Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa
File:                     9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa (raw, json)
Hash identifier:          V3L9REIs44nFSvMlHrU24XSDAFEW3250YurLJxdE2As=
Subject key identifier:   30:89:AC:D9:E4:70:31:29:3B:2C:E0:42:33:DC:2B:40:08:9C:FB:5E
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584A10353E98BB9527AEB6DCB180
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     34774
IP address blocks:        199.64.40.0/24 maxlen: 24
                          199.64.72.0/24 maxlen: 24
                          199.64.73.0/24 maxlen: 24
                          199.64.74.0/24 maxlen: 24
                          199.64.75.0/24 maxlen: 24
                          199.64.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:3e:98:bb:95:27:ae:b6:dc:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=bb896238-1247-4f78-a50b-4378682b76d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b6:88:e6:90:20:06:f6:3b:6f:5a:15:68:ae:
                    ba:94:af:69:d1:f8:39:4e:66:11:16:50:2c:93:93:
                    d7:48:e0:a0:56:ce:f4:52:13:e2:3c:5c:ac:ac:2d:
                    1a:1c:45:d3:69:60:f4:79:d0:88:ac:1c:c2:68:90:
                    ca:cc:09:b6:38:07:64:c6:fb:eb:07:28:22:53:84:
                    e3:29:94:86:84:24:e5:d2:a5:99:f9:be:fe:44:ca:
                    1e:98:7c:74:27:1b:dc:95:03:62:91:fc:55:d8:5a:
                    4c:75:e7:d6:12:f2:a4:c8:2a:ca:50:23:85:1b:e0:
                    67:df:16:5f:08:ca:77:62:30:e4:c0:ad:22:7e:61:
                    06:bc:67:cd:40:ce:46:09:c4:73:90:64:64:71:b8:
                    e1:f6:82:3a:21:9a:b4:d1:9b:f3:26:5a:a6:82:9b:
                    d8:28:61:89:78:56:09:60:6a:c9:08:e2:b0:7a:36:
                    3d:e5:65:6d:67:d3:87:3d:9d:17:e1:ff:25:c1:3b:
                    02:d5:e8:b7:da:77:fa:c4:57:de:6a:1c:ee:6e:4b:
                    d9:9a:18:c3:b6:4c:55:cd:b6:60:39:b1:80:3b:26:
                    60:b8:5c:2c:e1:83:bc:7d:cc:c8:0f:b0:32:c4:c4:
                    d4:06:aa:e7:7a:02:ee:47:86:e3:fd:88:1f:eb:80:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:89:AC:D9:E4:70:31:29:3B:2C:E0:42:33:DC:2B:40:08:9C:FB:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/9caf3157-ac47-39c5-9b2f-9710d5875ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.40.0/24
                  199.64.72.0/22
                  199.64.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ca:7e:57:df:29:27:95:41:a6:69:55:a3:b8:46:fd:27:e5:
         b6:f6:ab:8d:11:74:bb:f7:fe:de:a6:50:d3:01:ae:cc:67:dd:
         1d:cd:ac:d4:cd:23:83:17:e7:75:fb:30:68:5b:71:72:ee:e4:
         6c:11:c5:fa:c6:6c:45:b6:87:87:8a:4e:97:d0:da:af:6c:e2:
         5e:3b:b5:52:e9:cf:d3:b1:08:2a:fc:30:d4:9c:c7:ba:92:ae:
         07:3b:eb:7c:7a:4f:b9:c9:90:5b:34:0c:99:da:06:e0:df:a7:
         25:58:79:22:77:d4:f9:69:3f:70:14:c1:ff:08:dc:36:0a:6e:
         12:34:4d:bb:b3:75:d5:6c:45:34:2b:d9:09:87:5f:ec:85:0b:
         52:1b:53:61:7d:59:d3:c3:14:b5:df:0c:22:f2:bc:e1:99:3d:
         6d:5d:a8:bc:b3:46:ea:27:5c:d4:ef:8f:57:f4:99:d1:9a:15:
         c9:a0:f1:86:38:b5:c5:09:a2:12:18:31:b6:64:63:4d:6b:73:
         f2:87:60:c2:e7:8f:16:69:63:83:c0:83:61:e8:7d:ef:3d:9b:
         8d:e9:b6:29:62:62:a8:f2:51:94:b4:27:c3:92:72:f1:0e:2e:
         9d:6f:a0:08:e8:bf:7e:24:8a:c6:52:67:5a:b5:bc:56:73:fb:
         da:1d:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:06:11 2025 by rpki-client