Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/a5d505ed-30ad-3e75-b9b6-13d664161125.roa
File:                     a5d505ed-30ad-3e75-b9b6-13d664161125.roa (raw, json)
Hash identifier:          QeaAyEc6T2LyHtbks01aITzo/vpWgHEqUtlZFgx6Ovs=
Subject key identifier:   FC:83:5C:9A:40:1D:6F:89:63:5D:9F:2A:4A:5C:9C:96:FE:94:D6:E6
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A49706E4C7111941916125C60
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/a5d505ed-30ad-3e75-b9b6-13d664161125.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     109
IP address blocks:        64.100.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:6e:4c:71:11:94:19:16:12:5c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=89a7ddea-44ec-40ea-ab2c-ef57a7a05cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:71:01:cc:49:67:6a:5e:a6:97:67:5d:89:df:
                    77:48:b3:e6:1c:30:0b:3a:ca:26:20:09:41:37:40:
                    22:76:c8:31:43:07:4c:e6:90:4f:61:fe:fa:18:b8:
                    5d:0e:bf:89:e3:bd:f1:86:c3:e7:5f:9c:7c:d6:84:
                    2d:d2:54:e7:e3:d1:12:a6:fa:c5:d9:e7:f7:16:32:
                    2d:e1:c7:12:ba:76:c0:03:d9:9a:33:8b:8f:2b:f6:
                    83:eb:a0:cf:ba:3c:d4:5e:ba:8a:4e:4b:ff:1a:5e:
                    11:ec:28:72:87:03:19:35:3f:ce:10:12:41:b6:20:
                    b0:37:8e:a0:41:c6:d3:27:d8:b9:c5:8a:de:0e:e8:
                    9a:cb:7c:f6:f0:20:77:a5:86:9d:e2:ab:89:c7:47:
                    c3:60:70:c5:13:0a:04:20:9b:ae:9d:8a:b9:8e:73:
                    34:fc:2f:50:00:a1:f5:e8:59:f0:27:cc:4d:de:85:
                    47:81:f6:5b:63:18:44:87:b7:8d:f1:1e:5c:42:ef:
                    42:1c:00:8d:6b:a9:10:c3:de:0f:dc:d8:8c:bf:da:
                    3f:3a:c3:bb:63:47:29:90:df:67:37:a6:7c:ae:f8:
                    ef:d1:fb:69:76:09:bf:d1:f5:90:c0:e6:43:21:82:
                    f4:2b:36:a2:aa:f7:4e:c0:d0:7c:bf:99:10:f3:58:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:83:5C:9A:40:1D:6F:89:63:5D:9F:2A:4A:5C:9C:96:FE:94:D6:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/a5d505ed-30ad-3e75-b9b6-13d664161125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.100.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a2:01:f8:c0:85:74:a2:dd:44:4a:74:0e:f5:c8:ce:fd:d9:
         1f:1b:29:df:27:e6:cf:93:cc:13:eb:26:af:b9:bc:7b:50:45:
         83:4e:43:6b:57:a8:2a:47:fc:11:f5:d7:9d:3a:88:0d:a5:6e:
         44:3f:55:61:79:e0:8c:df:b7:51:78:1a:de:9f:6e:7b:4d:2f:
         b4:67:7e:fa:d0:b9:53:1d:7d:5c:0b:c7:61:ce:bb:73:ef:c2:
         48:89:8f:5d:f6:67:fb:d1:2d:d2:5f:a1:9e:0d:4c:75:29:02:
         61:17:cd:00:47:04:11:c5:da:24:91:e4:c6:f3:f2:0a:6e:6a:
         1a:4a:48:7a:f3:dc:94:26:0d:14:43:9f:ee:36:e0:5e:b3:d2:
         95:9d:c8:11:67:55:5f:74:93:8c:8b:25:93:48:3d:61:d8:cd:
         58:ad:81:6d:2b:31:61:7b:3a:04:53:82:2c:0d:6b:60:f2:49:
         88:cf:c0:e2:1d:dc:a1:5f:6e:00:6b:4a:93:56:3c:36:af:e1:
         98:0b:f6:79:62:12:f1:5e:59:09:2e:ed:8d:6e:73:77:40:74:
         73:f0:9b:ab:5e:54:46:c1:55:1a:60:e5:07:33:cb:49:ec:79:
         fd:08:ab:b7:cc:12:3f:9b:52:71:6e:03:bc:3e:ad:62:82:0d:
         18:18:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:58:44 2025 by rpki-client