Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/781a3928-c29f-38d2-ab28-4612346cae08.roa
File:                     781a3928-c29f-38d2-ab28-4612346cae08.roa (raw, json)
Hash identifier:          M3QcchbXJI/aTvbGURDTbWdsKyG5ihhyAfQ+c8KCdQM=
Subject key identifier:   3A:4E:69:9A:29:09:EA:FD:ED:13:4E:A9:04:3C:F3:18:B4:20:04:E3
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584A119AAEC8CE44D33D104FF2E0
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/781a3928-c29f-38d2-ab28-4612346cae08.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     16713
IP address blocks:        64.113.6.0/23 maxlen: 23
                          64.113.8.0/24 maxlen: 24
                          64.113.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ae:c8:ce:44:d3:3d:10:4f:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=b88519e0-22c7-4409-8c2f-f576a71b3124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:f3:ea:38:c8:b5:40:ba:c7:43:59:9b:66:
                    7c:51:02:9d:aa:4d:4f:69:87:b2:1f:28:bf:36:a3:
                    40:82:72:78:71:19:52:08:ce:03:f8:23:f8:c7:0a:
                    76:37:66:a4:82:41:87:db:69:49:1c:f1:1a:1e:3a:
                    58:9d:d5:cf:df:34:c1:ce:3d:b6:93:22:92:c1:0e:
                    57:39:65:14:e2:bd:47:ae:11:63:cb:49:21:50:24:
                    5f:4f:e5:86:82:94:66:11:5d:ad:3f:ea:8a:5a:b2:
                    86:5c:ab:a8:73:46:d5:ad:7a:d2:1f:ff:b6:c1:2e:
                    9f:bc:99:5b:18:b4:e9:66:a0:de:a9:17:48:41:36:
                    a5:46:34:41:3a:78:57:bf:84:73:df:18:c8:34:ed:
                    5e:22:40:04:3f:71:f6:83:8d:78:c3:51:fb:02:bd:
                    99:ec:62:b8:ad:81:31:f2:23:9a:e4:d5:09:0a:83:
                    88:20:b2:69:51:30:8a:cf:bb:82:93:a7:98:c6:0b:
                    30:25:a0:a0:ee:e6:02:73:f4:ea:33:4e:71:2f:b2:
                    8a:3a:ac:86:f7:17:39:b1:a7:3c:5a:5a:08:bd:69:
                    3f:cf:00:c9:84:7e:c3:70:4e:33:e1:d9:fe:fc:3a:
                    99:33:76:bb:54:ce:eb:af:7b:1e:48:71:d8:cc:84:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4E:69:9A:29:09:EA:FD:ED:13:4E:A9:04:3C:F3:18:B4:20:04:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/781a3928-c29f-38d2-ab28-4612346cae08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.6.0-64.113.8.255
                  64.113.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9b:77:17:e1:69:be:f7:20:2a:e5:c6:02:93:d7:dd:59:4a:
         69:ec:45:eb:13:50:e6:60:28:db:18:c2:ca:bb:d4:78:0a:8e:
         60:3e:69:76:58:a8:2b:83:d6:d9:36:f4:cd:44:9d:5c:11:17:
         66:d2:cc:73:25:3d:21:c7:08:86:41:4c:42:39:d1:af:fe:9a:
         c4:9c:46:f6:c1:26:82:22:38:c3:9f:f6:0e:6f:04:db:6c:70:
         1b:d2:29:e7:dc:81:01:9c:5c:ff:cb:55:ba:b8:94:6a:1f:1c:
         e3:99:25:02:35:41:7c:79:6e:a5:16:cf:fc:8b:da:55:fc:04:
         6d:c5:95:f2:6a:67:32:b4:1d:9d:92:26:4c:da:26:70:6a:78:
         d9:41:20:ad:62:04:c2:38:84:41:87:04:9c:11:3f:28:25:e2:
         eb:b3:58:3e:9a:5b:57:c9:28:4c:f2:1a:d9:40:49:ae:63:6e:
         85:ac:74:fe:5e:b5:fd:97:50:da:42:9e:47:73:a9:ce:d9:a5:
         49:31:b1:57:f5:21:25:32:35:bc:11:23:f4:9b:15:8a:09:ee:
         93:f2:23:3f:57:9c:df:e9:4a:16:de:74:74:62:4c:ce:a7:83:
         3e:4f:0a:45:42:2c:80:5e:fe:58:9d:b7:a8:8a:0d:12:63:a6:
         e7:96:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:30:37 2025 by rpki-client