Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/ed9f1371-7cd6-375d-b21a-0b1ef16a70b3.roa
File:                     ed9f1371-7cd6-375d-b21a-0b1ef16a70b3.roa (raw, json)
Hash identifier:          qBpgfPbLForhwP9CRpdNTvZRCc9srhISkTJl4uuobB0=
Subject key identifier:   04:7B:6F:69:68:35:A8:BD:40:2C:4B:26:BE:38:4E:52:C8:53:01:EB
Certificate issuer:       /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
Certificate serial:       010D0C9F4328584A5335A0442661C46E91D15BC0
Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/ed9f1371-7cd6-375d-b21a-0b1ef16a70b3.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     397455
IP address blocks:        64.246.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a0:44:26:61:c4:6e:91:d1:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=91e9a629-e7ec-40ce-9096-1e746fe42c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:34:2d:66:fd:89:97:0b:de:29:76:07:30:
                    de:e4:ef:62:4d:8e:45:53:6e:70:a4:e6:40:12:b2:
                    3d:a4:95:72:da:21:86:2c:89:d6:3c:e5:b3:9c:e8:
                    f1:fc:ee:4d:21:ae:63:c5:eb:f4:be:a5:f7:95:2d:
                    38:4b:3e:0f:8e:25:64:be:8b:d6:32:12:d8:f7:bf:
                    c7:2a:ee:32:f6:aa:80:1b:6c:a7:03:7d:f5:15:2b:
                    27:65:f3:65:f2:c6:16:a3:01:d8:28:40:62:ca:ba:
                    63:54:fe:b7:13:09:7a:f2:ae:4f:f9:65:d6:6b:3b:
                    40:f9:f0:dc:4c:1e:6a:05:eb:8d:1a:4f:84:86:5c:
                    a6:1b:2d:90:f3:5b:55:ec:40:f4:1f:8d:55:e6:bd:
                    4c:d2:60:de:19:69:c1:0d:ac:78:73:22:3b:c0:61:
                    31:11:1e:4a:58:7d:8c:62:64:de:8c:65:62:fc:9c:
                    47:fb:a9:ac:d0:ee:88:43:5d:17:6b:65:56:29:46:
                    3f:ac:82:b4:dc:cd:34:18:85:e1:b1:63:a3:5f:30:
                    9a:68:b6:e1:3a:64:27:4a:31:81:f2:8c:b4:8b:1d:
                    79:00:03:bb:74:b2:b7:cb:aa:e5:0c:2f:cd:a5:c5:
                    ec:06:95:c1:60:f4:b2:19:5a:a6:3f:dd:67:58:92:
                    f7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7B:6F:69:68:35:A8:BD:40:2C:4B:26:BE:38:4E:52:C8:53:01:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/ed9f1371-7cd6-375d-b21a-0b1ef16a70b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:53:68:87:d8:f7:6e:4d:77:b2:e4:ff:f2:42:aa:ff:23:00:
         19:98:e0:0d:37:a3:be:14:f8:12:66:55:9d:e9:6c:a4:a9:86:
         c0:f2:da:37:9a:9e:bb:80:ec:0b:ea:9f:14:4f:2c:1f:4a:fb:
         36:10:e8:35:db:a8:f9:ca:19:29:c6:91:49:79:36:f9:ec:07:
         b5:23:e3:6a:c8:9d:5b:7b:57:c6:21:bb:8c:ef:ea:42:1c:ce:
         b0:a6:76:ac:20:22:20:76:d1:c9:bc:90:67:46:b1:62:db:44:
         72:2f:7a:be:00:b7:4a:45:7f:29:45:c8:6f:3d:2e:ba:2e:d9:
         c5:e5:4d:d0:1c:e1:ea:49:ad:44:90:c0:5f:9a:20:45:d3:56:
         9c:f5:f5:d5:fc:96:0d:89:67:52:c8:ab:36:0b:90:01:f8:e4:
         09:a1:1f:64:9f:90:d5:e3:8b:a0:0c:53:01:7f:5e:0b:06:b9:
         a6:9d:57:92:15:de:a3:b7:98:af:ab:7e:a5:33:ff:1c:66:23:
         7a:68:7a:2d:6a:6a:1c:71:ee:e8:06:92:ac:fb:a7:b8:35:da:
         aa:8d:c3:5f:cf:20:29:29:fd:28:b6:3e:f5:14:a3:8e:53:8e:
         b2:9f:e3:a0:25:cd:97:ed:3a:46:17:17:4a:30:88:2b:8a:88:
         a6:c6:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:51:28 2025 by rpki-client