Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/965a0768-8f64-3b66-ad2b-f2a5aebb6a58.roa
File:                     965a0768-8f64-3b66-ad2b-f2a5aebb6a58.roa (raw, json)
Hash identifier:          pPst2yOx1v0Bda2Rv25uKpZdx+37i0iiSUDX9c65uWw=
Subject key identifier:   E7:BC:D1:32:51:9E:C4:9F:C3:08:88:2E:D6:D8:95:76:30:51:EA:5B
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A3CE0288AE11F59EB29D11780
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/965a0768-8f64-3b66-ad2b-f2a5aebb6a58.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     22652
IP address blocks:        64.119.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:28:8a:e1:1f:59:eb:29:d1:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=ad4bc323-e317-4e88-a8bc-477aa93f8187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:87:22:27:6e:2c:b0:0e:de:1d:8c:af:6c:8e:
                    9c:16:4d:8b:c5:9e:8c:20:78:25:1c:60:b6:03:e1:
                    e1:75:98:d7:90:b6:7c:e7:3c:10:54:a2:b4:8b:07:
                    ae:71:d8:fa:d5:f5:05:ee:40:32:60:f9:d4:36:56:
                    0f:f3:07:f1:7d:3c:f3:1f:c3:4e:de:60:3b:a0:71:
                    10:e5:84:19:75:06:16:3a:a2:4e:7e:24:46:88:d9:
                    07:0c:02:bb:94:5b:87:44:04:ac:46:71:7d:81:a2:
                    a4:46:5b:ac:40:76:99:38:45:46:12:d9:b3:5f:34:
                    c9:5d:15:b1:0e:a6:2f:87:70:84:3f:61:fe:f6:9b:
                    13:a2:05:87:51:f5:08:65:7d:75:5b:56:9a:cb:78:
                    e3:0d:64:27:5c:86:09:bc:42:77:e6:91:a8:03:cf:
                    a1:09:5f:32:0e:77:83:02:25:c5:7d:b4:67:25:1b:
                    2f:11:27:49:2d:6a:e8:69:1b:10:e3:2b:6c:fe:be:
                    6a:5b:b0:dd:23:07:23:11:22:70:14:91:df:bb:bc:
                    3a:fd:c3:c8:91:b4:1c:17:cb:07:47:b5:21:35:56:
                    e2:8f:d0:a9:e1:3d:77:5d:0f:7a:4e:28:ae:9c:49:
                    77:95:ab:c7:09:d0:d4:22:8b:16:86:80:3a:99:fd:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BC:D1:32:51:9E:C4:9F:C3:08:88:2E:D6:D8:95:76:30:51:EA:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/965a0768-8f64-3b66-ad2b-f2a5aebb6a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.119.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:91:2f:60:72:3e:1c:05:68:d5:45:11:1c:a9:f1:41:bd:32:
         61:19:31:ff:a0:59:7d:e8:39:07:80:a0:d7:2f:b8:14:94:9f:
         ab:50:af:48:05:bb:b8:25:0a:e1:cd:da:bf:4d:94:4c:4a:a5:
         b6:cf:34:28:19:e9:f6:ad:69:02:67:45:52:f8:74:f3:54:53:
         f0:ab:98:ed:98:5c:fe:7d:6b:df:44:a5:3d:f7:a2:94:31:41:
         aa:f8:c3:9c:8a:f2:91:22:fd:bd:42:20:4e:f5:e7:79:09:1b:
         06:e2:e5:e3:0b:41:e8:1b:ec:8d:b8:ab:85:2f:b7:94:79:3c:
         06:9e:dd:63:be:07:0c:28:63:d7:3b:81:d0:21:ec:69:d4:03:
         4a:c3:b5:6c:c7:f2:bb:27:c3:39:e4:54:67:8c:7f:30:66:37:
         52:7a:cf:13:9d:58:f9:90:ed:aa:2d:5d:87:d6:66:e4:e3:67:
         11:93:28:3e:e2:2b:3b:88:c4:bf:97:53:03:10:65:9b:5c:64:
         2b:fd:1f:0f:9c:13:9f:76:03:e7:f1:24:47:34:8f:66:0c:75:
         91:d3:39:dc:d8:ff:28:84:99:78:5d:df:c7:37:40:fa:5a:1e:
         8e:8b:f3:b8:a8:55:ef:ae:b9:a3:c4:6c:ff:27:cc:5c:ff:2e:
         9e:18:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:35:25 2025 by rpki-client