Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/8a4c9887-2327-374f-a37a-43477b0c1041.roa
File:                     8a4c9887-2327-374f-a37a-43477b0c1041.roa (raw, json)
Hash identifier:          C9gBbUqzm5AwkdxdVn3L9YF6Jq/tf5zQo6tePqaM3aI=
Subject key identifier:   BE:E6:E3:76:9F:96:31:81:B8:A3:B1:3C:C2:37:CF:FC:FE:D3:E6:C5
Certificate issuer:       /CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
Certificate serial:       010D0C9F4328584A4C3B111039AC514421EDFBA0
Authority key identifier: C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/8a4c9887-2327-374f-a37a-43477b0c1041.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     36103
IP address blocks:        64.77.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:11:10:39:ac:51:44:21:ed:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=07ca4f4f-1812-4ba4-8431-a005def60722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:e5:1d:53:58:1e:78:51:91:09:7c:92:85:
                    7d:fe:9f:ad:ec:44:60:e0:dd:54:51:5c:78:39:c4:
                    0e:9a:65:85:11:16:a0:4b:54:e5:ec:87:6b:99:87:
                    1c:ce:8e:45:e8:e4:db:6c:23:d7:d7:d9:61:fb:1e:
                    86:9d:bc:4e:66:a1:69:70:d0:b6:c7:a3:8c:a3:51:
                    fe:a9:26:c0:cd:bb:3d:1e:cb:a2:96:8a:f4:a2:29:
                    5c:b2:a7:ad:7f:e0:2e:62:ef:0a:14:27:3d:94:3f:
                    b8:10:89:5f:e8:6e:03:7f:e9:01:59:75:56:29:7b:
                    06:70:01:e2:b9:c9:5b:d8:13:4f:5f:72:71:81:e8:
                    d5:7d:95:22:9a:00:25:32:a8:60:8f:cb:70:47:f5:
                    b1:b4:70:2f:1c:ff:22:0b:96:d9:e2:de:a0:f7:84:
                    1d:2b:9f:00:aa:a1:e8:ed:98:36:7a:87:cb:51:5a:
                    c1:95:ae:2a:29:34:9a:95:c9:25:3c:27:12:78:12:
                    d9:ec:2f:76:2b:cc:ed:61:c2:2f:40:3b:66:d6:ac:
                    d6:3d:a8:01:25:92:d5:ed:1f:05:ff:82:24:19:c7:
                    09:11:18:d6:ca:cf:69:6e:86:b2:2c:b0:48:7c:7a:
                    fb:cb:3d:16:05:e9:e1:0f:f7:c5:27:c5:33:1b:a3:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E6:E3:76:9F:96:31:81:B8:A3:B1:3C:C2:37:CF:FC:FE:D3:E6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/8a4c9887-2327-374f-a37a-43477b0c1041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.crl

            X509v3 Authority Key Identifier:
                keyid:C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ea:3e:d3:40:0d:3f:f6:86:60:55:72:80:87:83:5b:95:93:
         f7:2b:42:0f:10:db:7e:aa:69:08:f2:3c:84:a5:3a:ab:59:8e:
         95:75:2a:88:76:02:bb:a3:9b:ed:83:05:50:5d:f5:db:80:7c:
         15:30:46:16:01:2a:54:b5:6b:e2:a2:81:88:e5:64:e3:44:64:
         b1:33:d4:d3:21:ae:90:4e:3d:27:0d:e1:71:b4:ea:de:c6:24:
         c3:c5:ee:c7:4d:e9:dc:4b:f0:db:96:73:0e:cb:56:3b:cf:af:
         0d:68:8a:ae:24:e7:b5:84:da:63:77:64:75:ad:2e:a2:00:bf:
         58:54:73:a1:62:2d:6a:95:29:c3:4f:e9:ed:d7:66:9b:94:00:
         34:a4:fd:4f:e0:78:c9:b6:1d:a5:ee:96:8c:df:e9:36:b6:dc:
         53:10:bf:45:dd:db:92:01:00:70:0c:11:dc:aa:06:f8:d6:4c:
         77:97:80:d1:13:1b:df:f9:8e:60:49:ec:9d:c5:16:e3:1a:b4:
         85:51:5d:c1:72:34:77:e7:65:63:a8:e9:53:f6:a0:da:67:cc:
         9b:02:a2:ab:5a:8e:c3:9c:00:e4:ce:29:d9:20:b4:17:d1:da:
         19:83:ec:9e:97:78:25:b1:10:15:16:b4:85:d4:17:c7:60:c2:
         6a:d8:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:24:26 2025 by rpki-client