Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/cefc8f9c-55b7-3273-a3c2-21bd87b35f24.roa
File:                     cefc8f9c-55b7-3273-a3c2-21bd87b35f24.roa (raw, json)
Hash identifier:          8/cgw+mPh4mF2hj7lyu0s5d+No1nENehfsyD8I3JzHg=
Subject key identifier:   47:4F:4C:C6:3A:7F:16:CD:C3:38:E3:48:1A:AF:32:67:03:F6:78:F3
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F43285849D1650F11C0DD599A16C835E0
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/cefc8f9c-55b7-3273-a3c2-21bd87b35f24.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     7794
IP address blocks:        64.118.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0f:11:c0:dd:59:9a:16:c8:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=5f3d1912-6233-496c-9ec6-cc8b65a798f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:97:50:1c:8d:9f:cf:98:cb:48:53:96:0e:70:
                    f1:fc:87:92:58:1f:39:fb:b8:04:c5:66:0b:60:30:
                    09:a5:6b:9d:90:3a:c2:8f:d3:53:5b:81:c3:c3:5b:
                    a2:d2:f1:8a:1a:1b:bf:40:7a:02:e2:82:da:0a:5a:
                    00:97:ce:f4:ab:52:65:27:9a:99:93:b6:b4:ab:e3:
                    7f:1c:fe:97:94:d9:43:bf:ee:6f:19:9b:df:5f:76:
                    b4:e7:db:8c:e7:de:cc:3e:d6:de:79:49:50:fb:3d:
                    96:a2:e7:08:8e:ea:5f:f5:37:5a:0e:00:41:c6:df:
                    e6:cd:c1:ba:5b:98:5e:bf:51:22:70:ab:ef:1f:a3:
                    2b:61:05:c1:ab:da:6b:d2:bd:80:71:c8:24:5c:c4:
                    6d:ab:6f:fe:33:01:f2:cd:45:ed:18:09:39:a2:7d:
                    d0:d1:9f:23:44:fe:ce:92:bb:a7:34:3b:8e:82:d7:
                    f6:47:ef:3d:0b:b4:02:8d:52:03:f4:ef:99:87:13:
                    82:c4:7a:dc:ed:0c:dc:51:d2:ac:a6:b2:23:7f:29:
                    32:35:cc:ea:5a:ce:ea:32:76:26:e1:cb:5d:fd:25:
                    15:0e:07:01:26:97:98:54:ec:44:5f:b1:15:d5:83:
                    05:e8:0f:39:eb:32:c6:07:f4:cb:a5:09:94:15:50:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4F:4C:C6:3A:7F:16:CD:C3:38:E3:48:1A:AF:32:67:03:F6:78:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/cefc8f9c-55b7-3273-a3c2-21bd87b35f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.118.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:31:2f:de:59:89:89:d7:28:fa:db:5b:62:f7:7f:ab:13:
         59:4b:9b:a4:4f:43:ee:d4:09:48:52:20:84:9a:53:2a:b8:10:
         14:1f:6b:dc:47:75:f8:aa:33:cc:bb:e5:dd:34:47:2e:18:99:
         be:39:c6:a8:54:9c:59:c1:60:1e:b1:51:39:ec:4a:44:b2:7f:
         15:3c:48:10:ca:13:77:75:d5:e9:6d:fc:6d:34:0a:13:77:25:
         fb:fb:c8:15:db:33:40:6f:09:73:43:87:07:e9:fa:fe:4f:7f:
         a4:93:71:93:48:2b:7b:33:32:fb:92:25:84:30:dd:58:22:63:
         35:89:13:f5:75:3d:e2:30:52:63:11:4f:55:51:b9:95:59:a0:
         37:75:81:b9:d5:4c:4f:7e:7b:09:04:61:67:93:0d:4b:7c:5f:
         a8:42:81:8e:16:67:ba:c6:35:2e:d5:38:26:cf:4d:a4:07:b8:
         7c:4d:fb:44:85:3b:12:91:a8:2a:08:69:59:97:5f:e6:1f:84:
         65:d3:05:b0:97:fe:eb:b6:98:8c:a1:57:92:66:27:ea:e0:18:
         a8:8b:d9:12:cd:01:8b:40:eb:65:29:6d:f5:41:b3:21:6e:ac:
         6d:ab:5a:d4:8f:74:60:d5:82:8c:b0:16:85:79:ce:41:4e:63:
         2f:2e:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:50:26 2025 by rpki-client