Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa
File:                     4329ba6e-6e0a-3138-98ed-2d011364b519.roa (raw, json)
Hash identifier:          S22+9bZaPWq1HUOlg6jIzicj+8lxNRLWOotSdcVh9ak=
Subject key identifier:   56:45:32:F7:60:E4:2B:C3:F9:4E:6D:63:95:75:6E:27:4A:EE:C6:DF
Certificate issuer:       /CN=7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6
Certificate serial:       010D0C9F4328584A3A158C2E66790B99F7FA1D70
Authority key identifier: 3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     10297
IP address blocks:        64.79.64.0/19 maxlen: 24
                          173.45.64.0/18 maxlen: 24
                          173.244.160.0/19 maxlen: 24
                          207.182.128.0/19 maxlen: 24
                          209.190.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8c:2e:66:79:0b:99:f7:fa:1d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=b1489958-8d3f-4890-a523-b26bda884cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:92:a7:0d:b0:0c:3a:de:98:8e:6f:3a:6c:
                    94:38:c5:d0:ed:7e:88:bd:9a:8c:79:98:4f:2e:f1:
                    84:de:ee:27:04:50:7f:63:4e:3f:7b:19:96:12:dc:
                    26:82:c4:bb:46:ed:64:1a:97:8f:41:48:d9:2a:4c:
                    8e:5d:cc:5e:7c:98:10:2b:30:d8:a1:df:50:71:4f:
                    f7:b0:1f:61:3d:f5:52:f2:8a:37:32:60:5e:2e:f0:
                    37:b6:a5:3a:33:ad:e8:f6:0c:15:25:87:22:07:7f:
                    ca:bb:c4:62:0b:47:b5:80:3a:7b:ee:22:d6:40:70:
                    f9:22:4e:e6:9b:33:e7:e9:9f:5d:05:2e:16:7c:64:
                    52:1e:5d:53:48:30:a6:a2:57:27:83:0f:ef:89:c1:
                    3c:6b:77:8c:fc:17:68:ed:ea:6f:84:c2:23:0a:23:
                    eb:e9:8a:78:58:46:f8:76:eb:1c:b8:3e:a5:ce:a0:
                    3a:23:bf:bc:7f:af:3b:4a:83:9c:be:bd:9a:cf:82:
                    f5:4a:f8:ba:aa:06:82:3f:16:1f:6e:e9:7a:ea:1b:
                    78:ed:8e:e0:83:65:c1:a8:f6:9b:92:fe:20:e1:2b:
                    38:82:ec:fc:a6:51:a2:8a:36:e6:d0:6a:ce:43:c5:
                    3d:fd:ff:6e:ae:0f:a0:39:a9:37:55:1a:9f:54:cc:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:45:32:F7:60:E4:2B:C3:F9:4E:6D:63:95:75:6E:27:4A:EE:C6:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.64.0/19
                  173.45.64.0/18
                  173.244.160.0/19
                  207.182.128.0/19
                  209.190.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:be:bb:50:bb:88:79:96:ef:ee:1e:7f:54:70:fa:6a:c3:2e:
         e1:06:df:89:46:71:22:2e:00:03:6b:a7:af:26:98:21:ee:90:
         9d:85:50:b5:22:dc:9d:58:8a:86:d4:b1:e1:0f:b9:8b:fb:3b:
         e7:cf:48:ff:6e:00:3b:9c:ca:0a:a2:2a:a2:cd:72:89:c9:0c:
         21:dd:4c:5e:de:61:6e:9e:14:14:7c:7c:e0:bf:50:c0:05:32:
         1b:1f:a6:e0:4c:5d:f0:5d:8f:f1:2e:11:0c:9b:84:61:fd:ec:
         4f:0a:c9:c5:5e:bf:91:7c:42:0f:b6:36:08:33:99:82:dd:cf:
         44:22:2d:2a:2b:91:3d:7a:cc:d7:3e:c4:09:4b:ad:7f:ab:1b:
         e3:7b:96:ef:7b:b0:23:27:85:7c:c5:70:db:c4:56:78:11:71:
         78:e4:49:e1:53:4e:a6:87:cc:ec:62:5c:a6:81:a9:30:ac:58:
         ac:c6:d7:ee:f5:a8:34:b9:46:b9:58:90:26:7a:5a:a3:8e:c4:
         dc:d8:5f:aa:68:99:ab:05:7c:af:17:90:cd:e7:c6:90:54:4e:
         71:15:cf:b7:bb:a1:a3:10:7e:ec:a9:b0:68:87:af:bb:e7:11:
         98:db:be:50:c9:e9:d1:13:1e:3e:08:ed:4e:b8:1f:9e:c5:ad:
         75:c8:11:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 30 05:50:57 2025 by rpki-client