Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/9af25d2b-0d31-3cbb-9ba6-69d269e4d973.roa
File:                     9af25d2b-0d31-3cbb-9ba6-69d269e4d973.roa (raw, json)
Hash identifier:          GHbbHexPpRByBUVr4VgRW8QWIyYYA7h3a7cRKPjLxu0=
Subject key identifier:   C3:B2:DA:4D:3B:F9:4C:6D:0C:08:C2:5F:AC:43:C0:14:50:A2:6F:8A
Certificate issuer:       /CN=4eb5326f-ee03-4174-b355-9916b3e826aa
Certificate serial:       010D0C9F4328584A46A5AD15CD1A09847746CDC0
Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/9af25d2b-0d31-3cbb-9ba6-69d269e4d973.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     32076
IP address blocks:        64.30.148.0/24 maxlen: 24
                          64.30.149.0/24 maxlen: 24
                          64.30.150.0/24 maxlen: 24
                          64.30.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:ad:15:cd:1a:09:84:77:46:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=ab27b7a6-12ba-47ef-9baf-c899748d0c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d8:1b:be:5e:89:55:6e:55:7c:89:70:8c:a2:
                    87:ed:b7:db:c5:bb:f6:af:69:86:78:37:ef:43:22:
                    aa:4b:6b:09:18:c8:95:14:b9:76:aa:85:c4:5e:af:
                    b5:28:03:8d:18:91:52:fd:cf:83:a6:50:8c:21:73:
                    3d:34:55:13:54:9f:ff:ad:ec:fa:de:23:ce:39:1e:
                    56:2e:ae:3a:4f:3f:b6:2f:4d:88:99:ae:24:fb:df:
                    b4:1f:87:3c:c8:82:7b:54:e8:6b:42:21:e5:ab:50:
                    8e:03:cd:c8:5d:d6:12:34:62:e4:e6:22:29:65:34:
                    d9:e6:c3:e1:f9:86:5f:9c:32:4c:72:1f:01:f7:f5:
                    8c:f9:e3:60:f9:61:a3:e3:4e:38:df:4d:41:45:f9:
                    36:c7:b5:c9:fc:37:ff:0e:ed:58:dc:55:e0:e8:eb:
                    c3:87:a6:76:9c:4e:1f:44:d8:c5:1b:9c:ff:da:a6:
                    4d:f1:dc:e2:59:73:cf:f8:81:c8:51:dd:77:a6:c3:
                    9d:ad:e0:fa:90:6c:59:57:f8:22:2f:a4:2b:e2:fd:
                    e0:dd:1e:e5:5f:d5:8f:2b:4e:84:0d:56:49:50:9d:
                    b2:55:0d:5e:e5:d3:5e:be:b5:b2:b4:fd:39:85:24:
                    9f:94:c5:9e:cd:e4:11:17:9b:d5:ed:ab:ab:bd:2f:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B2:DA:4D:3B:F9:4C:6D:0C:08:C2:5F:AC:43:C0:14:50:A2:6F:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/9af25d2b-0d31-3cbb-9ba6-69d269e4d973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl

            X509v3 Authority Key Identifier:
                keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.30.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:9d:1c:10:f0:23:d8:a1:4b:ed:dd:21:05:b8:bf:b0:1e:af:
         87:c8:31:ae:66:2a:4c:38:c3:6b:29:e8:02:b1:a3:17:1c:8d:
         7c:95:80:62:7e:a1:0b:0e:c7:a3:a8:ef:67:92:24:af:e4:8d:
         27:0d:41:6e:05:9a:62:2c:93:a1:dc:ac:ef:1d:a9:00:b4:f0:
         a1:3e:fb:28:3f:fd:a8:d6:a1:87:35:86:0f:cd:b0:cd:6c:8a:
         75:80:ca:94:07:2d:77:de:e8:9d:16:74:8f:6e:a8:96:85:3e:
         7c:21:8b:83:7b:a5:12:52:7b:55:92:80:62:bd:ea:8d:c9:1d:
         c6:4b:52:bc:03:24:3c:b8:df:51:49:6e:8e:6a:89:82:4f:b0:
         3c:09:ab:01:72:9e:5c:30:3a:77:44:e8:20:a2:01:9f:63:75:
         2e:22:b2:fc:73:a1:e5:cc:7c:f8:77:7c:c7:22:03:5d:8a:f9:
         b8:9b:92:87:9d:1c:e7:47:c8:5c:24:d6:fb:70:91:be:0f:28:
         9d:0a:42:c8:78:66:16:7f:c1:55:bd:67:04:2a:45:88:a3:10:
         22:0a:3f:c2:a5:34:d0:45:e9:3d:58:7d:35:12:8e:03:ff:f4:
         77:a3:4b:86:c4:a4:b6:74:a0:63:e9:ba:63:6b:d1:7c:2e:a0:
         8f:dd:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:52:16 2025 by rpki-client