Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa
File:                     b7134fac-817f-3d3b-94d7-fe93439e4a04.roa (raw, json)
Hash identifier:          /D5qQIX6O7tirJA4bwrRxBa7otqn/1s8zDk92lgwUwg=
Subject key identifier:   1B:7A:B4:3C:DB:15:9B:66:B8:B8:AE:34:1C:6C:E3:7B:03:67:76:0D
Certificate issuer:       /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial:       010D0C9F4328584AD7D11B8174D7262F73163700
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     20326
IP address blocks:        64.130.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:1b:81:74:d7:26:2f:73:16:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=a76ec65d-1ef8-44fd-94cd-9098029f0bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:91:ee:11:b8:37:78:85:29:2f:8c:ba:56:
                    c7:bb:a8:09:d8:d7:62:d6:da:5a:d6:65:df:29:87:
                    15:c7:12:f5:30:a4:8f:17:1b:85:52:e8:f2:97:46:
                    5f:a3:c2:03:52:44:7c:15:58:cc:2e:a8:c5:18:37:
                    b7:13:b9:c0:1a:25:45:8a:6f:de:2e:55:fa:85:66:
                    3e:71:4a:76:f3:e4:46:dd:ee:af:3c:b9:bd:64:84:
                    29:8b:08:e1:a2:42:01:3b:4b:92:b4:5e:bc:22:8e:
                    98:88:3f:70:8d:4e:2f:77:0b:6b:16:86:c0:1c:1e:
                    91:e0:d0:89:3d:5d:dc:6f:db:4b:95:9d:37:01:af:
                    db:6e:ae:32:30:98:bf:da:5e:bb:60:98:ef:5d:86:
                    48:2b:0e:3d:45:42:17:c5:7e:9f:5f:e5:7d:87:fd:
                    cd:4d:06:09:77:bf:44:50:c1:63:c9:25:2b:32:43:
                    1c:87:74:00:a6:13:45:9b:2b:47:7e:f2:8f:30:3e:
                    35:64:ac:39:62:c4:14:bb:4b:b2:64:8a:30:78:7c:
                    33:82:70:39:d9:71:37:6f:d8:84:e0:94:7f:14:70:
                    3f:65:bd:0a:6e:1d:0d:be:98:89:fc:89:68:bc:15:
                    bd:55:cf:89:d5:ba:da:ad:e9:f4:f1:09:35:69:a2:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7A:B4:3C:DB:15:9B:66:B8:B8:AE:34:1C:6C:E3:7B:03:67:76:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/b7134fac-817f-3d3b-94d7-fe93439e4a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:af:a6:22:41:29:7a:0e:cc:9d:db:93:8d:ce:8a:fd:2b:07:
         8d:a5:05:5b:5f:43:f7:24:51:77:d2:68:0f:7d:81:84:07:71:
         4f:55:22:f3:53:61:cd:1b:92:bf:44:2b:17:50:65:6e:62:a2:
         db:12:77:6e:4f:7b:c3:6e:01:81:b8:c6:c1:24:f3:0f:fb:a7:
         a7:9e:3d:ad:9a:1e:27:ac:b2:b7:a0:e7:5f:e0:b6:55:b2:79:
         1f:99:f3:ae:12:15:1d:4e:60:30:69:29:d2:a5:a0:34:40:55:
         23:6b:c5:2c:e6:e5:ce:f2:7f:23:2d:a5:22:de:b6:e4:85:36:
         12:90:ab:df:30:13:86:be:c9:ad:3c:b1:af:80:51:44:51:cb:
         68:37:63:7b:8d:e9:85:a7:29:e5:98:09:35:d7:4d:5b:13:88:
         1c:15:7b:b5:d4:91:e5:92:fc:93:19:b6:be:38:05:45:a0:18:
         62:7b:85:ce:4e:fa:26:f5:d5:b4:0d:bf:1b:de:82:8f:fc:3e:
         da:95:a6:ce:c6:15:05:45:22:01:7d:29:0f:cb:7b:1d:53:cd:
         b2:0b:5f:06:de:b0:78:3e:13:20:dd:31:ff:2a:0d:51:34:a7:
         0d:ea:c6:8c:de:56:08:34:61:da:a0:c2:a6:c0:00:ce:f0:51:
         84:c4:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:14 2025 by rpki-client