Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/21dc7204-b2dc-3f31-a3b7-9c14bc9d4d05.roa
File:                     21dc7204-b2dc-3f31-a3b7-9c14bc9d4d05.roa (raw, json)
Hash identifier:          I8tspRYAE/dWd49SZwJVjAqs+h+g+SEQ/8JqVtRyJIw=
Subject key identifier:   5F:51:61:77:B5:75:5D:C7:EA:75:80:EC:26:97:5D:72:77:4C:F7:87
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584ACF71100AE5AD2B5F5E864100
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/21dc7204-b2dc-3f31-a3b7-9c14bc9d4d05.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     32491
IP address blocks:        64.98.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:10:0a:e5:ad:2b:5f:5e:86:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=ab71e9bc-9308-4ef2-8327-775dcdd039d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2b:1e:49:7d:37:b0:91:c7:4a:5b:be:ae:74:
                    64:df:f3:46:75:f2:ef:c7:a3:13:c1:10:3e:bf:fa:
                    de:03:42:73:e2:e9:c1:11:c8:2e:ec:d8:1f:bc:88:
                    a2:0c:78:8a:be:b6:45:e8:99:e9:71:b0:37:84:5d:
                    ff:25:c9:50:5a:6e:4d:bc:41:5c:5d:fb:43:b7:9a:
                    44:10:1a:f8:e6:d8:8b:db:c4:a2:02:bc:6e:fc:5f:
                    1c:13:9f:7e:3b:ba:ed:1f:1e:e4:12:d0:65:80:02:
                    7b:c5:38:24:de:b6:42:26:ae:c4:b3:13:4f:72:52:
                    80:54:f8:69:05:b3:ef:53:bf:10:1a:6b:46:4b:ec:
                    2d:43:ad:09:04:cd:82:3b:56:b9:ee:48:25:f8:29:
                    5c:7c:ab:ed:73:ca:be:78:73:1a:2e:9a:9c:79:39:
                    86:c4:bc:3c:fd:34:b0:aa:6f:70:a3:64:db:57:e8:
                    a8:2c:e2:ce:ea:98:5f:ec:f4:b0:f0:6f:22:45:ff:
                    8e:51:2c:79:38:0b:94:7a:d4:69:86:e3:ba:aa:a5:
                    57:93:9f:a2:9b:7a:03:20:94:f3:5e:50:eb:91:f6:
                    d6:7b:3f:7f:d9:aa:bc:59:8c:c6:a6:53:a1:8f:7c:
                    5a:cc:42:10:e9:4f:90:1d:b4:2a:b8:30:9f:9d:e2:
                    b8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:51:61:77:B5:75:5D:C7:EA:75:80:EC:26:97:5D:72:77:4C:F7:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/21dc7204-b2dc-3f31-a3b7-9c14bc9d4d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:30:ee:c0:37:44:14:b0:7c:15:ea:1a:d7:71:92:60:ae:
         4b:24:61:a9:1e:39:68:75:ee:90:bd:ab:15:b4:d3:e3:99:c5:
         8b:6b:d5:3b:38:30:5f:10:43:7b:9d:74:9a:5c:81:4d:24:47:
         61:07:3a:f0:34:14:06:f0:66:fc:31:50:fe:b0:29:38:3e:3b:
         4b:3c:b3:aa:e7:3d:3b:03:6a:62:10:4b:48:ea:65:2b:fa:a8:
         d9:f4:58:58:ae:01:16:95:71:5d:89:6f:24:82:51:6e:4c:b3:
         2b:b1:33:93:5e:cb:99:60:8f:e8:ea:4b:33:ce:24:c9:bf:1d:
         66:e0:7b:42:58:c3:9d:4f:45:01:d6:5c:e6:c9:b4:77:71:c0:
         10:14:0a:70:15:c5:df:12:6e:20:db:c1:95:07:c3:4c:03:eb:
         26:35:50:03:34:e5:0e:13:63:a0:f3:33:12:42:ae:b0:c8:f9:
         07:c9:a5:4a:a0:4d:3b:10:1d:1a:cc:25:1a:31:dd:68:d3:00:
         dd:3a:9f:f4:db:74:58:94:3c:a9:7a:0c:80:4a:07:47:72:c9:
         cf:f0:3b:41:89:70:3f:20:04:c7:e2:ce:81:23:69:12:b3:dc:
         67:55:a9:fa:92:b7:d4:6e:9c:e2:b9:ec:90:d2:66:0d:09:df:
         17:fc:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:59 2025 by rpki-client