Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa
File:                     603d6a12-edba-37c4-bd67-825034ce3d96.roa (raw, json)
Hash identifier:          z+IBRS5qoHGx+VmLVPOl3duhvYu5OrkqKagSVaYv5Kw=
Subject key identifier:   EF:1D:7D:5B:4E:F0:AF:5A:EF:79:E6:75:E2:04:87:95:CA:DF:41:D8
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584A348020207101583954DAC680
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     7018
IP address blocks:        64.84.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:20:20:71:01:58:39:54:da:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=dce17c32-f7df-41b4-9bb7-1f04124eac75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:00:70:c6:ce:81:68:23:5e:97:da:08:61:80:
                    e9:fd:d7:8e:87:9f:aa:80:15:2a:d9:2d:e0:6e:89:
                    d3:c1:d2:d0:34:d5:89:0b:cb:ce:e0:3c:e2:8f:88:
                    96:65:a1:8b:15:77:2e:69:ab:f2:b2:53:33:32:c9:
                    77:91:b6:f4:9d:25:77:4b:bc:c2:b9:85:66:a3:22:
                    b6:bc:b8:a1:f3:56:eb:4a:ff:20:6c:21:0b:38:b7:
                    92:9b:da:93:3f:49:57:12:18:6f:ee:3e:d8:e7:71:
                    ef:d7:57:63:bf:bc:fc:8c:c0:7a:56:66:26:24:6b:
                    a9:5d:4b:9d:db:7c:de:95:6d:3a:ed:b7:af:21:0f:
                    eb:ad:93:b1:64:4f:ae:99:1f:0b:8f:c1:44:82:d8:
                    c6:be:02:b0:48:fd:17:33:2f:8d:ea:7f:76:72:80:
                    bd:f9:df:90:25:b3:7d:4a:da:0c:ef:68:09:24:d3:
                    51:de:80:2e:ab:61:06:f2:c0:cf:ea:05:ca:bf:23:
                    4e:ba:7d:4d:9e:45:df:bc:d5:91:67:4f:c5:b6:30:
                    ef:d6:66:8d:41:57:66:33:41:b3:79:f0:92:83:83:
                    a6:0d:43:69:91:51:b5:28:9c:ac:4a:c9:66:1b:69:
                    b4:f9:c4:25:cd:82:1b:01:ce:6a:14:ce:78:d2:e1:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:7D:5B:4E:F0:AF:5A:EF:79:E6:75:E2:04:87:95:CA:DF:41:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d1:7b:56:7f:2c:c4:bf:dd:9c:1a:7c:31:fb:16:f3:4d:a7:
         af:fd:67:e2:b0:0d:94:b6:9f:27:af:58:15:eb:eb:14:8b:5b:
         c7:ff:d1:9b:8b:69:a5:36:ce:68:a7:66:61:b5:85:af:05:52:
         41:67:23:6d:32:c9:29:1f:a4:19:a2:85:dc:17:62:be:07:e3:
         e5:d0:96:8b:e4:3b:c6:26:bf:d0:3a:ca:36:7f:0b:07:ab:f9:
         5d:16:e6:b3:b2:14:54:bd:6c:66:48:66:7a:b8:24:d9:ce:58:
         9e:d7:28:ed:f7:3e:aa:9e:e1:32:e5:6d:ee:82:39:57:d2:03:
         c6:d4:1e:1a:80:a3:6f:b3:76:26:db:a5:24:07:b4:f0:f5:1a:
         1e:20:a7:51:da:e2:b7:86:ef:8d:b3:fd:8f:3e:b2:df:60:9e:
         18:2d:93:28:4f:33:db:c7:4e:a1:c9:ca:99:b5:a0:0b:9a:6f:
         2c:55:20:4a:ff:d7:a8:0d:eb:28:11:53:a3:bd:fb:a8:cb:90:
         5a:a3:7e:06:ed:9b:a5:86:c8:05:8a:e8:0c:00:29:8c:2b:4c:
         7b:d6:f2:2a:88:11:b9:29:f1:3c:37:fe:45:fb:b4:4e:0f:11:
         30:86:70:23:3d:bb:20:ad:f2:30:76:09:4a:5d:81:ce:81:19:
         dc:42:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:33:51 2025 by rpki-client