Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/2606173b-fabf-3790-9154-7704d68d1ba8.roa
File:                     2606173b-fabf-3790-9154-7704d68d1ba8.roa (raw, json)
Hash identifier:          sVelAOkEg1lVTdqdMmHAaQsLabcZ7Lp3vTz0rBqaq+U=
Subject key identifier:   6F:6C:10:5A:91:A4:09:D6:C0:AA:A5:9D:1B:11:87:2E:C1:E5:46:FB
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584A5335AB5C4043CADB46D5B380
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/2606173b-fabf-3790-9154-7704d68d1ba8.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     36184
IP address blocks:        64.179.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:ab:5c:40:43:ca:db:46:d5:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=2a07b04c-eb29-48ea-97d0-f8d637a35e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:1e:2a:5e:c5:60:ce:35:6e:c2:c7:19:eb:
                    1f:57:d3:b3:1a:3b:38:21:8f:ad:82:b8:73:05:eb:
                    fa:74:a4:41:8a:4f:36:e1:ce:ce:75:d5:17:11:71:
                    54:be:bb:f3:29:60:2d:1f:ca:39:65:b1:33:fd:06:
                    5a:00:bf:b4:d7:a9:a0:4e:dd:a5:de:43:b6:42:83:
                    fa:10:0a:1d:24:4a:bf:cc:84:ce:4b:a0:5c:24:af:
                    a1:28:36:a3:72:10:39:a3:06:d0:40:c4:71:6f:83:
                    70:1a:d5:20:10:84:99:3c:b1:42:07:9d:af:6e:c0:
                    36:3b:2e:6b:40:8c:88:81:ca:27:cf:da:3d:bb:44:
                    df:92:e1:70:96:86:86:db:14:06:2d:2e:70:a2:e1:
                    47:e5:a8:18:e2:f1:61:ce:79:c7:02:f2:8d:96:3a:
                    a5:40:b1:1a:44:48:7d:2c:57:27:33:7c:b1:c6:ad:
                    e1:a7:c9:5b:80:d2:d9:ae:3b:f2:36:5b:d6:1c:8e:
                    8e:32:ba:84:b8:b8:a1:4e:55:7a:39:81:ca:34:47:
                    fd:b2:95:54:25:26:92:0f:4e:df:7d:ce:98:a5:28:
                    0a:2c:e8:04:ec:a1:88:b1:09:1b:e3:69:ef:f5:91:
                    27:55:23:64:17:41:76:42:32:a6:63:0b:82:f8:6a:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6C:10:5A:91:A4:09:D6:C0:AA:A5:9D:1B:11:87:2E:C1:E5:46:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/2606173b-fabf-3790-9154-7704d68d1ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.179.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:15:d8:bd:f2:fe:d0:71:ca:43:2d:db:a5:e6:18:f9:a6:
         f8:51:30:6f:e3:0e:49:4f:0a:ec:d6:4c:42:22:8e:24:8d:b4:
         1f:0a:8b:76:17:20:94:1d:d7:9d:0a:7a:ef:09:b2:83:65:2e:
         c0:13:4f:a3:39:81:6c:12:20:a3:5e:de:eb:d5:7b:fc:f4:90:
         3e:c6:c9:be:e9:18:e8:7d:a1:db:49:a0:12:17:cf:0f:6b:db:
         f3:72:ea:8b:63:f1:b2:09:8e:6a:9b:95:5a:b2:9d:1b:48:46:
         ef:d9:08:ae:5b:b3:48:60:af:15:7f:ed:5a:84:1f:b7:20:ed:
         bd:9e:e5:10:aa:36:70:3d:e3:26:78:6d:a6:c1:b3:43:f4:57:
         2a:bc:dc:52:25:6c:fc:5e:c3:94:27:bb:a0:65:67:c3:2b:3e:
         12:b1:0f:f3:a8:19:ed:4b:87:f5:a6:d1:d5:40:79:d5:0e:95:
         9d:f2:2b:31:d2:54:84:8b:57:9d:37:ec:40:f0:4c:b7:9c:bd:
         db:cb:69:b4:ce:77:cd:c5:47:6c:d2:1d:6e:cd:71:84:d1:ba:
         70:73:e9:b3:cb:40:63:40:a7:b0:f6:33:6e:fb:2b:89:ab:8b:
         8e:17:b1:07:08:7f:dc:0d:87:1b:c3:20:96:62:0c:d3:62:6a:
         01:d9:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:37:14 2025 by rpki-client