Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/1af6a800-ff15-3222-9c11-0738c3304be3.roa
File:                     1af6a800-ff15-3222-9c11-0738c3304be3.roa (raw, json)
Hash identifier:          78LXVJwcf18e8dNNiIIo3cvBfkDRJ8s2tOPoDm2OmTA=
Subject key identifier:   B6:B4:DC:BD:2E:CD:27:E1:D4:67:99:86:E4:45:99:9F:38:8C:D4:5A
Certificate issuer:       /CN=0432b247-64bf-4a12-bc99-32dbce58a455
Certificate serial:       010D0C9F43285849E7BA737B9CA3B0455CEBD280
Authority key identifier: 00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/1af6a800-ff15-3222-9c11-0738c3304be3.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        64.110.138.0/24 maxlen: 24
                          2620:104:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:73:7b:9c:a3:b0:45:5c:eb:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0432b247-64bf-4a12-bc99-32dbce58a455
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=96fe107e-4e10-4537-ba7f-4bfd50ca40c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:82:32:36:d1:1a:ca:f0:0f:af:9e:a5:12:14:
                    8c:24:65:d8:32:f7:bc:6f:91:c7:bc:9b:7c:3e:d0:
                    7f:7c:50:13:30:7b:ed:38:c2:a3:c3:2c:f6:51:52:
                    71:ac:7d:89:27:bf:2b:af:33:a1:a0:11:0c:6e:86:
                    2d:f9:0a:8d:cb:03:6a:a5:95:aa:01:5d:95:0a:98:
                    34:46:6e:b4:25:73:ee:44:a8:9f:db:de:bd:35:fa:
                    42:01:7f:e3:ff:12:28:48:1f:3c:4a:58:d6:46:ef:
                    70:7a:62:c1:8a:c2:06:a0:4c:f7:20:ba:c8:9e:0a:
                    81:68:59:eb:9d:70:0e:6f:18:48:ff:bd:2a:1d:9f:
                    eb:fd:74:d8:0b:4a:f0:6b:5e:b4:55:e1:95:28:c0:
                    68:70:b5:55:37:18:d7:0e:84:2e:8c:ab:5c:91:08:
                    7c:bb:42:1b:5b:de:5a:0c:52:d2:09:c4:76:3a:a4:
                    d4:e8:a9:ab:ea:87:52:92:73:6c:e6:8c:da:f4:24:
                    66:9c:45:ec:27:62:9d:2b:10:83:4e:27:88:be:9d:
                    22:ab:9d:87:e0:33:72:7b:c4:52:1c:f2:4a:ac:04:
                    5e:3c:66:34:e7:23:38:02:65:93:b8:9b:b3:63:eb:
                    80:d0:16:5b:9a:d8:23:e7:87:9d:63:f4:e2:e7:81:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B4:DC:BD:2E:CD:27:E1:D4:67:99:86:E4:45:99:9F:38:8C:D4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/1af6a800-ff15-3222-9c11-0738c3304be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl

            X509v3 Authority Key Identifier:
                keyid:00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.138.0/24
                IPv6:
                  2620:104:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:23:4f:c4:09:e6:52:3d:df:78:39:c6:4d:3e:dd:1c:f4:16:
         be:35:ca:40:70:1c:43:ca:73:a0:c3:90:d3:66:ce:eb:63:e0:
         dc:b5:1e:b3:e1:9f:a2:cc:15:5b:42:22:10:e8:70:e4:e9:c9:
         d9:fb:67:65:9b:0a:0e:4d:e5:0f:14:fb:ce:4c:69:fa:6e:6f:
         f9:73:be:0f:44:83:e3:1c:ec:56:c5:63:b1:4d:4b:4d:f6:d1:
         0d:e9:b7:12:87:81:f0:4f:21:6a:c8:4a:11:5b:db:e0:1a:fd:
         6e:a4:86:65:bc:2d:03:de:c2:74:21:1d:46:f4:c2:31:13:d8:
         19:9a:5f:99:98:d9:06:55:e6:ed:0f:26:ee:21:a2:1c:bc:40:
         48:6e:13:f4:b7:dc:ed:3a:1c:a5:fc:5d:bc:c7:f4:28:5f:21:
         8f:75:66:56:f1:92:f8:a1:b3:b8:44:a2:be:47:bc:5b:49:bf:
         53:5b:e7:1f:3d:b9:ba:05:20:c4:6e:a0:16:70:5b:70:a2:00:
         7f:1f:d0:28:7e:e5:cf:e5:94:52:50:0b:8d:6b:16:13:c4:5d:
         c3:8d:9f:5e:b7:2b:ad:b5:f3:7e:44:07:2e:cc:ef:f2:70:87:
         db:85:cf:fa:95:4e:03:49:19:31:af:71:db:44:90:3e:32:4f:
         1b:d4:82:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:55:38 2025 by rpki-client