Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ee37803-d3ff-3096-9238-75e7b75f8601.roa
File:                     0ee37803-d3ff-3096-9238-75e7b75f8601.roa (raw, json)
Hash identifier:          +fBKPIWqgFfkCqjTpFplBLg+3a7hKO+eN6PCeO2QMTo=
Subject key identifier:   DA:B0:BB:3F:56:38:3C:C8:C2:C3:A3:61:C4:86:F2:0D:BB:20:B5:4C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D1650A0F2F0F4A0B62F89300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ee37803-d3ff-3096-9238-75e7b75f8601.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     30419
IP address blocks:        64.125.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0a:0f:2f:0f:4a:0b:62:f8:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=fb0f46e1-119c-447e-ba0a-ce5d9aa3363a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1a:da:f3:b1:e2:10:07:9e:1b:2e:7b:e1:1e:
                    95:18:58:80:2f:2c:59:00:23:b4:d2:14:fb:b0:f8:
                    a8:26:90:b3:d0:65:e4:be:8c:35:e3:fa:ed:fe:7a:
                    30:e8:7e:4f:c4:88:80:16:99:2b:dd:71:57:de:01:
                    94:4c:56:03:dd:3e:09:f5:b3:e3:c7:0e:18:94:85:
                    19:81:3c:f5:a0:09:3d:69:9c:fe:70:5b:25:ef:4a:
                    0d:93:a8:c6:32:0c:39:ea:ec:c9:8d:10:ba:5a:e0:
                    cd:0e:46:24:11:c0:08:79:6c:4f:02:63:c2:ca:b9:
                    95:5b:e9:47:f0:e0:d4:cb:b9:bc:b1:ef:bf:96:00:
                    29:ec:35:a4:84:ee:7c:56:50:ec:a2:cd:fe:c6:68:
                    46:18:ac:d0:87:89:9c:21:0a:3b:34:d4:16:41:12:
                    52:09:00:d3:c3:7a:ee:96:8a:62:0c:e2:98:aa:4c:
                    9e:82:d0:7f:09:07:46:95:c2:16:19:fe:65:8a:28:
                    78:62:cd:ac:88:17:e8:1d:96:ff:94:85:a9:24:bc:
                    20:8b:b4:80:7d:9a:f5:ff:d6:a9:85:bb:f8:5b:b3:
                    ad:cb:53:1f:f5:3f:63:d2:ac:95:6f:e8:59:d9:43:
                    ad:16:47:a3:6a:36:54:ba:4b:ee:d1:26:48:35:14:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B0:BB:3F:56:38:3C:C8:C2:C3:A3:61:C4:86:F2:0D:BB:20:B5:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0ee37803-d3ff-3096-9238-75e7b75f8601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:6e:e6:f7:d1:ee:c0:a7:ec:d5:00:4c:f1:22:9d:7a:5c:77:
         8c:86:47:c7:21:39:2b:d8:72:0b:c0:28:c9:0f:a5:55:4c:ef:
         af:3f:14:69:62:a4:a9:bf:e4:54:3f:22:66:7c:a2:0b:da:c6:
         1d:eb:13:24:e6:75:69:67:f2:b5:36:ca:e9:c1:20:ce:03:c8:
         33:42:43:90:96:d6:43:3f:e1:05:56:03:21:c4:31:59:d4:ef:
         af:72:80:56:9c:42:51:13:7c:52:1f:d1:6d:64:53:c8:64:ed:
         54:d9:1b:88:57:52:fe:1c:4e:12:a4:19:21:4a:ba:60:b2:25:
         a1:f2:ba:ab:89:f3:d1:57:07:d9:f4:fb:ec:58:7f:02:7a:1d:
         c3:78:05:64:3c:f9:1c:ea:c5:cf:31:37:9c:3f:da:6f:b1:2e:
         1f:b4:03:b1:c9:0f:9c:fb:7b:5c:e8:40:62:5b:7c:b2:68:2a:
         87:98:06:65:94:00:ed:bc:46:4f:d0:06:a1:43:1c:25:9c:0a:
         dd:42:c6:69:07:c4:5b:9b:57:b2:11:70:48:10:89:52:52:f6:
         06:0a:ae:93:29:26:bd:d5:18:f3:15:39:38:3b:8f:a0:67:8b:
         a1:73:56:e4:2f:65:ab:0c:b3:6a:5d:2c:73:fa:8e:9d:47:2a:
         56:11:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:56:55 2025 by rpki-client