Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a2043139-f730-332b-a197-cc8ccdf0ccc6.roa
File:                     a2043139-f730-332b-a197-cc8ccdf0ccc6.roa (raw, json)
Hash identifier:          Oo93Upv4D8ADRDU4ols2MYjb6Ozd+8k53IgiJxlygcg=
Subject key identifier:   E0:8F:05:03:7B:CA:01:0F:BC:83:AA:69:54:7B:D7:82:02:DF:60:F5
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A0C0574BDA1D5F095A3A98DC0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a2043139-f730-332b-a197-cc8ccdf0ccc6.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     13768
IP address blocks:        64.34.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:74:bd:a1:d5:f0:95:a3:a9:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=215616a3-a642-42c1-b0b4-43befae6df54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c9:b2:28:79:49:12:d5:c3:35:55:e0:ce:ad:
                    b5:9e:13:99:91:ce:4b:36:7f:b4:25:b0:a0:fc:3d:
                    75:01:22:f6:94:aa:b7:cc:80:47:af:fd:1b:fc:3e:
                    7d:ad:a3:dc:35:65:95:bd:d2:3e:6b:df:f2:3c:0f:
                    24:06:e2:06:0e:88:cb:7c:6e:a9:69:1a:ba:06:cd:
                    7d:09:1d:88:5a:d1:5f:f8:1b:c5:3a:20:1f:6b:80:
                    a7:33:c1:cf:9c:2b:ed:d5:88:ca:62:f2:e1:49:77:
                    ce:44:10:51:77:d1:2e:26:9d:ed:66:31:db:07:3b:
                    4f:35:bb:fb:4a:1f:69:4a:e9:17:16:65:3a:47:93:
                    c5:b6:35:d9:dc:fd:bb:7b:f9:cd:0e:13:ae:d4:cc:
                    7c:21:40:db:7b:8c:24:29:7b:ed:26:12:56:4b:96:
                    45:94:98:b0:37:d6:54:00:22:1b:e8:da:e3:da:47:
                    56:b1:e5:c8:b5:bd:63:a8:ae:18:9e:07:e5:71:52:
                    ef:16:88:5a:b5:8c:25:7d:5c:d1:a7:9d:c1:2a:3d:
                    56:b6:81:d9:b7:47:e6:40:9c:d9:0b:cd:a0:43:48:
                    87:e6:40:13:da:fc:4e:e8:14:8b:c2:45:8e:89:f7:
                    01:56:06:f1:d7:fd:03:f2:6e:d4:d7:f0:41:1a:0a:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8F:05:03:7B:CA:01:0F:BC:83:AA:69:54:7B:D7:82:02:DF:60:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a2043139-f730-332b-a197-cc8ccdf0ccc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:78:3c:52:c7:c1:73:1c:a6:f0:ef:b5:f2:09:e6:99:af:3c:
         64:a5:35:47:71:7e:80:f2:5a:2b:36:60:98:bf:f5:18:e8:3e:
         79:2e:57:79:47:51:22:bf:cb:d8:28:07:41:d1:2f:fc:4a:01:
         96:60:22:14:5e:af:13:05:c4:0d:b5:ea:1d:c9:b9:83:aa:e0:
         98:f3:65:6a:39:79:d8:e4:34:0a:aa:69:11:1e:ed:08:7a:97:
         62:1d:48:37:3b:81:d2:a6:76:74:a5:de:85:b5:80:5a:79:c0:
         bc:b4:1a:72:5a:0c:9e:90:a3:96:a7:1d:d3:b0:27:69:29:5f:
         dd:f3:c8:d5:e2:b8:3a:97:48:9d:44:67:2b:b9:75:c8:ea:29:
         9d:49:c5:26:e7:e5:56:63:b7:2b:12:72:4e:1a:8b:01:0a:e0:
         6e:7a:70:f6:1c:2d:1d:79:8e:08:b6:64:5c:04:5b:13:93:61:
         7d:5a:0b:5d:ca:7c:d2:ec:42:e2:5c:b5:7c:b9:9e:6a:ce:d3:
         54:b7:40:38:71:50:f3:b8:92:5d:ff:99:4e:df:57:84:95:7e:
         25:1f:78:93:2b:15:de:ea:d8:30:4c:a5:a4:fd:8a:3c:3c:90:
         93:bd:a1:2b:73:62:8f:cb:ff:6e:f2:3a:4e:8e:8a:9f:ce:f6:
         12:ef:3c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:35:50 2025 by rpki-client