Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa
File:                     d11d7e2d-3067-3749-a2e7-fb3533597efa.roa (raw, json)
Hash identifier:          JjUUVEHfoscqOUC6cRRUnO9EY7+P0s8Z0/4ZxC7FsKI=
Subject key identifier:   97:D2:B8:50:FC:DD:75:6F:18:8A:F9:57:FC:F7:79:C1:C8:BB:62:07
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584A31B563A08286E6ADF33E6880
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa
Signing time:             Sun 15 Jun 2025 01:00:49 +0000
ROA not before:           Sun 15 Jun 2025 01:00:49 +0000
ROA not after:            Sat 13 Sep 2025 01:00:49 +0000
asID:                     21782
IP address blocks:        64.127.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:31:b5:63:a0:82:86:e6:ad:f3:3e:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Jun 15 01:00:49 2025 GMT
            Not After : Sep 13 01:00:49 2025 GMT
        Subject: CN=de8dce18-bb74-4c59-bae1-dccd23ccf9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:6e:89:a5:9e:86:73:fc:bf:c8:79:15:f3:
                    a4:94:b9:44:c3:99:76:12:88:58:0f:8a:a0:1e:f8:
                    9c:83:bb:3f:3c:e1:58:2a:61:f9:0e:9a:01:07:39:
                    26:a7:03:24:48:44:25:c3:95:10:8a:ba:d4:a6:de:
                    fc:b9:9b:10:59:a2:96:3e:e8:b3:4c:10:11:cc:94:
                    aa:27:b2:d3:d9:ec:54:0e:74:6b:32:66:6b:2a:56:
                    62:f9:f6:c3:d9:00:46:38:10:7a:e2:ae:d8:e7:7a:
                    9b:39:01:f9:db:6b:ee:da:c8:02:2d:54:8f:9b:a1:
                    75:64:ef:d5:7d:e1:39:f1:d5:aa:53:d8:50:95:8f:
                    89:74:90:b9:f7:d5:08:aa:52:7f:76:b9:29:3b:16:
                    ba:be:43:08:51:e6:3e:a7:47:4d:90:5c:0e:d9:c2:
                    97:03:4c:05:2b:12:26:a7:62:b1:d7:2c:a8:51:89:
                    54:e0:fa:d3:a0:fd:57:73:ff:d6:f5:bc:b2:2c:fa:
                    9b:c9:e5:b9:14:a1:49:ec:6c:c4:e5:14:43:93:7f:
                    f6:48:bf:d5:22:d0:aa:8f:75:38:b5:9a:48:2d:12:
                    05:54:dc:16:24:f6:2e:d9:54:5f:d8:35:6d:5b:87:
                    3e:41:d9:8d:30:2f:00:d4:eb:84:6e:1e:c1:ac:59:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D2:B8:50:FC:DD:75:6F:18:8A:F9:57:FC:F7:79:C1:C8:BB:62:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c4:3d:e0:a2:97:c2:0d:08:66:ba:a2:54:ef:08:73:07:de:
         e7:16:95:fc:7f:d2:37:21:5e:77:6b:7f:d7:bd:de:77:c4:8e:
         8e:80:67:58:1c:55:aa:67:67:06:f5:ab:3b:a8:8d:a7:cb:5e:
         fd:f5:eb:e7:aa:78:d7:49:31:b4:b7:1d:29:6d:f7:73:cd:1b:
         08:b1:a7:7e:7d:67:80:5d:56:bd:9d:96:d1:f2:b1:05:eb:32:
         07:79:0c:9f:1b:f6:88:f9:6f:cd:b6:b2:9e:91:a5:dd:90:1b:
         21:eb:36:8e:a0:3f:c7:d3:5b:f8:ce:86:49:f1:64:59:ff:d5:
         54:d8:2b:6e:ea:59:be:56:80:78:40:77:12:a4:a2:0d:d0:db:
         43:19:e1:00:09:1f:37:b8:da:07:2f:ad:8c:45:62:15:50:6f:
         3f:e3:4f:64:b5:e9:43:09:80:5a:9b:af:be:b4:f1:aa:af:5b:
         21:1a:26:60:41:a3:1a:26:f0:54:33:04:c5:ba:ac:62:81:01:
         d8:67:1e:39:d1:d3:f6:fb:fd:2a:0e:d6:69:c6:2b:cc:bf:d1:
         6e:12:20:dc:81:c1:15:cc:35:42:2e:16:28:50:87:5e:36:fe:
         d6:4a:3f:46:f6:8e:90:c2:e9:82:6d:ae:3c:e5:db:80:69:b3:
         c1:bd:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:40:53 2025 by rpki-client