Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/031ed816-d716-387e-bcc2-eecd10719c63.roa
File:                     031ed816-d716-387e-bcc2-eecd10719c63.roa (raw, json)
Hash identifier:          1dyDaB2mIw8GHAexszax+oX1PnuFXqnlkq2dUfnT+zg=
Subject key identifier:   E0:07:E5:56:AE:D2:72:FA:A4:64:11:17:17:83:A8:A3:E9:01:3B:0E
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A7FE096B174BE8234FB52C140
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/031ed816-d716-387e-bcc2-eecd10719c63.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     213122
IP address blocks:        64.112.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:96:b1:74:be:82:34:fb:52:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=787fd591-c8a1-4d0c-a42e-744795ae6251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:c6:5f:bc:7e:fb:09:7f:82:00:73:66:39:
                    f2:eb:53:2f:ce:59:88:6c:85:18:e0:a6:42:13:f9:
                    a8:50:6e:f4:31:27:9f:68:49:69:f4:cf:7b:fb:fc:
                    ef:58:15:a3:0b:e6:d1:2e:b9:36:47:d0:9b:16:d6:
                    9d:db:41:69:cd:96:60:b3:98:19:6d:8f:27:bb:07:
                    ee:cb:e5:1c:7b:a2:a1:9d:af:31:a4:7f:4a:20:6a:
                    13:d8:de:c5:5e:a7:78:94:12:71:b8:91:66:17:2a:
                    80:76:f4:db:a6:f7:b5:b5:bf:7a:b4:dd:bb:2b:a3:
                    9d:aa:50:61:54:e7:8e:40:f9:46:d5:f2:01:07:45:
                    40:c8:3a:a9:2d:5e:41:b0:2a:4f:cd:77:ac:8c:88:
                    66:44:81:2a:b8:40:2f:97:8b:5e:48:86:bb:3c:a8:
                    1d:f5:2a:12:79:8c:7b:44:32:fc:e6:32:f6:9d:82:
                    66:60:83:2b:fc:0d:e4:12:48:ce:bc:d8:ea:be:dd:
                    e5:b8:5d:a1:e9:e2:7d:df:da:56:09:d4:b4:9d:3f:
                    4b:53:56:dd:f5:ea:38:a5:28:06:39:fc:1a:f7:0a:
                    17:61:a7:dc:e7:22:c8:fa:b9:e5:90:22:b7:a6:27:
                    f3:3d:44:7d:b6:8e:91:3b:b3:d4:cf:cf:61:04:18:
                    26:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:07:E5:56:AE:D2:72:FA:A4:64:11:17:17:83:A8:A3:E9:01:3B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/031ed816-d716-387e-bcc2-eecd10719c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:46:43:c0:69:3a:53:72:4d:3f:6d:25:11:ae:5c:a6:0d:
         36:f8:d9:75:63:34:c0:29:9f:dc:14:10:62:48:de:b9:92:e0:
         05:9c:0d:74:f5:91:29:fc:e8:b5:e3:28:30:c6:44:8e:9f:a6:
         d5:f4:7a:35:09:53:c4:5e:f8:dd:e0:ed:f8:70:b0:68:96:00:
         63:9a:45:86:c6:73:78:9e:91:65:c8:01:8d:a2:44:60:53:54:
         5e:29:83:07:35:f8:26:bf:6c:33:ae:a8:51:b2:ca:21:27:4b:
         19:41:2f:48:4b:78:7d:c7:72:70:b5:ad:db:91:44:a6:7d:8e:
         1a:03:e7:d2:85:c2:d8:ac:18:e4:e3:c0:53:4d:55:a2:56:ba:
         7c:a8:6b:40:82:87:1d:1b:aa:d0:b1:38:5c:aa:12:4a:57:2c:
         ae:ed:4a:b0:40:54:37:e0:90:16:a2:4a:5d:b1:d9:cd:14:e7:
         ed:09:f1:72:cf:43:4d:34:dc:1a:08:44:bf:90:9a:49:44:b8:
         0a:a3:cf:12:43:2a:6e:1c:1e:53:54:4b:31:07:40:ec:d7:c4:
         2b:ec:9d:cc:88:84:74:3f:66:99:8e:d6:0b:cc:6a:bd:7e:dd:
         10:1c:c9:0c:21:d9:dc:a1:2f:1a:18:18:4f:c4:8e:f6:b3:d5:
         f6:d3:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:16:40 2025 by rpki-client