Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/6174af25-52f7-302d-9608-f35e6b4edb22.roa
File:                     6174af25-52f7-302d-9608-f35e6b4edb22.roa (raw, json)
Hash identifier:          QNWzQJCmB9mHX30EPUnO6W4ItG2t/9M56+ghU5+OrAo=
Subject key identifier:   62:8F:2F:44:4B:47:0A:D4:6B:8C:EF:26:E6:45:02:F8:33:C4:D4:21
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584A374AC292552554E48A536BA0
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/6174af25-52f7-302d-9608-f35e6b4edb22.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     22351
IP address blocks:        64.88.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c2:92:55:25:54:e4:8a:53:6b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=9aca195a-e362-469c-a55d-63d3b2ef9702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9c:e6:3c:cf:f5:f2:e2:02:bb:ce:99:8d:68:
                    4f:cd:77:6f:4a:32:60:e8:ce:ac:a9:d9:dc:73:51:
                    b6:6d:28:c5:0b:59:81:11:3a:38:98:db:d5:77:41:
                    a4:64:1d:f1:a7:2d:3c:c2:9d:80:3b:e7:ad:7d:62:
                    aa:2d:0a:dc:a4:41:2f:25:d9:93:fa:61:65:d9:41:
                    b6:13:ff:f6:bd:1d:f7:e8:f3:2a:d1:a0:8e:00:1c:
                    43:69:5e:6b:6a:a5:23:cb:3f:6a:96:96:95:6e:a5:
                    03:6b:88:cb:83:cb:6c:14:1d:c5:12:d4:72:8f:c9:
                    e2:e5:85:2f:be:3a:f8:3d:08:0c:02:e4:8a:ed:2d:
                    da:70:f2:f2:3d:35:d9:ef:03:6c:b6:b7:7b:ec:89:
                    fe:ce:67:a6:ed:bd:6d:af:90:96:0a:36:8b:7d:5e:
                    f8:5c:9a:84:a7:6b:9b:85:22:ec:ab:e1:8b:6e:70:
                    4c:3f:5e:44:7c:47:7c:c7:38:ce:0c:9d:4b:bd:ba:
                    e6:00:5d:a0:15:9f:01:b9:4b:b0:9a:82:62:ae:be:
                    dd:8d:47:18:c8:c7:1a:0f:66:37:5d:e7:03:10:d9:
                    68:b2:b0:34:c0:b8:26:d5:23:5e:8d:dc:2c:1b:9f:
                    29:02:4f:ff:e7:6a:f4:33:7a:e5:1a:18:fc:68:83:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8F:2F:44:4B:47:0A:D4:6B:8C:EF:26:E6:45:02:F8:33:C4:D4:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/6174af25-52f7-302d-9608-f35e6b4edb22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f1:e4:45:2a:64:65:a2:1e:5c:99:d0:7c:47:67:b8:42:f3:
         28:76:19:c7:8e:49:44:ba:0b:4c:ec:13:3a:b5:3a:c0:9d:d7:
         65:52:a7:37:6a:a0:09:6b:92:0c:4e:3d:a2:99:e1:be:c0:7f:
         86:f1:2c:ed:47:f7:6a:2f:be:f6:35:19:ff:62:ef:be:ab:3f:
         93:5d:51:64:37:83:1b:aa:99:9b:36:53:db:17:9c:15:3a:bb:
         82:43:69:bf:60:b0:40:f6:a2:d6:0d:59:f5:e9:91:48:6f:5c:
         af:f4:87:12:b0:40:bd:ce:57:e7:40:de:b7:59:58:e2:7c:80:
         8e:4a:f7:1a:a5:f4:0e:20:3f:88:61:83:31:61:80:f2:87:de:
         0c:8f:4b:3c:0a:a9:67:ee:1d:37:9c:52:3c:05:34:84:16:80:
         72:24:e8:6d:21:93:e6:3d:eb:68:fa:2b:23:9d:5d:62:d2:6d:
         26:9e:05:99:62:e6:19:77:57:a0:db:31:a3:ba:9a:e8:e4:53:
         d2:fd:a5:e4:6a:43:79:3e:69:5d:04:f9:44:69:ac:76:6e:72:
         1f:bd:81:71:d9:46:16:3b:86:09:f6:71:2b:a5:33:e2:7f:40:
         36:85:6e:32:00:6e:6d:8a:c1:e2:49:0b:05:cf:9d:a6:4b:eb:
         50:70:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:17:32 2025 by rpki-client