Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa
File:                     2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa (raw, json)
Hash identifier:          ypjKzUmh1GJ18od00bE9rj3rLcMMGMxzkeC2b8au2Do=
Subject key identifier:   AB:68:4B:32:B4:C8:D2:8E:52:BD:39:8A:A3:8A:FA:FD:D8:A9:BE:36
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F43285849C904E650E2D3355AAD316B00
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     13807
IP address blocks:        64.64.144.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e6:50:e2:d3:35:5a:ad:31:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=a0bf0156-6ab8-4eff-b633-cd1b13122303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:08:45:a6:fd:3a:8d:2e:7c:d8:62:23:54:
                    68:53:2e:e3:f6:d0:77:f4:27:e4:41:42:a4:aa:18:
                    81:ae:8a:8a:14:fc:cf:10:b8:bd:c1:9b:88:ef:ef:
                    f9:12:88:d5:7b:38:34:07:64:4c:35:88:ee:70:8d:
                    2d:56:5f:bf:07:5e:5a:90:a4:03:5c:c4:3d:18:45:
                    75:a1:ab:17:3a:ee:53:c3:d3:a0:08:34:57:58:7b:
                    27:86:b7:1e:bc:d2:0d:cb:89:66:ba:8c:75:ee:ee:
                    e0:3b:fe:9b:56:ea:27:ea:a3:d5:2c:0e:f0:c9:19:
                    61:e9:11:0a:bb:27:d0:89:a4:2f:6f:04:0f:fb:e3:
                    79:a9:b5:05:09:5b:e7:9d:9b:24:89:a7:03:1a:91:
                    ff:43:e7:4a:9e:5f:16:2e:dd:0a:a7:bc:c4:91:ba:
                    ea:af:22:97:cb:cb:fb:9a:1a:f5:d1:c3:51:e9:ca:
                    4d:3b:99:70:67:0a:3f:a2:5e:9d:66:eb:d6:ce:23:
                    7c:d2:86:f9:83:6e:d1:a0:c0:91:c1:15:b5:e4:29:
                    59:f5:3b:f1:4a:ba:f7:a9:32:73:1a:bc:aa:30:ae:
                    0f:2f:29:3d:ed:aa:49:4e:46:34:e9:1f:a6:62:a5:
                    18:77:5f:17:c3:9b:51:61:6d:86:cf:a1:72:fc:02:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:68:4B:32:B4:C8:D2:8E:52:BD:39:8A:A3:8A:FA:FD:D8:A9:BE:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:55:c0:e1:97:ec:7b:a8:8d:02:d9:a3:be:90:05:98:26:2c:
         6d:31:53:f5:22:57:ec:24:70:58:c6:e5:be:d9:ce:16:c1:94:
         c8:fd:1f:82:45:4e:e5:47:aa:a1:c1:c0:f4:8a:aa:b6:53:28:
         1a:ef:5a:25:67:44:89:ac:91:a5:57:0e:d9:be:29:d7:76:39:
         15:c2:2a:1c:b3:bf:7b:00:ba:80:e9:30:14:14:16:d9:17:61:
         35:b8:09:8e:b0:b6:b9:0d:b1:1a:47:e6:fe:7b:97:6a:55:92:
         ea:0d:40:a4:6d:2f:1d:1c:24:36:50:b1:ea:45:b8:f7:57:42:
         38:7a:da:b7:59:54:7b:7a:92:41:76:ce:b1:c0:be:a6:0f:5b:
         b0:7d:0e:98:e2:f8:03:95:51:7e:fc:0f:e6:43:da:1e:98:f5:
         5c:e7:e4:58:e1:37:91:21:78:92:59:c3:a2:61:64:76:b5:86:
         9c:5f:d7:0e:f1:7b:1d:3d:6d:c7:a8:99:5b:0e:f2:19:d2:8c:
         22:c8:0f:68:27:af:58:72:bb:1a:ea:08:1f:bd:10:49:04:a8:
         d7:53:f1:1b:8b:30:1d:56:3e:15:7d:3a:f5:49:9a:bd:87:d6:
         f2:16:ff:13:4c:66:b9:d1:a9:29:ae:8a:1d:18:dc:39:13:2a:
         2b:69:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:22 2025 by rpki-client