Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd7372d9-b2ed-30f2-865c-52e5489c07ce.roa
File:                     fd7372d9-b2ed-30f2-865c-52e5489c07ce.roa (raw, json)
Hash identifier:          ex18eUjltVP6HDyB6sRQjyDRfgHJvULsUdM0d/27jGs=
Subject key identifier:   E0:C5:74:62:41:16:22:8C:AB:B5:AB:D8:9A:AC:83:BE:52:13:29:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F18009ECEA62AB00B5167B60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd7372d9-b2ed-30f2-865c-52e5489c07ce.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        64.36.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:09:ec:ea:62:ab:00:b5:16:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=fe2aed27-724d-426f-957c-7c46333f507b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:81:34:f6:ea:40:46:c4:c7:1e:77:91:63:c5:
                    e0:c2:fb:23:d6:a0:90:f0:1e:19:1b:28:78:2a:4b:
                    b0:ce:45:8d:b2:19:35:6d:b1:bc:b7:7b:12:26:41:
                    ae:86:da:f6:c3:cd:3f:30:07:3b:bf:53:c6:46:c4:
                    7a:30:f4:fa:82:2f:06:14:f9:4f:b1:8f:94:a7:9b:
                    58:eb:26:57:d0:26:41:41:59:71:e4:b5:f1:63:64:
                    6f:00:ce:20:62:21:38:19:1f:61:ed:87:8c:80:04:
                    ec:af:70:ae:ed:6b:b4:f1:9d:5a:6e:44:73:d5:ce:
                    94:0e:36:06:51:41:a0:cc:d9:70:4f:ea:6d:67:bd:
                    be:09:12:8d:c3:32:11:8d:2c:98:e4:2c:cf:c8:c1:
                    de:08:21:70:ee:da:e9:2b:22:56:f8:c5:a4:ca:f5:
                    2b:20:6b:19:0d:29:4d:56:d2:5e:33:54:d1:d5:99:
                    11:30:0a:a3:dc:f8:b5:df:e3:a1:e5:3b:7a:47:59:
                    38:53:bf:62:cf:61:62:1a:7d:21:be:2e:c4:23:76:
                    cf:f4:3b:38:8e:bf:d6:77:f9:12:8f:a5:4e:9e:b2:
                    74:cd:ff:f6:29:20:59:23:8f:8f:d4:e2:57:03:3c:
                    79:4e:e0:6b:c0:3e:1c:b3:85:f6:9e:94:e9:bc:f2:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C5:74:62:41:16:22:8C:AB:B5:AB:D8:9A:AC:83:BE:52:13:29:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd7372d9-b2ed-30f2-865c-52e5489c07ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.36.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:d6:fa:f6:71:5a:a7:95:63:dc:35:7f:52:d5:3e:ef:a9:
         58:65:84:46:dc:98:5e:3f:8c:67:56:66:2f:a1:e9:6d:65:57:
         11:32:d0:a7:fe:6e:f4:8c:e9:2a:98:52:59:43:5c:27:64:59:
         69:68:79:de:52:34:80:5e:c4:6b:54:b0:14:f5:ca:73:5b:52:
         e5:0b:9f:09:aa:47:81:3f:a8:20:6d:d2:7d:94:4a:39:ad:e1:
         f4:8d:d7:ad:96:48:7a:c9:40:a6:db:25:56:a5:0b:aa:d3:f0:
         ec:5a:fe:f5:8a:4e:1a:e0:91:58:9a:36:3b:36:6e:10:70:23:
         8a:d1:10:19:09:84:ee:a2:c8:4e:61:3a:64:29:04:d1:e4:7c:
         a5:d7:18:3a:7e:c3:83:ad:5d:aa:38:53:6d:ab:75:ed:65:45:
         39:3e:c0:e6:78:f5:ad:7d:50:6e:cf:dc:d4:b4:15:98:8b:20:
         de:5c:2a:e3:64:70:c5:2d:d2:a6:c3:95:cb:59:eb:dd:47:c9:
         79:8b:ad:c6:a0:e0:0c:84:f8:bb:22:8b:ec:90:d3:49:dc:17:
         c0:6e:0d:1d:a3:f5:ab:2b:bc:34:84:f9:ae:52:00:ac:3e:ed:
         a2:ce:f2:e7:81:56:8e:ab:e9:65:94:3a:35:8d:ee:2c:00:8f:
         be:1b:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:18:57 2025 by rpki-client