Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/9a10871a-d77a-3599-9239-86d7d67f72a0.roa
File:                     9a10871a-d77a-3599-9239-86d7d67f72a0.roa (raw, json)
Hash identifier:          6v8tNIxpVHnhjl6+ykhsZ9jEdKPkoXXbxxC9sOmrm7Q=
Subject key identifier:   64:6F:08:54:BD:BB:AA:BF:72:1E:82:22:D7:29:66:6A:57:B5:09:84
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F4328584A3A15847A4147DC99E5C69C00
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/9a10871a-d77a-3599-9239-86d7d67f72a0.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     40788
IP address blocks:        24.53.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:84:7a:41:47:dc:99:e5:c6:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=afe171f5-cbc1-4a7c-b259-a46d38877641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:19:9b:04:eb:08:b2:0d:18:0a:54:02:08:
                    6c:a7:e2:c9:17:52:1f:4b:19:c6:13:0f:9e:73:cc:
                    74:bc:e5:ae:1b:92:90:a1:85:51:fe:86:00:69:d0:
                    e8:9e:99:57:e1:48:9e:74:c0:f6:ff:9c:3e:32:29:
                    7a:49:b6:2e:8e:8a:7f:7a:cf:ba:30:cb:03:51:b6:
                    c9:08:70:d2:44:17:40:03:cf:fc:e0:a6:43:ec:d6:
                    e8:53:8e:18:dc:81:99:90:9b:58:f6:15:55:c7:5a:
                    7f:19:6b:60:b7:5a:e7:48:4b:ca:18:67:44:c3:c6:
                    7b:4d:fe:93:13:15:ae:c3:7f:87:02:07:3d:f1:cb:
                    00:f5:71:6e:b0:51:c3:b5:00:e0:a7:be:33:64:65:
                    6c:ee:9e:d4:ae:32:5d:20:43:2d:9c:c7:34:bd:8e:
                    58:92:43:a4:5b:f7:71:b4:20:40:eb:eb:e6:42:14:
                    b5:bf:cb:8b:da:9f:07:73:dd:57:d8:58:56:54:08:
                    d5:35:c5:e0:9f:04:68:e3:70:e4:8f:ca:7b:86:3d:
                    00:e1:26:e9:b6:20:fd:da:8d:ff:eb:6c:ad:e1:df:
                    ce:bc:aa:b1:ff:8d:25:b4:06:95:cf:9f:b7:6a:61:
                    92:32:94:ef:ac:ee:b6:ec:48:11:b2:8b:81:62:b2:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6F:08:54:BD:BB:AA:BF:72:1E:82:22:D7:29:66:6A:57:B5:09:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/9a10871a-d77a-3599-9239-86d7d67f72a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.53.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ea:a9:a4:94:d5:65:e0:e7:f6:48:a4:01:63:62:ff:09:e4:
         14:11:6f:28:d0:97:62:ce:64:ce:4f:00:c3:08:85:56:0a:ff:
         a8:8d:62:1b:c7:fb:c9:20:bd:50:17:40:fa:00:e8:71:84:3f:
         b5:32:e1:01:ef:ec:05:85:4a:84:e9:1d:2a:d5:37:3e:3a:71:
         87:fd:25:0a:27:c5:87:3c:54:a1:a3:f0:5d:72:29:fe:96:26:
         74:e6:80:bb:b8:04:a4:73:94:aa:74:77:17:53:93:0f:23:92:
         40:da:3d:73:22:35:3c:2f:16:55:59:31:12:b2:5c:55:b7:35:
         af:7f:c6:ac:0d:72:c1:90:aa:15:1b:0c:2d:06:43:df:d2:23:
         85:95:3a:3d:75:e7:cb:6d:f3:5e:b6:b3:a2:10:0c:45:8d:7f:
         58:59:12:5a:8f:f2:be:20:f6:89:06:30:cf:bb:89:95:9d:67:
         3c:6b:dc:f5:d2:6d:7a:3b:cb:52:e4:f8:9a:68:9c:d1:06:86:
         c6:dc:b1:83:62:a9:2f:16:4b:83:47:df:62:5c:0b:66:98:b7:
         83:aa:5e:f4:41:75:ad:be:2b:47:a9:08:eb:c1:36:91:12:6f:
         7b:de:7a:d5:bc:38:ed:cb:68:4b:78:10:b1:15:d5:4f:4e:00:
         bb:ad:1a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:08:09 2025 by rpki-client