Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/a28a5752-fcae-339f-9643-9bb9db20a72d.roa
File:                     a28a5752-fcae-339f-9643-9bb9db20a72d.roa (raw, json)
Hash identifier:          ds9JoJLZiuFDF0I4hvT+3v/DLh8KQb4F0TSusGiqyYg=
Subject key identifier:   5A:10:32:AD:EF:FF:2D:37:18:B1:92:96:8F:1B:50:61:25:C6:EC:24
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584A46A5AC06C82E39188F7E3100
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/a28a5752-fcae-339f-9643-9bb9db20a72d.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     32133
IP address blocks:        64.98.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:ac:06:c8:2e:39:18:8f:7e:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=73bb65c1-bf7f-40e7-a6ba-e4ec2ba69b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:25:27:07:fc:92:ed:64:aa:fb:50:6f:39:
                    92:bf:4c:19:2f:3d:6b:01:5d:46:98:5c:2f:91:3b:
                    67:6e:54:df:1b:61:a4:ab:23:b0:9f:2a:3b:12:69:
                    6e:06:5c:20:cf:da:90:75:04:0a:f3:92:f1:96:53:
                    09:6e:80:e6:eb:68:38:d4:a7:3e:d9:19:8f:2a:77:
                    6b:bd:49:6d:8f:4b:a4:1b:f9:33:62:40:c7:d6:52:
                    e1:01:4c:1a:f5:ed:bd:b3:57:0a:c9:5f:9c:fd:e1:
                    07:07:a1:97:e0:1f:be:23:34:65:b5:cf:a1:eb:76:
                    2a:4a:24:04:52:7c:71:0a:f2:e9:20:2f:a0:41:6c:
                    a6:57:c9:ef:ba:cb:2c:89:ee:2c:ec:b2:b8:ca:eb:
                    01:d4:d2:c5:3c:c6:c0:4b:ba:5e:f9:72:9e:60:51:
                    90:0e:eb:0e:30:58:f1:52:75:4b:e6:c4:ef:e1:99:
                    85:df:b0:30:64:5f:02:7d:80:cd:07:e9:6d:e7:04:
                    db:83:43:7d:2e:1b:86:ae:69:b1:dd:01:1c:43:a3:
                    be:cd:db:7b:bc:ad:34:1f:dc:c8:06:40:9b:ce:d9:
                    ce:40:95:16:f6:1a:1a:30:d9:5a:d9:5c:d1:00:d5:
                    65:2e:5d:e3:1d:68:b6:26:4b:70:38:29:7f:50:74:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:10:32:AD:EF:FF:2D:37:18:B1:92:96:8F:1B:50:61:25:C6:EC:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/a28a5752-fcae-339f-9643-9bb9db20a72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f5:5b:ef:8a:3c:2f:cc:7e:94:be:f9:8c:18:2d:d6:1d:34:
         74:fa:b8:41:e6:46:10:35:4b:a7:25:29:c5:42:79:30:e4:80:
         8a:76:05:d4:84:d0:16:fc:68:01:95:3e:5d:30:7a:d1:18:d6:
         bb:3f:2d:69:ec:4a:0f:65:fe:5f:a3:a2:8e:a9:7d:df:09:c4:
         64:92:07:ac:c9:ef:d8:66:48:22:9f:5d:ab:b7:14:41:bd:39:
         73:57:d0:55:69:c3:07:28:93:56:d0:15:a2:17:73:1b:69:2d:
         27:77:28:73:ca:e3:af:4f:bf:8a:01:73:0d:c7:cd:de:0a:09:
         45:a2:13:34:7d:7c:10:85:e5:6b:ea:be:40:22:8c:76:dc:12:
         45:e6:0c:32:3d:68:9e:dc:b7:72:0b:00:ae:09:ca:5e:41:cf:
         26:8f:b9:b1:f1:f1:6f:b9:83:c1:e1:f1:3a:55:af:75:85:9c:
         e9:f9:3c:bd:ec:b5:86:41:26:20:cf:cf:9b:d2:47:7f:44:f5:
         03:7e:f6:bf:c2:0f:97:a4:c1:2d:3e:af:cd:0a:24:29:53:9d:
         10:e0:c7:fb:6d:46:8f:5c:52:ef:29:02:1d:91:95:a7:f1:48:
         66:e6:04:13:78:0b:2d:37:90:b5:a9:72:06:38:2a:d8:59:69:
         8e:6f:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:55:12 2025 by rpki-client