Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a452063-9f5f-3689-a8cf-9a74a21bc59c.roa
File:                     1a452063-9f5f-3689-a8cf-9a74a21bc59c.roa (raw, json)
Hash identifier:          fZaFZYJhxBMlTEkVvdXPvFEoA1MoJfkrKMxEM1apWOI=
Subject key identifier:   FE:D2:F2:5C:A3:5C:B6:AF:9F:17:9B:83:C2:EB:3C:DB:A1:E9:E7:33
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2215A1F378C0E580526B5BC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a452063-9f5f-3689-a8cf-9a74a21bc59c.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        75.64.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:5a:1f:37:8c:0e:58:05:26:b5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=ef90f3d8-9007-4109-bbb6-5dfd37240b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:cf:cd:89:68:42:f7:f5:65:77:e2:88:de:
                    5d:67:b6:94:87:2f:42:e1:75:14:fd:89:32:6c:ca:
                    2b:16:d1:f9:44:ee:78:6e:82:e3:e9:af:ad:b4:f2:
                    75:35:1e:1a:c9:c1:ce:d3:58:35:9f:33:43:f3:75:
                    15:a3:b7:18:c4:32:f1:60:f6:75:3c:4f:98:7e:e2:
                    cb:b1:e7:a9:1f:0a:65:2b:88:db:f6:fe:91:e9:ea:
                    e6:6f:d1:6b:fd:68:d0:85:c1:a8:4d:fd:16:83:0f:
                    c7:fb:4f:64:2f:12:cb:df:bf:44:fd:9e:7d:0b:da:
                    49:7a:cc:a5:77:0a:bc:32:07:f8:7d:5f:8e:95:63:
                    14:04:8d:ea:4e:45:ef:0a:95:82:58:03:fd:36:f1:
                    a4:b9:6a:7a:25:3e:fe:73:93:bd:5a:2b:70:6f:13:
                    ac:d8:ca:63:be:1c:ef:aa:f5:c9:49:d4:4f:a7:89:
                    98:3c:7f:30:d6:b3:69:83:a6:c8:6c:bb:2e:6b:8a:
                    94:2d:6f:db:c1:80:22:61:36:36:c0:ea:46:26:6d:
                    32:cc:08:6e:47:48:e4:34:69:67:c9:a3:69:e3:aa:
                    e7:72:9f:40:b8:4f:4a:7e:7d:e1:6f:b2:31:1b:77:
                    50:bd:51:90:93:d7:b1:07:4f:b9:f8:a3:7b:39:ee:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D2:F2:5C:A3:5C:B6:AF:9F:17:9B:83:C2:EB:3C:DB:A1:E9:E7:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a452063-9f5f-3689-a8cf-9a74a21bc59c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.64.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:52:8e:0a:86:2f:99:e3:24:f1:27:86:a4:8e:60:80:33:62:
         61:8e:c3:72:93:ed:27:92:c1:d1:a8:ff:95:1b:bf:88:6a:70:
         15:87:64:5a:42:0e:77:a8:1a:3b:a6:c1:68:59:c2:a0:41:46:
         7e:17:e1:01:bc:b6:af:7f:97:70:d0:c8:91:95:f6:ec:6e:0d:
         bd:43:c8:cd:5d:e3:5f:77:a0:db:96:b0:08:89:39:60:0f:f9:
         31:39:9e:f2:d3:fd:1d:78:b4:12:ee:b6:27:fb:b2:69:cc:4c:
         d7:a4:8e:bd:a7:6d:6b:23:ae:02:ea:33:74:30:21:ab:95:39:
         be:14:4c:bc:e5:84:4c:9b:d5:4c:f8:e3:c1:b0:d1:46:6f:dc:
         d6:10:d6:9e:8e:5a:b7:23:52:96:55:1b:00:78:62:70:c1:8a:
         77:ff:e5:8d:ec:35:e5:23:e8:ae:72:16:87:85:95:d6:b1:02:
         da:17:83:e1:54:0e:1d:0a:49:a2:3f:54:2d:98:a2:f0:f9:12:
         18:d8:86:ab:d1:27:83:19:b4:7f:dd:84:84:2d:b2:94:c6:98:
         2f:76:81:14:d7:8e:b4:cc:e8:35:c4:9f:a0:cb:42:54:7d:b9:
         37:c1:29:1c:a3:fc:6b:96:35:f7:3f:9f:61:73:89:4b:7e:33:
         5a:06:0d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:25:01 2025 by rpki-client