Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa
File:                     bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa (raw, json)
Hash identifier:          JG1fDAQWOwFj+U/BD0JGux05beFAnoFTb/tQ9uqqxIU=
Subject key identifier:   46:62:8D:AD:33:7F:82:59:69:91:91:DE:F9:82:06:84:BB:4F:BE:90
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A56004E433A00ABD8E01967E0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     13768
IP address blocks:        64.227.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4e:43:3a:00:ab:d8:e0:19:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=104ce1cd-0440-4368-bbf1-b5ef2a403462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:cb:f8:1c:d8:19:a4:b3:42:14:05:b1:86:
                    85:1b:32:87:38:ba:6b:53:3c:89:ed:8d:89:f7:d5:
                    c7:a6:36:6d:f6:74:5d:33:30:82:6a:2f:40:e2:0a:
                    cc:f3:5d:9c:99:90:28:78:70:d2:2a:76:52:58:d1:
                    a8:a2:63:d4:85:8f:bc:a3:83:ff:e1:a9:2f:71:96:
                    a0:28:ce:1c:b0:a6:22:4e:7e:cf:f1:f7:2f:45:a9:
                    81:0e:aa:21:25:ad:8a:15:b7:01:f2:36:05:31:95:
                    06:0e:bd:98:6b:38:d0:8a:61:87:08:e9:d0:28:ab:
                    57:1a:58:da:19:cc:c6:92:5d:3b:dd:9b:ac:e5:72:
                    7d:61:e5:c6:73:bd:ac:f3:48:db:b0:fa:5d:4d:c3:
                    8b:42:83:37:64:a7:87:4f:ac:c9:1a:7d:37:37:ef:
                    5a:ad:00:b1:53:7f:7d:72:f4:d9:b7:33:6e:47:f6:
                    9e:8f:de:9b:34:64:be:6f:58:d0:b8:26:ed:aa:25:
                    d9:d4:b9:6a:ff:a7:39:ba:23:7e:fa:77:09:49:ea:
                    6a:66:39:d2:80:59:65:6a:f8:83:c2:e8:4a:76:52:
                    59:73:40:b9:f3:76:d3:87:b2:17:e6:0c:30:05:19:
                    74:0f:3a:90:62:77:6b:d2:14:9f:38:fd:f5:0d:e8:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:62:8D:AD:33:7F:82:59:69:91:91:DE:F9:82:06:84:BB:4F:BE:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/bc77fd2e-d005-3d71-a7c8-c30d5ca46ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:9a:46:80:79:86:2f:07:54:07:43:c5:97:c0:63:91:28:6d:
         0a:b2:06:00:b2:ff:20:b8:0b:e3:33:bf:29:1e:f9:04:84:30:
         50:48:f3:c0:b9:da:ff:d9:be:09:bf:f6:a0:23:b0:1f:09:1d:
         eb:26:17:95:66:38:9e:e8:d0:7f:11:b1:d2:8f:dc:11:2e:79:
         6d:a2:0b:f6:42:58:95:e5:d4:15:b9:75:fc:86:dc:58:54:ef:
         6e:76:6b:48:e4:8f:b2:35:b4:e6:06:b0:62:35:75:43:fc:df:
         b2:10:d1:7c:9a:55:1c:75:09:d2:34:61:df:cb:d9:1b:9d:ab:
         8d:0a:79:73:93:e5:43:1d:f7:ad:fa:ec:f1:63:6b:d9:0c:1d:
         09:49:a2:2e:b3:92:9c:33:cd:7a:62:6a:89:5c:24:2e:41:47:
         76:0f:d6:34:f0:5c:41:17:0a:72:17:1e:d0:c5:62:ca:a8:91:
         89:29:13:4a:99:8d:c7:ac:1c:1d:ff:24:e9:fc:0c:bd:48:c9:
         21:dc:96:1f:aa:4f:b1:aa:78:96:9c:2c:39:84:a3:a4:fa:d8:
         0b:d5:57:cf:82:eb:1b:b3:02:72:5c:bb:23:13:6a:dc:6e:24:
         4c:a3:09:02:8d:c8:6a:e8:01:90:d6:a8:19:35:65:b0:a4:81:
         7e:e8:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:25 2025 by rpki-client