Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa
File:                     31237730-031c-3a34-8009-f2ad063f0d88.roa (raw, json)
Hash identifier:          EoJ1eo/4oDZ+SMUWrng/GbvTa8yYZAfqzVzH2MK1bN0=
Subject key identifier:   32:E0:44:A6:D3:C7:0A:E9:39:75:6B:4C:7C:5C:71:DF:A1:A7:4A:37
Certificate issuer:       /CN=85154141-f81d-4a16-94db-ba21a7f28a12
Certificate serial:       010D0C9F43285849FCAA8274A9BA76CD7C6BC080
Authority key identifier: 48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     53464
IP address blocks:        64.20.212.0/22 maxlen: 24
                          216.38.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:82:74:a9:ba:76:cd:7c:6b:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154141-f81d-4a16-94db-ba21a7f28a12
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=4875c6b7-aa19-4f96-aed1-066218b12748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:7b:7a:e8:b1:85:0c:76:b9:3c:e5:1f:78:
                    fc:da:47:59:94:a1:95:26:b1:1e:56:bb:f2:25:04:
                    b5:33:f0:02:13:e1:06:43:23:22:33:39:31:d9:91:
                    2f:a8:aa:6d:f7:b3:85:5a:ff:69:80:df:b1:a7:c5:
                    ea:c8:4c:95:8f:65:4a:87:87:cd:58:22:e6:51:db:
                    10:63:e2:21:d2:50:35:fc:80:dc:5a:dc:47:14:cd:
                    51:c5:16:f9:28:0f:91:55:5d:e4:8d:7d:ae:82:fd:
                    41:4c:a2:18:29:4c:4a:f9:48:7d:3f:25:2f:af:07:
                    e2:3d:64:f2:e6:86:6a:40:c3:49:f2:40:9b:0c:a3:
                    e9:49:ad:75:df:d9:62:53:2b:b6:71:f8:86:7f:fc:
                    1e:25:14:33:68:4d:88:bb:40:64:68:c8:e9:46:06:
                    d2:fa:8d:cc:bd:10:63:e1:2d:ea:7e:1b:e9:0d:dd:
                    a0:1b:d9:21:3a:0b:be:d3:9b:bd:b3:e6:21:c8:2f:
                    b0:74:7c:28:54:74:ab:62:4f:5b:49:37:39:76:d6:
                    d5:21:2b:64:af:44:16:b5:09:61:90:a7:f6:bc:48:
                    91:aa:a3:6e:aa:b8:6e:47:62:9c:48:c0:8d:73:57:
                    62:d7:3c:9f:43:66:1b:02:78:a4:7e:9d:3c:24:cb:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E0:44:A6:D3:C7:0A:E9:39:75:6B:4C:7C:5C:71:DF:A1:A7:4A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl

            X509v3 Authority Key Identifier:
                keyid:48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.212.0/22
                  216.38.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:dd:91:34:db:41:a1:de:20:c3:53:ac:79:e5:31:68:d9:
         e7:e8:b2:e6:1e:49:97:58:53:d6:02:3d:83:90:a0:0b:fb:f6:
         47:fc:3a:be:f7:16:11:2b:e5:ab:ab:94:92:cd:95:76:dd:54:
         24:d8:83:34:d2:ab:f2:d2:2b:dd:45:e3:36:d2:1d:41:aa:f4:
         1d:24:2b:28:77:c5:2d:c7:99:15:ee:2f:3b:d1:43:66:78:a4:
         d3:e3:4e:ff:5d:25:19:3b:06:d8:f4:6e:df:5b:0b:db:a4:e3:
         c1:6d:d1:48:01:a5:e5:2a:20:01:4e:e2:59:32:46:f6:c6:4e:
         b6:56:a6:2c:f8:4c:a9:5d:5f:e3:0a:ea:49:f1:09:64:b6:b6:
         c0:cf:88:d3:ee:a4:3a:05:45:92:49:09:74:76:ab:fd:92:a7:
         b2:be:e8:70:5a:8c:99:c4:b7:44:b3:7d:3a:87:cd:e2:c7:17:
         fe:f8:c0:5e:57:66:b3:76:e7:fa:f5:65:18:e1:d6:04:22:7c:
         54:5a:77:36:25:a8:54:22:a5:c6:7f:a7:6e:39:83:62:05:cf:
         cd:21:c5:78:4e:f5:ad:95:4e:c1:d4:99:38:b4:7e:aa:aa:fa:
         ee:d6:fb:65:2e:fd:3f:ab:3b:bc:33:75:fb:cd:8b:c5:29:af:
         68:37:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:02:36 2025 by rpki-client