Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/9e0ac771-e6f0-32e5-9c6b-36934e6577a4.roa
File:                     9e0ac771-e6f0-32e5-9c6b-36934e6577a4.roa (raw, json)
Hash identifier:          575mDDbSBXHnrYMzvohLtESITV1mvq9/QUC4x8JB+O0=
Subject key identifier:   E5:B2:B7:71:8C:64:D2:AD:C5:D1:67:19:2B:DC:0F:5D:63:A7:C4:C8
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584A29555E3DCE6C94D623DD6280
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/9e0ac771-e6f0-32e5-9c6b-36934e6577a4.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     32133
IP address blocks:        64.98.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:5e:3d:ce:6c:94:d6:23:dd:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=7f7e652c-b627-4ceb-9379-d1b011680f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:8c:6c:20:f3:24:74:c5:3c:65:37:11:f0:
                    e4:d7:a6:fc:17:a4:90:83:e6:0c:d8:99:25:aa:97:
                    f7:30:26:7d:cc:4c:41:70:77:2c:ae:2d:60:17:1a:
                    b7:c8:80:c6:bb:c1:43:3a:47:06:73:50:be:df:4f:
                    be:4d:3d:80:48:22:16:72:5c:a1:3d:ba:71:79:0a:
                    a8:19:76:57:98:76:ea:17:c6:55:28:cd:a3:ee:8f:
                    6e:f0:dc:06:41:e6:43:11:dd:db:04:6f:b3:ba:bc:
                    a7:7c:fc:ff:85:6b:d8:91:f7:fb:b7:43:38:ff:6d:
                    49:70:77:75:93:32:41:5c:f9:bb:b0:4c:38:a3:5f:
                    c9:67:d2:e7:77:ca:cd:54:8a:de:ca:0b:d8:63:46:
                    16:50:ca:97:5d:f8:ca:f9:c3:a1:ad:ea:97:20:2c:
                    39:d1:f4:bd:18:61:7f:64:2e:56:9e:87:87:78:f0:
                    a1:8a:90:63:25:f1:b6:26:99:ec:d5:36:95:14:6e:
                    a5:84:80:9d:07:1e:25:35:c0:ef:e4:da:3f:4b:0d:
                    57:aa:58:a8:6b:b2:14:20:82:20:6c:28:12:fa:c6:
                    a6:67:c8:30:4d:d8:52:23:b8:e8:24:ec:80:56:d8:
                    0b:b4:7e:f0:f7:12:99:eb:4f:f1:ff:5d:58:1f:e5:
                    4c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B2:B7:71:8C:64:D2:AD:C5:D1:67:19:2B:DC:0F:5D:63:A7:C4:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/9e0ac771-e6f0-32e5-9c6b-36934e6577a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:52:fe:9d:ec:d9:af:f7:bc:b1:d6:61:c0:2e:a6:89:87:
         7b:3c:98:f9:89:4e:04:a8:aa:6a:be:74:8a:0f:d8:c9:dc:a5:
         55:de:0c:3e:53:ac:25:76:f9:16:ed:8e:64:9a:ea:46:fa:30:
         e5:7a:3b:bd:c3:14:30:f6:7f:3d:1d:b6:b6:41:4b:e9:e0:b2:
         da:73:30:94:a2:2a:3e:da:3d:74:64:29:21:61:7d:b5:1d:ef:
         15:9c:e7:14:94:ae:1e:13:2d:a8:d3:bc:08:83:4f:67:43:a4:
         ab:42:06:ae:d1:fc:51:11:40:4f:1a:62:fa:6d:7d:26:1c:bd:
         f0:b7:ae:89:cd:6a:69:16:90:3a:c0:ed:0d:f6:b6:5b:dc:11:
         5b:cf:bf:a3:61:7b:07:37:58:35:e5:94:ea:6c:c0:75:ee:f4:
         f5:70:b3:1b:b5:85:30:a3:0f:cd:49:5a:79:a8:5b:74:9b:17:
         d3:bd:90:59:86:72:83:92:ba:0b:7f:fe:f9:16:fe:61:7b:25:
         0e:47:d1:0e:63:76:9f:9a:f7:43:94:42:f0:fd:b6:c1:8a:3b:
         2c:31:8b:e9:00:ae:62:fd:c6:d1:19:9a:bb:97:7f:0a:75:cb:
         8c:13:cd:2e:12:45:32:25:a0:db:05:8b:03:38:23:d3:4d:f9:
         3c:09:e6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:07:38 2025 by rpki-client