Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862/f62264d0-b5af-3f3c-b193-c204ac4cf62d.roa
File:                     f62264d0-b5af-3f3c-b193-c204ac4cf62d.roa (raw, json)
Hash identifier:          32GgcdvQpXDgvD2LlbwEIWTSYeZvM8jnxWxqJSsAxSM=
Subject key identifier:   90:BD:AC:30:47:8D:2B:F9:BF:90:65:8D:31:D6:E0:91:50:A0:6A:E6
Certificate issuer:       /CN=163a632b-ffc2-46ff-89dc-2482e240d862
Certificate serial:       010D0C9F4328584A43DB001E2C060EC72AA73C90
Authority key identifier: 11:CC:31:B9:2B:E4:A3:2F:AD:21:7F:0F:22:B9:9E:5D:3F:6F:C5:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862/f62264d0-b5af-3f3c-b193-c204ac4cf62d.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     398230
IP address blocks:        64.37.31.0/24 maxlen: 24
                          199.192.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862/163a632b-ffc2-46ff-89dc-2482e240d862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862/163a632b-ffc2-46ff-89dc-2482e240d862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:00:1e:2c:06:0e:c7:2a:a7:3c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163a632b-ffc2-46ff-89dc-2482e240d862
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=d63ca219-de5f-4b20-b66c-f1a10604a019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:4d:6a:7e:bc:6d:51:7d:94:8f:8e:ae:d3:
                    e4:7a:f2:b6:1d:f8:e5:a8:bf:5d:89:a3:07:39:b7:
                    66:86:f0:92:0e:ef:dc:39:05:f4:89:f6:b7:d0:c2:
                    fb:0f:a5:e9:3a:b6:cf:61:6c:be:89:f5:7f:6d:b0:
                    b6:5c:aa:cc:91:2c:ef:5f:18:7e:c0:44:ae:4c:e7:
                    9d:de:03:f7:86:7c:5c:06:88:56:28:fe:3f:c9:ce:
                    0b:f3:92:50:16:06:35:bb:c2:4a:b0:b4:31:74:81:
                    3a:3d:49:0f:a9:b5:2b:c7:91:da:45:9a:30:7d:b2:
                    88:20:e2:36:c8:a6:13:5d:6b:69:38:1f:20:d5:ef:
                    62:e9:49:0d:09:3c:d1:4f:ee:dc:46:1f:33:a9:87:
                    24:e9:fa:ff:2e:a6:dc:f4:52:54:79:b5:28:b9:b2:
                    d6:43:cc:c9:5c:bf:b8:13:2c:97:1c:9d:8d:2c:fc:
                    b2:23:78:e5:4f:64:48:b3:99:f5:b2:96:b0:8f:4a:
                    1c:f7:dc:cd:5d:1d:97:e8:5a:43:2d:c1:3f:95:ca:
                    e0:cd:9e:e0:c3:66:4e:df:5d:77:a5:1f:0b:e2:ab:
                    95:1b:a2:58:7b:0d:c6:9d:3d:cf:ed:d3:7f:4e:48:
                    63:d5:4a:30:12:89:4e:c3:3c:e2:af:b4:5d:00:4a:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BD:AC:30:47:8D:2B:F9:BF:90:65:8D:31:D6:E0:91:50:A0:6A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862/f62264d0-b5af-3f3c-b193-c204ac4cf62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862/163a632b-ffc2-46ff-89dc-2482e240d862.crl

            X509v3 Authority Key Identifier:
                keyid:11:CC:31:B9:2B:E4:A3:2F:AD:21:7F:0F:22:B9:9E:5D:3F:6F:C5:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.31.0/24
                  199.192.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f4:a2:85:d8:79:e9:3c:d1:f3:b4:82:72:ae:58:cf:ea:5c:
         db:87:ba:6a:70:e8:7f:46:b3:48:89:71:f6:9e:ce:2c:b9:00:
         ed:76:4c:73:da:ab:e3:78:26:6e:3f:d4:1c:f8:ee:ee:ff:cd:
         2c:95:7c:47:85:ff:21:85:00:ce:54:0c:33:9b:be:fe:6f:9a:
         04:50:8c:c5:9b:ca:6a:b0:ab:9a:3e:15:ec:3e:b9:a3:72:88:
         d1:2f:7c:0f:56:cf:56:78:22:59:84:92:bf:57:d5:ff:cf:f0:
         e0:08:96:f8:e2:3a:34:37:29:63:40:6b:ae:53:0c:69:e2:ff:
         4a:f5:3c:c9:e2:80:38:95:4c:20:3d:b8:b8:ec:56:6b:b7:30:
         9d:3f:ef:9d:a9:9e:40:6f:61:5a:33:34:99:95:83:54:74:a0:
         79:e4:dc:c3:c9:73:e9:03:c9:18:40:48:30:e0:fe:5c:49:49:
         e1:3f:f5:2a:43:06:33:4b:ea:06:85:48:b9:bc:c4:fa:cd:bf:
         69:6a:ab:90:c9:c4:83:3e:41:95:9e:38:c9:fe:f2:3d:f0:97:
         8b:55:d6:d5:2c:5f:c3:83:74:46:8c:71:ed:30:04:77:0d:4f:
         da:68:44:ea:c1:35:e1:ba:44:01:4b:11:95:75:02:cb:53:f6:
         d9:f6:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:28:23 2025 by rpki-client