Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/311b2734-abf4-3bb7-ba5f-b08fb3772d14.roa
File:                     311b2734-abf4-3bb7-ba5f-b08fb3772d14.roa (raw, json)
Hash identifier:          K00JCt4ETT1VOrmhEz1qVFq/lE7PlkztzUE9a1KU0co=
Subject key identifier:   88:81:7C:89:4B:EE:32:94:61:72:DC:32:C1:C2:E9:FB:8D:FD:DB:03
Certificate issuer:       /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial:       010D0C9F4328584A58CAFEFBFAC5D3F725DE4450
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/311b2734-abf4-3bb7-ba5f-b08fb3772d14.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     27364
IP address blocks:        24.154.0.0/19 maxlen: 19
                          24.154.32.0/19 maxlen: 19
                          24.154.64.0/19 maxlen: 19
                          24.154.96.0/19 maxlen: 19
                          24.154.128.0/19 maxlen: 19
                          24.154.160.0/19 maxlen: 19
                          24.154.192.0/19 maxlen: 19
                          24.154.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:fe:fb:fa:c5:d3:f7:25:de:44:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=85a55fc6-5808-4e80-8d35-41d6b85a89c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4a:ea:91:75:9a:c6:99:f0:c8:e1:6e:f4:ba:
                    22:7f:b6:3d:55:8b:df:93:43:09:2c:d1:55:28:45:
                    89:eb:a9:e0:39:d2:78:6c:0f:a8:4b:83:e9:5c:83:
                    4b:49:c7:c1:e6:8d:87:73:37:d0:a4:19:dc:7f:b8:
                    49:2c:e5:aa:60:6f:b0:76:f5:52:aa:7e:6f:dc:b3:
                    eb:a8:31:3f:dc:23:78:5b:d3:7b:30:94:fa:c6:d4:
                    29:40:d6:94:37:20:65:57:21:17:79:e6:0f:9b:b8:
                    51:61:27:c0:68:a2:b4:3d:69:9e:d4:18:b6:18:02:
                    16:b5:de:aa:6a:a8:49:07:f4:22:72:64:2d:5d:23:
                    45:fb:4e:bf:70:30:c3:73:93:3a:66:f5:d1:51:92:
                    9e:e2:e5:b2:a6:ff:0c:a6:47:37:4c:e5:a5:12:58:
                    88:45:ee:e3:44:77:a5:06:b5:7d:e9:15:b5:a0:ca:
                    d5:59:6c:d3:1f:70:61:94:20:80:b2:90:f0:fb:8c:
                    fb:34:8c:32:37:16:b0:a9:d5:fd:00:2f:86:d6:aa:
                    98:60:4f:4d:e9:d8:17:6f:c5:79:2b:30:a1:3a:be:
                    53:5d:7e:59:cc:63:c4:20:41:a1:38:41:db:42:a0:
                    ce:51:aa:c7:19:b2:ea:96:cd:7c:20:eb:64:07:8f:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:81:7C:89:4B:EE:32:94:61:72:DC:32:C1:C2:E9:FB:8D:FD:DB:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/311b2734-abf4-3bb7-ba5f-b08fb3772d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:92:53:39:64:e5:4a:48:53:1d:5e:dd:c9:92:02:21:15:46:
         c7:c5:9c:57:e6:97:8f:c2:78:d6:5f:81:f0:dd:f5:9d:14:c4:
         ec:9f:09:74:a3:18:65:ea:fa:3a:7b:b2:1b:3b:fe:e6:6c:b9:
         ce:3f:19:a0:30:9d:c8:4f:89:d3:ee:72:42:55:26:c9:74:b0:
         5d:ef:72:73:e3:2f:3c:e2:0b:91:6f:84:a9:c9:a9:a2:32:71:
         d1:af:84:55:f9:8c:69:66:02:eb:14:3f:2d:37:fb:68:79:ca:
         51:2a:78:2a:fc:6d:98:e1:5b:29:4f:8c:54:d9:ef:58:b2:e0:
         ac:3c:41:1a:d4:1c:36:14:3a:ee:35:06:3f:96:77:58:81:eb:
         49:84:bc:f0:3a:fe:db:cd:c4:4b:b7:00:9a:6a:68:30:28:89:
         6c:63:ea:d4:8b:75:03:6f:0b:63:32:ad:39:dc:8d:4f:b4:ec:
         cb:ce:c0:47:f6:11:f0:64:12:54:8d:35:87:c2:3a:eb:54:6f:
         b2:43:fb:bb:e0:a8:75:35:94:f7:ba:00:45:25:dd:7c:46:d3:
         b2:bf:45:4b:f8:82:9e:02:37:9a:14:d8:9b:c4:d6:55:07:55:
         67:a2:5c:b2:42:56:9c:de:fd:e1:83:99:c1:ff:82:42:2a:73:
         b2:ed:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:14:22 2025 by rpki-client