Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/0c4965ba-0115-37fe-a2bd-01c449507bf9.roa
File:                     0c4965ba-0115-37fe-a2bd-01c449507bf9.roa (raw, json)
Hash identifier:          RYFC+16peVRTXmDF9DzHbM8P/x8aeutEXL7v7Fzslz0=
Subject key identifier:   FA:F6:73:F4:41:49:3E:7A:B1:60:B3:2F:F0:6D:12:A8:2A:DB:A0:23
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584A3FAACF3F863DED695DC9EF80
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/0c4965ba-0115-37fe-a2bd-01c449507bf9.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     21782
IP address blocks:        64.90.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:cf:3f:86:3d:ed:69:5d:c9:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=a004f725-56c4-4481-8f75-8a2fb7e8cde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:f8:99:f0:e2:2a:63:e3:cd:aa:79:15:36:
                    3a:d9:97:fa:9e:e3:fb:64:97:98:92:39:c2:5a:87:
                    47:47:70:0b:bf:be:d2:f9:15:84:7e:0f:c4:99:5f:
                    dc:af:c2:a1:03:35:13:e9:7c:61:a3:44:91:fd:57:
                    63:53:23:a1:09:cb:a7:15:dd:34:3a:e5:e7:60:6f:
                    f5:21:d4:d8:1a:3a:70:c8:d3:ab:48:52:16:64:c1:
                    00:35:af:b1:ef:ca:9f:c8:48:f2:3a:ae:3e:10:6e:
                    2f:3d:0a:12:88:29:32:3f:f5:5b:97:b2:79:a5:31:
                    a4:26:47:b3:c4:e1:9a:77:d0:ee:47:e5:7f:30:85:
                    15:cb:22:9b:9d:98:0d:25:11:d8:15:44:a4:16:3c:
                    21:6e:6e:12:a6:e4:03:46:d9:9d:fa:1f:2f:d7:90:
                    c7:7e:60:26:99:29:82:10:ef:d1:6c:79:e8:96:c8:
                    62:a2:04:7c:8b:0a:a9:d9:16:24:b6:2f:e4:16:0c:
                    2f:43:04:7c:9e:b4:9d:f3:60:b9:c7:7c:1c:b9:31:
                    9d:b6:3c:4f:32:37:4c:ea:28:3c:0f:2e:8f:fb:56:
                    1a:b3:ca:97:7a:09:9c:bb:7f:39:5e:fb:2b:da:31:
                    8c:76:ae:ab:8f:05:23:43:93:77:a1:52:a1:dd:82:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F6:73:F4:41:49:3E:7A:B1:60:B3:2F:F0:6D:12:A8:2A:DB:A0:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/0c4965ba-0115-37fe-a2bd-01c449507bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:66:c3:3f:cf:fa:17:56:2f:d2:fc:95:af:28:a5:83:bc:
         13:aa:b4:d9:a2:ab:27:8c:b9:af:15:4e:08:a5:03:22:4c:eb:
         34:36:2f:6c:9c:88:71:bd:6e:84:0f:58:97:a4:39:7f:8f:b4:
         cc:9c:50:26:9e:68:7a:a3:2e:33:d8:6b:3a:93:03:cc:0d:ce:
         5d:73:29:ab:0d:60:39:5a:61:e0:8c:e7:45:7d:d6:ac:7c:00:
         67:ac:a8:fd:53:7b:54:12:c1:52:30:33:b2:61:53:6d:1a:de:
         e3:ed:81:f8:8c:32:8a:de:95:bd:fa:64:e8:88:a4:1c:d2:25:
         dd:a3:59:0e:f6:8f:52:b8:ed:2f:b8:82:a6:06:a8:9f:45:8b:
         03:6d:f3:26:e6:39:73:69:82:00:10:b6:e5:45:f4:45:b7:31:
         ec:5f:54:54:62:37:d0:7f:38:05:77:ea:27:bf:14:27:f2:ff:
         df:d7:86:c5:ec:7c:79:98:98:cc:ca:6f:cb:15:e1:6d:9a:aa:
         8d:4d:e0:a0:d6:85:c3:5f:83:81:87:01:cf:71:c4:62:c0:46:
         d9:d9:7d:24:a8:6c:14:ad:91:18:76:90:49:df:48:bd:e5:89:
         fd:17:1d:7b:d6:34:d1:bb:de:63:ea:c3:0a:73:f7:97:d6:cd:
         6c:b7:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:06:53 2025 by rpki-client