Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa
File:                     8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa (raw, json)
Hash identifier:          QufCKIpt9T1o2va9gWJln3sbAx9u1PJTAl3L5Plw2Do=
Subject key identifier:   42:79:9C:4D:8A:11:A8:B9:6A:6E:5B:94:B6:05:1C:E3:2C:24:90:2A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A849566DFFB082EC6AA00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     400017
IP address blocks:        64.184.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:84:95:66:df:fb:08:2e:c6:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=d220b628-8ce1-4feb-a9a7-cd1adf7053a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:81:91:88:2e:21:27:d7:b8:74:0a:96:75:
                    5d:66:14:85:6b:d3:ae:1d:cf:6a:18:54:64:7d:85:
                    5f:43:d5:d9:1d:9e:44:50:fd:e0:df:8d:ac:1a:d1:
                    b5:04:30:f9:5b:58:68:ac:53:a3:39:2d:d4:e0:a4:
                    38:71:91:ba:bc:2b:e8:07:53:cf:e7:a6:03:1e:f6:
                    ea:21:a6:51:71:7e:7a:a9:4c:b8:29:a8:2f:af:ce:
                    77:a6:5d:0a:1a:25:11:44:07:84:61:3b:af:fa:9e:
                    09:d3:ee:82:2c:ed:cc:bd:6f:eb:fe:f6:9a:3f:dc:
                    c7:ca:b9:09:d8:35:87:28:dc:1b:90:7e:92:f8:19:
                    f8:e9:4a:e8:b5:89:ca:0c:cc:1f:53:94:d1:d8:f1:
                    8f:9f:5e:06:c0:c2:71:92:ab:1e:0a:e5:35:5f:c5:
                    d2:15:1c:c5:48:37:22:da:e0:73:2c:18:f8:2d:df:
                    a0:ae:f7:51:ab:72:e3:9b:40:75:fb:7a:57:a5:f3:
                    61:e1:24:33:9b:1c:60:d3:88:50:96:8a:b8:cd:a3:
                    9b:e2:95:da:4f:39:8f:15:35:32:32:53:20:b0:b3:
                    24:90:a6:02:7f:05:39:ac:ae:53:77:39:37:0f:f7:
                    d2:86:f4:a4:46:98:1d:df:4c:79:42:0c:b1:02:35:
                    33:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:79:9C:4D:8A:11:A8:B9:6A:6E:5B:94:B6:05:1C:E3:2C:24:90:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8447e9a8-7678-3a1e-a3a3-3a54069017aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:18:03:ff:0b:3e:f5:34:98:8e:c4:11:9b:fc:59:0e:d1:7c:
         63:9d:35:f7:4e:c6:a5:22:3f:75:9f:78:83:8e:f5:d1:dc:99:
         9b:93:b9:8f:8d:93:52:60:75:78:24:3a:36:d6:63:6e:ed:56:
         13:bf:e1:4f:f8:65:a5:65:bf:40:a1:c9:de:be:96:c9:74:83:
         83:0d:83:01:49:9f:a8:4e:91:53:c1:09:98:e0:d6:f4:7f:49:
         b1:3a:83:c1:53:65:aa:4a:c9:5d:74:72:4d:a1:f5:35:3e:65:
         83:e9:d3:5c:1d:76:cb:7a:98:e3:ed:5f:a1:7d:a2:a1:a1:44:
         54:92:20:cd:b3:e7:53:04:a0:77:9a:70:8b:55:80:5f:3e:12:
         62:8b:05:7f:42:dc:a3:be:1b:49:46:04:1b:6d:97:10:ea:c2:
         a7:59:40:df:2a:39:80:aa:c8:f1:c6:e8:c4:d4:5e:4f:1a:5e:
         85:3c:38:31:78:87:63:6c:b1:00:8d:9c:70:4d:4f:45:b1:c4:
         4f:26:fb:1a:68:37:ff:3d:13:e3:a2:8a:f7:ee:30:c5:15:7a:
         06:bc:a1:11:ee:50:f7:a2:26:9b:a2:6f:9f:9e:69:5a:3a:99:
         43:d7:58:3e:ba:a1:c8:46:1c:6e:c1:ab:ac:57:ae:69:0e:55:
         84:13:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:35:38 2025 by rpki-client