Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/20e0e0db-e84e-37ea-9796-fc419c58de8a.roa
File:                     20e0e0db-e84e-37ea-9796-fc419c58de8a.roa (raw, json)
Hash identifier:          kR3dATpvmtRBSimvF2XDkCIQZaa6Dcp5vvMFfdNtuxc=
Subject key identifier:   93:12:53:C5:39:32:7C:AA:B6:13:11:3C:52:77:06:98:BB:AF:08:22
Certificate issuer:       /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Certificate serial:       010D0C9F4328584A5600524D05E588D9CF997640
Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/20e0e0db-e84e-37ea-9796-fc419c58de8a.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     7896
IP address blocks:        64.39.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:52:4d:05:e5:88:d9:cf:99:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=bf2b99ca-98b1-4132-87f9-823b07125c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:27:b9:09:1b:42:ee:70:d0:47:8e:a8:1b:
                    f2:85:70:02:37:bf:15:dd:70:f8:51:3f:09:ad:62:
                    e9:80:20:37:53:0d:89:d9:77:82:ac:a0:d2:c3:68:
                    f0:65:e9:40:0a:52:c1:f1:85:02:02:8f:e9:a7:86:
                    e0:9b:e0:73:16:eb:93:0e:48:92:b6:7b:e1:28:ff:
                    e5:75:6a:ae:d5:25:2d:6e:60:62:a5:ec:97:41:8d:
                    2e:9e:22:9a:92:e0:49:7d:4a:1b:8e:71:b0:5f:f9:
                    37:0a:b8:3b:8e:85:4a:e9:40:56:40:6f:08:99:c8:
                    e2:a2:65:8d:9d:37:d0:61:fb:d7:b4:1f:75:8b:5d:
                    ea:37:29:fe:6c:b6:1a:5c:d9:85:dc:77:3a:ec:34:
                    2e:ed:b7:ee:1c:23:36:02:db:6d:59:77:10:bf:4b:
                    ee:bd:b7:3f:ad:7d:8d:6b:63:d5:b1:5b:6f:31:03:
                    2c:ec:70:2b:54:ba:ea:e9:f4:9d:a3:f3:57:0f:35:
                    36:22:e7:a0:f0:3b:d2:1a:54:96:93:00:3a:c3:2c:
                    88:38:94:d4:64:23:0a:0e:6a:88:e9:cf:ed:f8:27:
                    59:2c:89:5a:7f:0b:b4:2a:96:31:9a:2e:db:9f:96:
                    2b:c7:5c:06:9c:38:43:e6:f7:50:82:9d:48:73:52:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:12:53:C5:39:32:7C:AA:B6:13:11:3C:52:77:06:98:BB:AF:08:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/20e0e0db-e84e-37ea-9796-fc419c58de8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl

            X509v3 Authority Key Identifier:
                keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:41:6a:9c:d6:01:25:82:4b:e9:31:4f:6c:88:50:d1:70:6d:
         6e:6c:37:d7:06:70:70:33:3c:c6:b4:68:ee:99:86:6c:e0:86:
         86:dc:f3:7a:81:8b:e1:3c:eb:90:d8:a9:dd:0e:b7:24:35:ff:
         9a:8b:21:1d:de:dc:21:3d:49:27:11:39:4c:84:e0:e3:bf:4a:
         7e:07:41:c0:dd:dd:97:f5:19:63:5d:26:56:ad:9d:05:be:79:
         d2:bf:6a:7e:b9:82:f6:1e:db:1a:48:13:f4:93:11:2f:be:f6:
         86:1d:47:a9:10:ca:92:fb:d6:a7:04:9c:b8:2b:19:f3:b6:d0:
         4a:50:06:9d:d2:af:b9:22:a5:f9:ff:37:ea:81:83:90:ec:1d:
         e8:44:c9:2a:e4:2a:0b:0e:5d:11:da:c0:da:c5:7e:05:e3:44:
         83:93:a3:91:f3:2f:15:64:67:40:c8:46:ef:06:b8:eb:f5:98:
         62:a0:ac:cb:c4:ab:7d:bb:c9:9c:60:4e:4a:a0:cb:eb:29:00:
         e6:16:00:4c:27:70:4b:4a:e8:9b:81:44:f6:8d:77:93:36:46:
         a4:a5:ff:50:e8:25:b9:3c:4e:a3:07:05:41:01:ba:b1:48:ab:
         6d:83:16:2c:00:bb:4f:ab:45:9c:7a:9d:78:db:21:d5:7d:3d:
         d4:ed:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:09:50 2025 by rpki-client