Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/88b62d1b-fd35-3bab-87bd-ea41e242c121.roa
File:                     88b62d1b-fd35-3bab-87bd-ea41e242c121.roa (raw, json)
Hash identifier:          YomK0SvQJkxuA3SCyIh4Ysx4eULHWOBunGjwMHLxUjg=
Subject key identifier:   5F:8D:B6:B3:E1:19:20:94:61:29:99:51:67:57:4C:28:7A:EC:57:AA
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584A454038CA950E643E6206F680
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/88b62d1b-fd35-3bab-87bd-ea41e242c121.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     5769
IP address blocks:        24.37.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:38:ca:95:0e:64:3e:62:06:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=7bdc897b-7e66-48da-bcc1-bb651bc0228d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b8:9a:04:17:f2:f0:65:2a:07:24:16:de:ba:
                    bd:83:ba:0a:d5:6e:f4:e3:70:84:40:b7:01:98:b2:
                    ce:d9:0f:d2:b6:98:ce:13:00:1a:88:90:8a:d3:1b:
                    7e:ea:a0:8c:c7:0f:9c:81:52:8b:25:1f:50:0c:41:
                    15:72:33:9e:c2:d1:74:17:24:d6:22:4c:51:05:5b:
                    04:56:13:61:e0:30:59:91:8e:85:35:27:f9:8e:d8:
                    17:ff:d9:2a:01:d1:d3:f2:40:77:89:da:ca:6a:eb:
                    39:29:fa:27:09:04:60:c5:f3:bf:82:b9:d1:ea:e0:
                    44:0a:fe:bc:c3:a9:f5:87:69:b3:4a:cd:57:01:34:
                    60:e1:33:69:2f:3f:95:9d:cd:4e:8f:be:34:82:29:
                    e2:d5:df:72:58:27:4d:86:6f:03:33:6a:cb:21:93:
                    12:a5:62:2e:eb:d7:e2:b6:67:b9:c1:56:48:d4:e9:
                    a3:49:e2:55:81:ad:a0:e3:96:ba:c8:e3:b4:18:e2:
                    22:1f:82:d8:89:c9:4c:17:46:fc:3b:b1:d7:fc:fb:
                    cd:28:ee:02:30:18:10:86:12:78:2b:76:95:2a:07:
                    25:2b:9f:80:79:54:71:72:56:bb:30:5a:19:21:2d:
                    24:05:4b:d1:c2:49:09:34:f7:4d:aa:66:73:a6:fd:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8D:B6:B3:E1:19:20:94:61:29:99:51:67:57:4C:28:7A:EC:57:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/88b62d1b-fd35-3bab-87bd-ea41e242c121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.37.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:77:4d:94:43:38:11:0b:a8:1a:62:0f:f2:0b:16:0d:b1:27:
         d2:ce:28:f6:18:2d:98:8b:e9:a2:1c:42:7e:fc:02:1b:b9:93:
         0c:7a:3b:81:31:9c:be:f7:48:5f:9c:03:d3:08:a4:cf:bf:e5:
         89:79:05:fc:d6:84:99:0c:c2:77:6e:99:d3:93:a5:2f:f9:23:
         ce:05:69:f6:bf:a2:e7:3e:54:13:cc:ab:2a:91:7e:5e:d8:f0:
         16:dc:f6:1f:f8:f7:5c:2d:74:4e:6e:40:23:b1:2a:f9:f8:44:
         7f:74:85:a0:66:aa:08:5a:b6:90:88:81:6d:d5:d0:30:a2:31:
         c9:1d:b7:46:fd:1e:48:07:ba:31:e8:76:45:f3:c1:d2:09:79:
         68:41:89:7b:b3:7b:44:f3:97:e4:cc:25:a0:04:04:30:f6:e1:
         33:4f:a9:76:80:60:30:6b:8d:ed:1f:c4:85:fe:a8:c4:c1:3e:
         46:25:11:2f:35:1a:5e:53:0f:3b:59:c7:20:ed:c1:92:e5:f1:
         fa:fc:61:78:b0:ca:a6:7d:e0:42:91:3d:8b:07:a7:3c:bc:a8:
         5f:1e:b1:30:33:9a:5e:1c:16:b9:67:fa:d1:6d:8d:a7:a3:88:
         af:1f:b5:de:7d:93:fe:5c:b6:4e:4a:18:b5:02:04:3c:6e:e4:
         fb:ea:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:01:05 2025 by rpki-client