Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55ef6d06-1ecc-397a-8095-33cb407ed5a4.roa
File:                     55ef6d06-1ecc-397a-8095-33cb407ed5a4.roa (raw, json)
Hash identifier:          nxuwRLYewip+cUbn6RtsVU37/s+4kG/VIhzzlkyTj3o=
Subject key identifier:   2F:AB:25:51:CF:5E:98:39:60:8B:CD:24:BA:C1:67:C3:CC:42:07:54
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BC61133A15FFCCAE64780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55ef6d06-1ecc-397a-8095-33cb407ed5a4.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     40050
IP address blocks:        64.71.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:c6:11:33:a1:5f:fc:ca:e6:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=bb40c6c0-0d9d-477f-ae09-6a5524ecd9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:2c:57:29:5b:b0:45:49:c2:cb:45:7e:f8:
                    a2:2e:60:80:db:64:ed:29:5b:f2:eb:e8:87:79:10:
                    c6:55:12:42:95:28:1a:61:53:86:06:fe:3c:a4:12:
                    0b:6e:50:bf:9a:7d:e9:e6:d5:8b:16:d7:36:76:b0:
                    b4:41:a0:c9:91:7d:bf:f0:0d:9b:2e:4c:c8:19:0b:
                    71:d8:8f:e7:7a:4d:d4:e2:ed:e8:bd:a8:e1:e6:95:
                    48:e2:36:b6:a5:67:1c:37:1a:9b:ac:02:70:60:00:
                    39:da:75:b7:e0:23:e5:cd:cf:9d:b1:c0:8b:84:c4:
                    99:3c:a1:f0:11:30:ca:2e:54:6c:1a:09:39:47:12:
                    a9:51:0b:e5:25:ba:c7:aa:e6:e6:9e:0d:e4:78:eb:
                    7f:ba:14:65:5d:84:d0:fc:24:a0:08:b6:ea:f0:98:
                    12:c5:48:b4:84:56:ce:27:82:9a:6d:87:75:d7:73:
                    69:e6:be:0f:75:10:c1:d4:0e:8a:6b:e4:f6:85:8c:
                    7b:e1:75:5f:6a:d6:ac:f0:36:fc:b5:be:a2:bb:8f:
                    54:ab:02:d0:7c:b7:59:24:97:2a:c1:52:22:64:02:
                    3e:79:9e:a0:f3:cf:00:d7:92:0d:ee:e2:bc:34:07:
                    dd:bc:21:74:ba:a9:dc:de:6c:f8:59:f7:1a:ea:06:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AB:25:51:CF:5E:98:39:60:8B:CD:24:BA:C1:67:C3:CC:42:07:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55ef6d06-1ecc-397a-8095-33cb407ed5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:63:a8:58:db:2d:c0:8d:88:63:78:67:fd:78:77:ba:fd:8c:
         0a:c9:3b:88:3b:16:cb:8d:97:23:6e:0f:f0:98:28:5c:6e:97:
         95:fa:56:77:41:05:0e:8f:37:cb:a7:2c:f3:94:fe:dc:ab:f4:
         5e:e7:cf:18:b1:b0:8f:c6:ad:82:57:d6:c5:32:69:3e:14:8d:
         69:f2:b7:fa:d3:bb:61:f4:d6:1f:4e:02:ac:eb:45:a7:36:0e:
         68:c2:5b:85:2d:a2:18:93:92:bf:ab:90:dd:97:76:66:6b:56:
         4f:7a:a2:2d:c2:57:64:ea:57:36:5d:f7:ba:d5:15:0a:e3:52:
         e8:ad:e1:14:2a:bf:02:9e:5c:03:ca:c7:75:08:aa:eb:d9:0b:
         5e:3f:3f:c7:10:0b:99:d1:86:14:54:dd:be:85:0a:05:d4:21:
         b8:c5:71:89:08:7c:a0:92:2f:ba:f9:d3:3e:28:c0:c3:aa:d2:
         16:37:b8:8b:c7:b4:3e:97:03:15:26:27:0e:56:d4:58:73:5e:
         99:43:aa:7d:9e:32:92:d4:29:30:ea:50:ed:4c:c9:70:13:da:
         5e:c6:a4:75:86:d4:fa:e0:2c:41:51:57:9a:2c:fc:e5:28:79:
         8a:03:fa:d9:e9:84:65:e8:74:42:79:63:92:c0:7d:03:6a:1d:
         0a:bc:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:39 2025 by rpki-client