Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa
File:                     20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa (raw, json)
Hash identifier:          /moNrb1CGUsRgEx5k1pk55bBz9ido1PN1JGk6GEhnZI=
Subject key identifier:   AE:3D:45:82:AC:AE:C6:65:30:02:3F:4D:F4:37:87:3F:3F:D4:BE:81
Certificate issuer:       /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Certificate serial:       010D0C9F4328584A3A15713E5BDBFA4B98B3A800
Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        64.57.8.0/21 maxlen: 21
                          64.57.8.0/24 maxlen: 24
                          64.57.9.0/24 maxlen: 24
                          64.57.10.0/24 maxlen: 24
                          64.57.11.0/24 maxlen: 24
                          64.57.12.0/24 maxlen: 24
                          64.57.13.0/24 maxlen: 24
                          64.57.14.0/24 maxlen: 24
                          64.57.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:71:3e:5b:db:fa:4b:98:b3:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=78e23c85-2cac-4b62-9f6e-fe69bf4d8701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:d7:5a:7c:63:37:c7:c9:47:77:b5:71:3f:
                    62:00:e8:2e:78:6e:d9:98:c1:1c:c1:2d:08:48:81:
                    74:95:e4:21:ff:09:73:e3:70:6a:ab:93:85:6a:97:
                    b5:2c:de:21:7d:b9:4e:d9:a6:20:b5:df:05:14:1a:
                    e3:2d:bf:ca:7f:19:c1:ba:da:0f:03:e1:b8:5d:4c:
                    e7:43:6f:96:c0:c8:f2:1f:f9:0f:f7:49:3f:68:60:
                    1b:f7:ed:aa:d0:2d:23:4c:49:11:55:ab:22:ba:31:
                    90:3a:13:f5:5a:a7:04:c4:d8:33:96:3a:cb:52:98:
                    43:eb:32:d1:82:71:bd:ea:b6:74:fd:d0:27:b9:86:
                    f4:66:fb:2b:08:af:bc:25:18:d4:d2:36:42:89:f1:
                    11:ce:f7:a8:d6:70:fd:65:0b:11:39:40:27:7e:ec:
                    7c:c0:cd:52:fb:b8:91:ba:22:bd:2c:a8:10:3d:48:
                    7a:d5:64:49:e7:52:57:3c:5f:01:38:7f:2c:52:ee:
                    40:e7:67:30:84:d8:5d:82:4a:1e:f6:98:89:56:3a:
                    5b:26:b3:d7:a5:cb:07:58:39:02:c0:91:47:17:94:
                    5a:22:81:18:a6:da:ea:21:e3:b0:94:33:dd:bc:f1:
                    f4:fe:c4:d3:1a:d7:14:21:88:14:c8:88:cf:19:de:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3D:45:82:AC:AE:C6:65:30:02:3F:4D:F4:37:87:3F:3F:D4:BE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl

            X509v3 Authority Key Identifier:
                keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9e:12:c9:1d:cf:cb:1e:ca:cc:9f:9c:fe:93:81:d6:ea:db:
         42:a6:65:32:0e:32:f0:4c:ef:0f:ba:02:f9:7a:23:db:19:ad:
         7c:db:b8:7d:09:b1:d9:22:da:82:79:64:72:c4:60:00:d2:99:
         e1:c7:49:42:b7:9d:74:9a:2b:89:bc:eb:ba:36:bc:f2:3e:54:
         91:47:b5:b3:3a:b1:7b:c4:7e:0f:71:8a:16:2d:d1:3e:8b:1d:
         88:5c:7c:d7:cc:cf:ca:e2:62:b6:2b:12:8d:ee:b2:f0:98:69:
         9e:61:c2:11:36:46:78:4a:7c:17:eb:ef:23:45:70:d5:75:f7:
         33:0a:b9:5f:5c:2f:ff:ee:5d:97:11:17:24:15:6b:5a:b1:b1:
         c5:4d:77:21:f8:ce:f4:fa:c7:70:14:a4:5e:e7:64:2b:2f:51:
         d1:11:c4:dd:e5:73:98:49:ea:45:8c:a0:b9:7d:3b:55:58:d0:
         81:ae:2f:cd:80:95:b0:40:95:01:c7:3e:67:be:77:fe:a7:f5:
         ad:81:1a:7a:02:56:55:9b:ea:20:3f:7a:f2:c7:7c:cf:49:62:
         39:8e:a6:ff:b1:96:02:2b:47:99:1f:c2:3b:11:bb:9c:8b:09:
         97:b6:08:75:15:dd:7f:41:99:35:3d:c7:66:bf:13:16:30:ec:
         ef:53:f0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:27:14 2025 by rpki-client