Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/0f6768c8-7364-39d1-8785-f9cdbf1448f2.roa
File:                     0f6768c8-7364-39d1-8785-f9cdbf1448f2.roa (raw, json)
Hash identifier:          2ws31bzfNfP7fF8zgBJWUL6CH1BVlt92S8HvM8dl9Mg=
Subject key identifier:   63:95:65:8D:43:B5:20:E8:45:48:D4:56:15:0C:59:DD:53:DA:7E:10
Certificate issuer:       /CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
Certificate serial:       010D0C9F4328584A454041FE8AB09A51B78A41C0
Authority key identifier: 66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/0f6768c8-7364-39d1-8785-f9cdbf1448f2.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     22439
IP address blocks:        64.56.64.0/24 maxlen: 24
                          64.56.65.0/24 maxlen: 24
                          64.56.66.0/24 maxlen: 24
                          64.56.67.0/24 maxlen: 24
                          64.56.68.0/24 maxlen: 24
                          64.56.69.0/24 maxlen: 24
                          64.56.70.0/24 maxlen: 24
                          64.56.71.0/24 maxlen: 24
                          64.56.72.0/24 maxlen: 24
                          64.56.73.0/24 maxlen: 24
                          64.56.74.0/24 maxlen: 24
                          64.56.75.0/24 maxlen: 24
                          64.56.76.0/24 maxlen: 24
                          64.56.77.0/24 maxlen: 24
                          64.56.78.0/24 maxlen: 24
                          64.56.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:41:fe:8a:b0:9a:51:b7:8a:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=e9ccd695-2d5d-4809-bde5-62dfbca3cf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:aa:e7:6b:c7:96:79:82:fa:79:06:3f:ac:
                    a7:29:cd:bc:12:e9:18:ec:a9:26:a7:0c:da:98:39:
                    d0:e1:ce:f5:3a:91:e7:0c:fb:e0:85:c0:38:7f:bf:
                    88:1e:f8:5b:78:a0:3b:94:8b:a5:08:07:8b:b5:15:
                    2f:39:46:2d:75:13:3b:9d:56:16:e9:b8:1e:a3:75:
                    66:b0:1b:79:ba:6a:69:80:1f:69:25:5c:db:0d:90:
                    0e:62:c4:2a:7a:cf:d9:55:23:5c:3f:05:b2:e2:dc:
                    58:f2:54:4c:cc:1f:3e:e8:86:74:39:ac:f3:13:c3:
                    e0:3f:fe:28:e4:1f:7a:23:17:a5:ad:ad:f9:0c:46:
                    02:04:47:d0:81:8b:6c:5e:0a:59:39:01:59:0b:52:
                    32:60:2b:8d:fa:a7:bf:3c:57:16:16:43:b2:ff:4a:
                    ae:0a:c6:cf:c4:f5:d7:cb:38:ee:3b:4e:53:8e:ac:
                    db:f6:fd:d3:d3:75:55:13:bc:d5:76:ae:fa:af:32:
                    a9:74:42:16:67:e4:85:e3:32:54:d3:4a:99:34:b5:
                    53:46:c8:f7:75:73:12:fe:e6:a9:42:97:de:98:0d:
                    d3:3e:50:7c:24:3a:a5:8c:34:9a:36:63:b5:5e:e9:
                    bb:06:2f:88:5b:cf:ac:25:ff:c1:60:43:5a:0c:49:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:95:65:8D:43:B5:20:E8:45:48:D4:56:15:0C:59:DD:53:DA:7E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/0f6768c8-7364-39d1-8785-f9cdbf1448f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.crl

            X509v3 Authority Key Identifier:
                keyid:66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:73:c4:65:a5:35:23:36:48:d0:55:cb:e8:b3:14:fa:69:91:
         cc:d3:80:ac:b2:01:dc:5c:93:db:55:d6:29:49:a5:d1:b0:76:
         d9:5a:bc:1e:43:ea:7b:5f:dc:33:da:0b:1a:03:4d:4e:aa:f0:
         36:00:e2:22:58:2f:e4:d0:5e:38:bb:6b:60:42:fa:c2:ee:cf:
         c6:c0:06:70:78:6b:e5:4d:fe:9c:0d:64:ad:12:17:35:97:f7:
         d5:92:f5:ba:0d:d7:58:08:a4:1d:db:8e:f0:63:6a:aa:e4:fd:
         a2:5d:b0:63:ee:ac:ae:53:9e:e0:cc:c3:13:6e:b7:b6:37:e9:
         2a:21:2d:8b:40:7b:94:d2:a0:a1:3f:37:98:90:93:dd:b4:21:
         0a:b6:4b:14:11:97:0d:80:68:9c:41:96:20:af:5e:a9:28:34:
         2e:db:7d:6a:88:24:05:c5:41:02:f1:e0:36:5b:c0:45:b4:fe:
         2d:a5:2d:11:64:d9:86:07:f9:dc:cb:04:28:c0:3e:6f:77:40:
         40:57:d7:b3:8a:e9:7f:f1:62:d9:4a:08:bf:18:f5:f6:bd:b7:
         83:a6:9b:43:0c:bc:fe:a8:3c:d9:8a:65:b1:6a:4d:94:28:57:
         92:00:44:61:4a:2d:49:c6:ce:ac:e1:55:65:7b:ab:6c:7f:0f:
         18:66:bc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:27:40 2025 by rpki-client