Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a966bb40-59e4-3a37-8e4d-ff2881aee98c.roa
File:                     a966bb40-59e4-3a37-8e4d-ff2881aee98c.roa (raw, json)
Hash identifier:          vStafo1NdwLFQMgqcf5A9GTcgaonyvz7PK3Y+I3rVUw=
Subject key identifier:   FC:36:10:A9:C4:39:DC:15:3D:72:E2:4C:9E:18:49:0F:67:26:7A:FD
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A85C94E49752948D81D00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a966bb40-59e4-3a37-8e4d-ff2881aee98c.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     22110
IP address blocks:        64.184.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:85:c9:4e:49:75:29:48:d8:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=a78c96c3-a799-4574-b78a-5ba272aac109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:22:ce:dd:5c:8f:a4:4c:9c:00:f0:7d:b3:f1:
                    e9:af:c8:f4:ff:8d:39:19:03:7d:47:bf:f0:50:16:
                    68:e3:fd:98:77:17:52:5c:8c:f3:a3:3a:1f:75:52:
                    e5:e5:e2:3b:0d:50:cf:f1:f9:0c:13:a9:e0:e2:91:
                    1b:9d:30:f7:ec:1d:ed:a1:a1:89:f5:41:f5:db:55:
                    6c:bf:af:03:e6:21:d8:f2:6c:28:e3:fe:a4:fb:2f:
                    76:7c:5b:b3:ae:01:05:04:0f:33:6d:1c:45:dd:d9:
                    25:c2:2f:e1:59:0a:d2:dd:84:de:96:65:46:5e:7d:
                    8c:f4:f8:2c:40:15:2a:ae:3d:fa:89:4a:db:a3:12:
                    86:12:d5:97:f4:85:68:4b:63:5c:19:57:ca:4e:ad:
                    ac:a7:a7:d3:df:7b:e9:24:d0:20:c9:c9:8b:aa:8c:
                    5d:ea:a2:7f:9a:6b:b5:f5:9a:d1:f4:44:c0:73:f4:
                    9e:12:6a:5d:f9:e4:8d:0c:29:49:50:79:38:80:a0:
                    2b:51:5d:cb:50:7f:e7:d5:67:b4:ff:86:95:ec:56:
                    55:bd:d4:28:f5:b1:e9:0f:7f:f7:5a:94:45:cf:71:
                    6a:a6:c5:3c:65:02:b8:3f:96:08:78:cf:58:ba:f4:
                    44:7c:f6:26:5c:04:40:0d:cd:e4:d7:18:48:6e:11:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:36:10:A9:C4:39:DC:15:3D:72:E2:4C:9E:18:49:0F:67:26:7A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a966bb40-59e4-3a37-8e4d-ff2881aee98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a0:7f:59:35:47:e1:2d:6a:16:b1:1c:9c:c9:d6:6a:7f:17:
         59:83:47:20:67:bc:04:61:56:dd:33:92:31:1a:2c:16:cc:9e:
         5c:73:25:a9:40:a6:74:8b:04:ab:7b:07:b9:c6:1b:d6:e2:b0:
         6f:ac:b1:0a:4a:a1:24:65:6e:0f:cc:c1:c7:62:78:ad:f4:3c:
         9f:0d:54:92:80:4f:3f:b3:92:03:ef:45:23:ee:ad:a8:69:42:
         87:b3:2f:61:fb:a8:02:77:25:4b:39:42:24:74:3b:5e:30:37:
         42:39:a5:06:68:67:a4:91:35:8b:58:01:e7:8b:94:39:14:9a:
         05:aa:3b:40:52:a0:57:a4:32:7d:06:d1:00:58:18:86:fd:b8:
         10:94:b9:72:95:55:57:da:15:f7:9b:70:77:6c:ca:01:0f:1b:
         c4:e2:01:d8:c2:73:2c:c7:70:6e:52:05:ed:2d:ca:47:98:7f:
         10:37:77:c1:bf:31:ee:2e:ce:87:db:1f:79:37:7e:b7:38:f9:
         8c:1f:e5:f9:71:8b:91:28:f2:eb:41:d1:79:8d:95:ad:a3:35:
         9f:27:2b:0e:68:a4:ae:58:ec:15:27:df:07:96:37:4f:02:42:
         be:45:09:ab:f6:e3:50:17:8b:d6:79:9f:d0:bf:30:12:c8:f7:
         9a:a1:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:20:32 2025 by rpki-client