Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bb041189-fc4a-373b-8858-10cef827368d.roa
File:                     bb041189-fc4a-373b-8858-10cef827368d.roa (raw, json)
Hash identifier:          h/K6PF5UqIem9aT+bkNdytXd7816ZzHCMdDby8qHb4M=
Subject key identifier:   F9:B6:5D:10:7E:CE:05:3C:F8:75:76:98:B5:46:AA:51:15:61:9B:68
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584A03A539EE45C44973EDD42E80
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bb041189-fc4a-373b-8858-10cef827368d.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     26042
IP address blocks:        64.22.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:39:ee:45:c4:49:73:ed:d4:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=5dd16be9-d490-4aca-87be-74b2a68f94d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:ea:0f:cf:8e:cd:8d:26:7a:c5:f6:9e:e3:
                    bd:09:b9:0a:2f:3c:8d:a4:25:fe:9b:b1:ee:37:bd:
                    ca:34:f8:e7:ac:53:ac:68:2c:8d:57:43:ca:7a:01:
                    b7:bb:7a:17:09:d9:52:4c:de:1d:28:5b:5a:2c:b6:
                    07:c2:bf:3d:a0:bf:47:68:38:25:dd:02:a8:b5:7c:
                    fe:05:86:c0:47:79:36:a7:20:18:96:f2:d6:42:bf:
                    45:4b:25:df:f2:c4:4c:17:8f:34:5a:19:07:44:93:
                    8c:fd:48:81:95:31:7c:f9:7e:f4:2f:93:20:ce:aa:
                    59:24:ae:b9:45:e6:71:99:07:9f:01:cb:45:e0:0d:
                    bb:d5:2b:fa:b4:15:a4:fa:b2:31:8c:a4:d4:cf:91:
                    4d:3f:d0:8f:de:d9:49:5a:18:89:d9:ba:ac:02:7b:
                    d2:83:c5:88:be:e6:4b:f9:37:22:44:a5:76:8c:ab:
                    a0:6b:5f:bc:ac:82:82:38:97:a4:ce:9f:92:27:b9:
                    54:fa:d7:01:cd:b7:f4:83:58:22:b0:10:bb:dd:ad:
                    0f:55:e7:7e:a3:0c:7f:a3:22:89:3d:96:4d:de:ca:
                    82:e2:9b:f9:dc:7e:73:e7:0a:23:f1:43:30:f2:62:
                    e7:cf:47:a5:25:41:b5:82:f4:a9:17:2a:a1:fb:f5:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B6:5D:10:7E:CE:05:3C:F8:75:76:98:B5:46:AA:51:15:61:9B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bb041189-fc4a-373b-8858-10cef827368d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e5:30:38:da:7e:22:95:62:da:2b:58:f1:5e:09:d1:c3:d6:
         0c:a8:ec:ce:8f:ee:a1:f4:b4:40:7d:6e:a5:9d:91:ff:80:0c:
         74:4f:04:63:4a:3e:48:d4:9e:81:f4:a9:2f:00:d0:fa:30:3b:
         c3:be:16:13:7d:e9:08:d4:b7:80:a4:cc:20:78:e5:0e:73:39:
         ea:cc:b5:2d:ec:c7:e0:4e:73:69:9b:cb:5f:85:8a:6e:bc:6c:
         99:cd:cf:27:cf:91:8f:bb:2f:3d:e7:3b:15:eb:0d:d6:48:59:
         fc:d1:ff:e7:72:de:9f:9f:06:21:eb:82:58:69:94:b0:47:36:
         86:4e:0c:bf:f4:eb:8a:ae:0d:1e:93:f0:44:88:d4:5b:ed:c2:
         da:4c:24:2f:a5:16:6d:6f:34:b6:ba:c5:73:4d:09:9c:95:69:
         97:0d:6c:20:76:fe:da:1c:c4:f1:4a:09:9a:47:e5:31:90:e1:
         57:84:d3:ed:50:74:04:62:48:9e:c0:b7:30:b7:47:52:f0:26:
         a5:47:77:1b:e5:d0:8a:96:e7:65:9f:f1:aa:d5:46:64:f0:63:
         7c:53:9d:39:be:11:64:e7:ed:06:eb:40:9d:26:b9:9c:6b:4b:
         c8:33:c6:94:6f:c8:f8:74:c0:8b:06:05:10:c0:d4:a1:a3:6d:
         81:2f:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:47:37 2025 by rpki-client