:49:15:fa:0c:e9:1f:a4:dd:23:f7:2e:9f:2a:20:
                    74:e6:3e:68:89:10:e0:a6:42:c8:e5:d3:9a:d6:64:
                    ae:46:4b:c6:62:f8:5c:e1:11:76:fb:09:bb:f9:62:
                    a1:60:29:22:5f:5a:90:3b:a5:d6:c2:dc:51:c3:69:
                    d2:33:75:23:84:ef:9c:0e:48:73:f1:c1:15:a0:17:
                    0f:6f:60:fc:f9:9e:cf:5a:0e:2a:99:10:2b:c1:f4:
                    90:99:2f:e0:69:29:b8:33:4f:4e:a4:c8:63:e2:10:
                    84:c9:ad:b5:00:04:a8:61:27:88:9d:6c:1a:09:2b:
                    7c:07:52:e0:0e:50:c9:dd:63:0e:81:4a:bf:a8:f9:
                    ad:21:c9:e3:80:3c:da:65:96:0a:12:2c:e3:7c:e9:
                    c6:1e:d8:6c:3d:c5:29:dd:c3:f8:82:cf:6f:5a:82:
                    71:e5:80:59:f4:f2:73:dd:0f:84:cb:d0:f9:ca:c6:
                    47:44:39:ba:b9:ce:56:6c:8f:07:31:87:84:2d:55:
                    58:be:d7:f5:6b:c9:32:40:b0:31:7f:52:f5:29:c7:
                    fb:9d:73:27:88:61:04:49:bd:cf:eb:50:2a:f2:4a:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:90:91:B1:C3:99:88:C7:3B:51:76:4F:56:81:15:08:FE:CF:76:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/27acee0d-e846-3425-a894-1bca0653ddd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c2:12:8e:9f:c9:cf:93:6d:08:1d:40:fb:97:84:78:87:4d:
         0f:28:84:e4:8f:39:8a:d1:5a:cf:f9:ba:bd:15:b3:c3:9a:ca:
         df:c5:65:b2:12:13:53:46:01:82:5e:8e:db:55:02:55:c5:c2:
         db:63:e4:26:e4:b2:61:9b:03:68:5e:12:d0:2f:c7:4e:c1:02:
         2e:d6:b4:b1:59:23:cd:2a:ec:70:3e:4d:c4:21:9a:82:74:83:
         f8:fd:d5:8c:fa:58:dc:9c:05:a6:a8:37:5f:0d:64:e5:22:df:
         1d:d1:cf:da:a6:6f:4d:13:76:34:fd:86:f8:9c:21:db:8f:05:
         62:e2:ec:1a:3e:61:d5:f4:ff:bc:c6:43:c9:e0:c8:a5:8d:0b:
         a1:c7:66:25:bf:c2:5a:58:5f:1e:0e:49:8f:cd:65:00:b9:f3:
         6e:88:69:7b:0f:8c:2c:7f:d3:2d:2e:f4:98:29:fe:48:64:b4:
         00:88:5f:0b:84:82:73:04:4a:1b:da:4f:38:b6:ae:7d:51:24:
         7c:08:19:a5:97:37:9d:84:64:7f:1e:60:e0:d0:db:6d:20:57:
         af:94:fe:67:1e:29:9b:c9:ed:3e:2b:06:ef:0c:7a:da:99:c2:
         ed:af:31:b3:f4:ae:5a:49:c6:e6:2e:ae:29:68:f7:7a:35:4e:
         ba:74:1d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:42:46 2025 by rpki-client