Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3b0ccc26-980f-3acd-9aa8-4b56ef5767d2.roa
File:                     3b0ccc26-980f-3acd-9aa8-4b56ef5767d2.roa (raw, json)
Hash identifier:          oI0u1aq8I8BOiWtf35aUSIrnQN7IHV4joczgdmMkqXE=
Subject key identifier:   95:9D:A3:B5:B6:5F:4F:75:1C:65:02:30:57:9E:BE:41:37:A0:39:2A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D1650A1FF8B4B9FBCE4C18C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3b0ccc26-980f-3acd-9aa8-4b56ef5767d2.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     63474
IP address blocks:        64.125.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0a:1f:f8:b4:b9:fb:ce:4c:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=21c2c086-41d8-42d9-af0e-bbd48c1bf0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:16:ac:58:23:63:eb:11:6b:30:52:da:71:ca:
                    14:1a:bb:3f:06:93:59:92:ee:69:cf:df:22:ad:35:
                    83:c5:c1:7c:51:57:fe:73:fd:60:e0:92:95:b5:02:
                    05:7a:ee:c4:ed:f4:73:3d:57:e7:5d:c4:61:93:05:
                    01:e2:8f:04:03:0b:a5:ed:30:54:d6:0a:83:2b:23:
                    a5:c4:04:25:3a:58:0c:f0:a4:31:0f:b3:14:94:da:
                    67:cf:e1:2c:27:e7:4f:94:8c:79:47:38:53:fb:e6:
                    02:79:18:74:79:34:04:f3:61:87:64:08:96:fa:cd:
                    ab:37:f9:8e:f7:f4:d3:f3:9a:ad:d4:06:e9:49:84:
                    69:60:02:49:33:37:af:92:12:ec:85:59:a3:40:b4:
                    0e:39:dc:5a:e4:75:01:f9:6f:0b:9b:19:d6:1f:c0:
                    8d:5e:3e:d8:39:1d:99:65:d6:fa:58:60:f3:e3:39:
                    8c:bc:4a:fe:ee:cf:9a:dc:c8:68:b7:95:2f:02:62:
                    2d:d3:67:31:ad:12:1e:31:2f:69:5d:a1:50:68:dc:
                    fb:6a:93:7a:d5:41:a3:59:e3:f5:93:1c:ed:bf:a2:
                    0d:0c:de:ec:ea:bf:7d:8a:0c:58:01:71:c8:20:64:
                    0c:3e:60:9d:82:de:15:46:ca:8f:7f:5f:cc:b4:ed:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9D:A3:B5:B6:5F:4F:75:1C:65:02:30:57:9E:BE:41:37:A0:39:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3b0ccc26-980f-3acd-9aa8-4b56ef5767d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:3d:ea:52:cb:80:47:9a:f8:7b:41:96:95:6e:43:a6:62:
         e2:ce:f6:62:b7:6e:ec:32:af:12:02:d9:2b:1e:85:78:d4:fc:
         66:8c:01:82:8b:00:cb:e6:f8:cc:6f:6c:7d:53:26:78:2d:2c:
         07:32:1e:8f:46:8d:0d:ec:ba:c7:a1:f6:8a:4f:a4:e1:24:6f:
         fa:3b:e3:4f:f5:4e:c9:86:14:9a:8f:73:8e:6b:35:25:0a:6d:
         bb:41:22:65:dd:0d:91:b7:e7:fd:e7:5b:c2:50:5d:af:a9:cb:
         8e:8b:f4:5b:56:e9:31:e5:09:e6:30:c7:89:f5:7e:d3:80:73:
         af:b6:ea:5d:f2:8d:87:b5:e7:01:ff:a8:a4:4b:66:b6:11:54:
         79:92:c1:7f:28:6a:e7:f8:29:2b:e2:12:bc:2c:fd:a2:f5:85:
         21:31:ac:71:1f:59:a2:e4:28:0b:be:9b:44:d2:22:56:6a:12:
         70:df:91:75:70:ac:8b:0e:66:99:a0:1b:9f:81:6d:28:ba:ba:
         25:3a:90:38:32:c7:19:6a:8e:34:00:be:cc:bd:05:14:58:45:
         e7:c9:e7:11:56:e8:4e:a4:c9:e1:07:b1:9a:5b:05:de:d8:0b:
         64:8b:4c:57:a8:c1:63:cb:b2:01:48:b5:f5:5e:10:92:5d:57:
         fe:a1:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:40:34 2025 by rpki-client