Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d9927346-00d3-3165-8618-dda64b5e26c8.roa
File:                     d9927346-00d3-3165-8618-dda64b5e26c8.roa (raw, json)
Hash identifier:          8eMr43aq4rxIIBKz8tAbDZsxpsmGwRfUyf1yObAeZak=
Subject key identifier:   45:A9:17:A0:82:32:53:D8:30:2C:5C:A6:86:5C:21:BE:F6:DB:A2:24
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584A5765D364B3ACDCC5AF161460
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d9927346-00d3-3165-8618-dda64b5e26c8.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        64.99.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d3:64:b3:ac:dc:c5:af:16:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=eaa4b77d-50db-46e3-8cc2-64a3180aa727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:da:5d:4c:87:46:a2:23:df:c6:37:5f:dd:
                    99:fa:25:5f:f9:ef:ee:ee:66:b7:3f:81:fc:36:3d:
                    ad:62:14:36:c8:5c:c2:67:76:89:d2:6e:98:13:3d:
                    15:5b:57:89:c0:34:49:e1:7b:28:c8:f2:a3:7c:2d:
                    30:47:a8:ca:ea:75:fa:6b:09:5a:c2:2f:e0:56:0d:
                    d8:70:e4:d5:68:d1:8b:a2:1c:f6:f2:d9:43:23:09:
                    b9:37:5d:31:cb:33:15:ab:0a:aa:76:67:61:97:4c:
                    cc:c5:42:bb:26:00:07:8f:1c:93:a1:6d:bc:1a:e5:
                    a2:2e:6c:19:79:83:96:b5:51:de:af:9c:4c:d5:a6:
                    04:19:3b:dc:a5:55:ad:15:af:87:50:c6:90:c4:32:
                    7b:00:0d:22:b2:25:b5:33:9f:4f:1d:60:1a:ab:ce:
                    34:ad:55:ab:f2:b5:67:04:64:2b:79:98:94:ef:b6:
                    93:3f:5c:40:4f:0b:62:25:c0:96:3d:c0:15:1c:72:
                    0d:b9:29:2e:83:9c:9c:7a:60:79:6b:a0:c9:d0:73:
                    49:69:a6:5e:5f:82:4f:dc:8e:1b:1b:10:d1:65:7c:
                    3f:f5:62:12:1a:3b:76:2f:3f:72:b6:4c:13:7b:bf:
                    c6:1b:c9:46:4d:a5:f0:e0:8d:ef:dd:0f:b7:84:9c:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A9:17:A0:82:32:53:D8:30:2C:5C:A6:86:5C:21:BE:F6:DB:A2:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d9927346-00d3-3165-8618-dda64b5e26c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:77:51:e4:26:f6:40:04:27:dd:00:56:07:e6:dd:8b:f2:a3:
         b6:8f:03:8f:f8:a8:e0:53:2f:61:ec:27:80:76:27:6d:c3:f2:
         2a:32:58:f5:94:8c:5c:9f:b2:e5:0c:99:d8:70:a3:36:0e:ad:
         93:9d:a9:5d:5c:0d:13:53:49:9b:c0:cb:73:63:ff:cd:66:68:
         a9:c5:b9:e1:46:96:65:f1:24:c6:c5:d2:ac:05:11:ed:d6:41:
         24:44:0c:d7:22:62:15:21:f7:31:ec:c9:a1:6b:dd:f7:91:89:
         e9:a3:5a:35:81:9f:ec:0e:18:78:74:e1:f2:ed:5a:8d:45:ed:
         d0:d9:29:c1:84:a9:9d:40:cd:52:60:e7:8e:8f:45:c1:24:db:
         8c:b3:91:f0:77:bc:8d:d6:12:40:a8:49:7e:b2:22:8a:84:ba:
         36:b8:c1:72:36:74:26:f6:13:66:f6:d7:ee:5e:cc:b3:6b:08:
         03:3e:ee:27:41:20:7a:50:d8:9b:44:a7:54:03:3d:32:62:22:
         31:25:a9:d2:b1:c4:15:56:a7:9d:fa:eb:8a:74:cc:3a:c0:35:
         76:40:be:20:46:65:ba:53:df:a4:12:94:30:f4:36:b7:98:70:
         58:3c:04:06:47:b2:f3:93:3c:6e:ae:50:c8:bc:85:5e:f4:5d:
         75:5d:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:58:38 2025 by rpki-client