Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa
File:                     5a72f703-fbe8-361c-ba27-9625ee1622a2.roa (raw, json)
Hash identifier:          TZHhysVrIdaS7ha/l2mT7bpT290qalAxMRi9zuG1/tE=
Subject key identifier:   E3:A6:62:92:DD:4D:2E:BF:13:60:82:73:D8:42:2A:4B:F2:2C:84:93
Certificate issuer:       /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial:       010D0C9F43285849BC74AFA7F3EFB4E7322585C0
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     393457
IP address blocks:        64.191.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:af:a7:f3:ef:b4:e7:32:25:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=63f3c794-cd69-407d-a502-a121fdca3f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:c2:d9:4c:e9:2b:f5:f8:ed:fd:57:ef:39:
                    39:51:46:8c:65:be:d1:af:eb:a6:23:90:08:e0:d9:
                    45:cf:03:e3:6b:23:71:d4:ec:3c:12:43:33:9f:29:
                    d5:61:e6:5e:2f:14:dc:5b:8b:22:94:dc:ad:d4:7a:
                    90:c2:f9:4c:cc:6b:3d:d2:6d:b5:b8:ba:33:2c:6c:
                    10:35:5e:8f:b5:f7:3f:58:0d:12:60:9c:20:79:b9:
                    34:33:5b:35:6b:d3:42:64:93:d0:af:f4:63:69:ac:
                    a4:a4:36:82:d8:01:a1:fe:33:b8:4f:99:41:69:61:
                    ef:08:f7:e0:60:a0:5f:71:8d:c5:45:5a:53:4d:7a:
                    4e:50:63:0e:d8:07:18:ab:04:05:fe:18:e0:b5:8d:
                    ed:67:b0:21:19:0a:1c:78:7e:49:da:32:c9:2e:16:
                    aa:b0:90:4e:69:03:7f:46:07:e7:83:b9:07:20:a4:
                    a9:35:cb:dd:70:cf:74:59:63:26:d6:a5:70:08:a8:
                    5b:e1:0f:65:5d:52:e9:91:49:f9:ff:87:ee:fa:f8:
                    9c:90:1d:a5:4c:ef:6b:b9:23:77:9a:e9:a5:67:61:
                    e3:26:ef:64:69:2d:6b:bc:99:86:86:31:d0:0a:6a:
                    39:31:75:ea:e5:e3:cc:36:e2:d0:0c:b2:36:ed:68:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:62:92:DD:4D:2E:BF:13:60:82:73:D8:42:2A:4B:F2:2C:84:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:34:45:c1:5c:13:9d:09:89:6c:ad:d3:44:5b:ca:a6:0c:
         21:a7:07:1f:3b:9f:3a:a6:95:e5:99:60:b1:51:1f:06:0a:cd:
         47:38:d3:c4:39:03:77:82:01:5c:fd:a1:97:0b:f7:53:24:3a:
         15:f8:81:89:b7:35:91:ac:93:4b:35:f1:5b:da:23:31:07:95:
         d6:64:b0:ce:25:80:61:02:2d:8d:95:f5:a2:79:63:38:3d:7f:
         e3:58:cc:57:fa:d8:5a:af:d1:72:f1:29:8b:50:e5:12:bd:c6:
         ca:07:fa:ae:5a:1c:a3:21:a1:10:db:06:87:95:f2:9e:cc:a7:
         d6:9b:b8:10:a6:66:92:7a:80:f7:ab:c1:93:6b:66:34:b9:95:
         0d:44:72:a5:96:fd:0e:57:80:5b:dc:a1:be:80:7c:07:5c:44:
         f8:54:0e:cf:76:3c:d4:b4:fb:b3:a4:2b:cb:ca:8c:f8:df:61:
         de:28:f7:57:73:29:29:a8:c5:f9:51:61:fc:4d:a5:60:8f:0d:
         5c:80:4e:61:7f:a7:58:e1:73:55:df:a6:48:04:24:09:40:be:
         af:b4:12:0e:39:b5:04:72:44:4c:a7:88:5e:68:0d:a1:aa:ff:
         30:53:cb:ed:1e:55:64:8a:67:83:7f:16:bd:26:1f:99:dc:1f:
         96:87:7d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:27:19 2025 by rpki-client