Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa
File:                     beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa (raw, json)
Hash identifier:          2C5BGPH0wJ8csSEwgNug6xUtJzbBiSQkMzvX1MD0BZA=
Subject key identifier:   E0:5B:58:3C:0A:F2:08:4A:1C:A1:FF:8A:83:CC:79:97:9B:58:76:23
Certificate issuer:       /CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1
Certificate serial:       010D0C9F4328584AEF8BC2CB86B6E93D21591500
Authority key identifier: 31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     29789
IP address blocks:        64.88.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:c2:cb:86:b6:e9:3d:21:59:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=5e3e9cdf-1469-4caa-96e6-d6ee6f2f5fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:24:94:f7:66:52:5a:e3:11:8d:c9:ba:3f:9f:
                    65:72:da:2b:8d:01:db:63:b7:76:76:c3:8d:76:4a:
                    00:05:8d:08:c5:cd:d6:03:c9:dc:48:8b:86:6f:50:
                    17:f8:d4:11:a9:d0:8f:48:0f:ac:65:64:8a:2e:7a:
                    cc:b0:a5:4c:a8:45:d9:85:a4:89:dd:a9:ee:ac:a5:
                    cf:92:c0:54:64:83:08:14:e0:3e:38:ba:f3:46:48:
                    24:94:a6:82:25:e9:d0:73:c8:54:b3:e7:c0:b6:ab:
                    2e:2d:99:ab:c9:57:91:19:82:1a:00:ba:31:1c:0e:
                    6a:44:3a:a6:c4:11:84:06:81:bd:45:50:d3:b5:be:
                    2e:e3:42:37:5c:0d:cc:c0:39:d9:81:d5:1c:6f:3d:
                    f3:08:52:05:4f:d9:8b:7e:04:9b:f5:60:59:25:ed:
                    31:7c:77:fe:22:bb:0f:8d:ee:ea:8a:40:d4:22:96:
                    a0:cd:e7:22:d1:5f:f1:1c:0c:1d:a2:93:06:da:f3:
                    a6:27:3f:2c:a4:eb:2b:66:3b:c7:28:84:f7:ec:06:
                    0b:74:c2:85:ef:07:83:5c:7f:8b:4d:74:60:58:76:
                    e4:88:0a:67:ac:5b:37:89:10:ce:72:d0:36:cd:a0:
                    f3:25:2f:00:79:c0:e8:b0:66:be:aa:56:e7:8c:86:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5B:58:3C:0A:F2:08:4A:1C:A1:FF:8A:83:CC:79:97:9B:58:76:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl

            X509v3 Authority Key Identifier:
                keyid:31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:91:35:91:ba:2a:08:9e:60:1d:fe:ea:ef:69:c1:c5:e1:46:
         7c:7f:96:c2:4a:ae:c7:27:27:48:a6:43:5e:d5:52:e8:0d:db:
         1b:52:56:d3:ad:62:f2:7d:8c:02:ba:bf:49:81:70:c9:05:7a:
         52:6d:6c:48:8f:10:6c:7b:b9:92:c4:cc:7b:74:c1:89:3e:82:
         fd:a5:76:67:55:1a:b8:70:6f:ac:13:f6:35:9f:57:99:ed:3b:
         30:21:3e:8b:d0:54:be:82:15:58:3b:f7:a7:8c:06:85:b9:79:
         7e:61:b1:f7:52:79:cb:38:d0:4e:69:a5:4f:4f:69:be:36:37:
         78:77:81:85:90:55:e5:74:ae:82:4f:29:5a:c4:83:1e:c8:65:
         94:58:c5:e1:bc:18:53:9c:3e:c9:cc:47:09:f7:22:a9:19:6b:
         73:b5:14:2b:f7:2e:ba:3d:f6:54:f5:38:e3:4f:34:8a:ab:7e:
         52:6d:c6:ae:ec:a5:61:c8:0f:eb:16:d7:18:bf:05:4d:aa:8e:
         f0:b4:a0:c3:58:03:f4:0e:4a:3e:ad:82:7e:52:c5:71:17:a2:
         44:fb:e0:a4:ea:2a:4f:b1:3c:5d:f1:1f:5a:fb:6c:51:65:b3:
         8b:73:3b:5b:4e:8e:9d:35:58:73:dd:84:05:01:e2:2a:e5:c5:
         04:a8:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:06:45 2025 by rpki-client