Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/d7b5066d-0878-3025-8d5d-408e45dbb544.roa
File:                     d7b5066d-0878-3025-8d5d-408e45dbb544.roa (raw, json)
Hash identifier:          hHpMGmqBk73mrYLBVMAF2A5pZxnAA5SD3LQKDJI2+hc=
Subject key identifier:   99:56:5C:48:51:D1:16:43:55:21:F0:64:76:6B:36:C8:5F:37:A3:98
Certificate issuer:       /CN=4310aaf8-5883-47e5-8319-e5c9da9cc46d
Certificate serial:       010D0C9F4328584A268AA6FC9F60C9A7C3B64820
Authority key identifier: 54:67:BA:37:10:76:C4:13:63:48:89:A9:6E:11:EA:82:F2:73:00:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/d7b5066d-0878-3025-8d5d-408e45dbb544.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     26548
IP address blocks:        64.49.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/4310aaf8-5883-47e5-8319-e5c9da9cc46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/4310aaf8-5883-47e5-8319-e5c9da9cc46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:a6:fc:9f:60:c9:a7:c3:b6:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4310aaf8-5883-47e5-8319-e5c9da9cc46d
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=9b451e37-c21b-4e17-8229-85ab15e8a3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:6b:26:a3:af:99:17:0f:9e:6f:9f:cb:e8:
                    50:00:e1:82:40:7f:14:a5:11:3a:08:a7:26:27:01:
                    15:e5:1e:91:79:41:64:78:2b:a9:87:35:94:72:5c:
                    cc:41:ab:c2:ca:dd:bd:a8:b6:68:67:5f:43:1b:ac:
                    19:c8:85:0f:a2:81:03:86:55:d3:55:44:1b:2e:fd:
                    d5:0e:ba:97:7c:89:08:0b:b9:e1:9e:0e:37:b9:e8:
                    e0:ad:ed:d2:ea:f5:23:7f:1f:bc:60:8b:06:4f:60:
                    87:95:bf:b4:d8:11:62:5e:4d:f7:45:4b:7f:d2:35:
                    10:15:07:07:c0:a9:ff:d3:1a:ca:e8:bb:d0:bf:e6:
                    56:71:e6:1f:d2:a6:6a:bd:87:b9:48:39:d5:bd:35:
                    f6:e4:53:2f:9a:a7:2a:90:b2:ef:6f:ed:63:ea:80:
                    2d:fe:3c:e4:e9:60:02:ab:0c:a9:1f:73:86:84:15:
                    b6:bb:7f:f7:2d:8a:97:ef:b7:3a:68:63:50:15:3a:
                    0b:6c:0c:bd:76:75:60:d6:ec:2c:db:99:cc:4e:c5:
                    92:97:84:b6:55:6c:e3:5b:fb:ea:01:96:7c:e3:16:
                    eb:29:1e:18:13:6e:5d:40:cb:1b:72:f6:12:79:61:
                    30:fa:77:b5:24:c7:70:65:f4:ac:29:71:e4:5a:7f:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:56:5C:48:51:D1:16:43:55:21:F0:64:76:6B:36:C8:5F:37:A3:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/d7b5066d-0878-3025-8d5d-408e45dbb544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d/4310aaf8-5883-47e5-8319-e5c9da9cc46d.crl

            X509v3 Authority Key Identifier:
                keyid:54:67:BA:37:10:76:C4:13:63:48:89:A9:6E:11:EA:82:F2:73:00:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4310aaf8-5883-47e5-8319-e5c9da9cc46d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:32:6d:71:00:a8:be:6e:d2:af:8c:c2:34:20:92:2b:23:c9:
         40:94:8d:cc:3f:70:b7:a7:53:f3:d1:ab:57:d4:2d:37:a5:4e:
         89:e2:ed:e6:38:30:74:03:e2:31:ac:c7:25:61:0f:02:47:db:
         2c:d4:ca:43:df:58:59:d7:0a:34:95:c2:76:b9:4d:c9:22:eb:
         82:59:69:89:b3:44:7e:47:15:ce:6f:ff:09:8c:8a:46:9b:59:
         a8:71:81:6c:23:a5:5a:83:cb:82:85:b7:1e:30:3e:17:0f:b1:
         3d:3a:96:db:33:16:7b:83:6d:64:5f:88:b8:28:ce:8a:f3:fd:
         f7:8d:c0:a8:14:8f:8e:f2:17:fb:51:ed:27:ce:ba:72:ec:dd:
         12:60:0c:bb:21:1d:0c:8c:81:23:da:fd:7b:68:79:7c:1a:e9:
         97:f4:ef:03:cc:8e:2c:15:f6:e4:8c:7f:79:76:de:e1:65:d6:
         ef:78:19:19:77:6c:d7:86:50:51:b4:cb:5c:47:71:01:d0:3a:
         9a:7a:1f:23:73:a8:c4:e6:a6:e1:62:01:35:12:ea:9c:5d:58:
         7f:7c:36:39:ea:72:b2:b5:81:eb:5c:3b:2a:69:73:76:36:16:
         5f:a1:7a:bb:7e:e0:aa:4e:91:09:5d:58:e2:7e:ca:2c:a8:3d:
         38:01:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:42:42 2025 by rpki-client