Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7764a768-c407-399d-b6f1-33df2f0ec718.roa
File:                     7764a768-c407-399d-b6f1-33df2f0ec718.roa (raw, json)
Hash identifier:          ZXRolYC0I6SQFF7qrbzBJv72p67iNdcO+16y+PfhJcs=
Subject key identifier:   5E:27:7E:9C:66:D7:64:76:96:C7:17:69:EF:37:06:0F:76:08:63:B0
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A093AA22CFE435C50D45B5160
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7764a768-c407-399d-b6f1-33df2f0ec718.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     13768
IP address blocks:        64.34.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a2:2c:fe:43:5c:50:d4:5b:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=5e2e995a-21cc-4229-97ce-b73dd45297e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:de:92:e4:3c:f0:58:23:01:a9:90:5b:34:90:
                    8f:c6:4c:e1:75:3f:3f:b7:0d:aa:bd:63:a6:85:34:
                    0c:6d:5b:0a:1c:a0:92:6d:ae:20:47:19:ea:c2:21:
                    09:a4:4e:22:18:5a:80:d0:7b:8b:0a:dc:d3:42:76:
                    d9:f1:ac:ff:ce:fd:08:30:a6:c9:10:5b:59:40:fd:
                    97:10:95:db:33:00:a0:2b:1e:4d:60:c2:a1:67:4e:
                    c9:17:3a:40:4a:2a:62:65:7a:25:50:0b:eb:68:a8:
                    d4:e8:9a:1d:af:23:dd:d9:e2:a1:2f:e6:e1:ef:c6:
                    9b:c6:e7:3e:4c:bc:60:d7:a8:29:58:39:5a:34:be:
                    6d:52:69:a6:30:2b:b0:f3:0a:4c:0b:82:69:f8:e1:
                    bb:41:e9:dc:2d:36:8d:8c:66:bd:ac:ac:58:7d:32:
                    14:6f:98:3b:0b:1b:e0:32:e2:2c:07:a4:d7:37:5d:
                    61:48:24:51:00:08:55:36:7b:8e:3a:fe:87:c6:7a:
                    0c:a8:d4:8b:3e:93:71:5f:4f:4a:d2:4a:67:bd:8d:
                    93:c7:35:9d:a0:02:b4:e0:3c:4c:e3:2c:50:e6:4c:
                    67:aa:a5:65:63:15:dc:e0:87:03:e4:93:b0:1f:ac:
                    1d:52:65:15:84:f1:6e:e1:c2:f1:59:4f:34:72:40:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:27:7E:9C:66:D7:64:76:96:C7:17:69:EF:37:06:0F:76:08:63:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7764a768-c407-399d-b6f1-33df2f0ec718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:28:30:ae:34:8b:81:36:b2:0c:23:54:57:18:79:5e:88:a5:
         e3:55:fc:c5:eb:a4:d7:5d:e9:24:ae:2e:b8:57:95:90:01:f5:
         39:17:62:de:f2:50:af:22:91:6b:9a:8d:3b:4b:0d:5f:05:8c:
         81:50:e9:ce:3a:e0:6d:37:5e:cf:8d:53:a3:e4:5d:03:49:81:
         7f:ae:8c:75:0c:39:59:c7:f6:a2:d0:20:da:49:00:b6:44:b4:
         f5:23:e8:39:fd:4a:af:6b:4b:90:d0:46:61:18:62:5e:9e:59:
         36:f7:0e:ee:bf:03:8a:25:2f:b6:22:0e:ea:8c:4b:72:80:d1:
         9f:8b:8e:ef:62:eb:7b:c8:7e:45:e8:c3:7f:ff:f9:0b:b6:17:
         89:7e:34:ab:79:5b:d1:a2:5c:75:73:34:a5:27:a2:b8:38:67:
         58:27:02:4e:c4:27:c1:24:be:a9:19:f5:1c:4a:c3:9d:21:e6:
         fe:bc:93:5b:2e:de:8d:ee:2c:b9:9f:46:a4:3c:e4:b3:38:b4:
         35:ca:72:c8:35:bf:34:0f:6f:0b:85:4e:3f:1b:87:37:87:75:
         9a:64:f4:4c:1d:ee:48:f2:19:09:59:3d:ca:1a:91:e1:89:42:
         38:92:d3:16:5d:e6:e6:2e:de:3c:2f:11:a4:c0:c4:3a:c4:b9:
         7d:5b:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:50:34 2025 by rpki-client