Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa
File:                     be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa (raw, json)
Hash identifier:          K44aOSS7J9vlA+TDsQDtt93bI5jKzsjxOodBslAYZsY=
Subject key identifier:   8C:8D:E3:64:8A:C2:EC:CA:B0:A8:A7:AB:02:C6:0C:61:5C:EE:5E:62
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584A51D06DFB4CE4386BD583E480
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     393336
IP address blocks:        64.40.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:6d:fb:4c:e4:38:6b:d5:83:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=36c63e5b-a995-4aed-8cfc-1f04a0c5b02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:c1:89:4e:65:a4:da:dd:df:16:5e:85:89:
                    3a:37:b3:78:5f:23:a2:64:d9:5b:3f:1c:90:1b:56:
                    8f:1f:fd:c4:ec:44:e9:5b:fc:d6:f0:bd:97:b1:88:
                    d5:dc:44:f5:a5:37:b7:29:22:f7:1d:7e:01:01:c5:
                    3e:73:f9:ad:fb:ac:97:97:e6:f1:e2:59:33:20:bd:
                    45:9a:f5:0c:75:10:71:ca:45:24:5d:b7:36:e6:8c:
                    33:94:16:34:c0:e7:9f:64:3d:e0:5c:de:0e:af:5e:
                    06:82:97:b1:b9:de:f1:19:b6:b5:20:48:1a:df:35:
                    4b:aa:0d:2c:d7:4d:60:d1:19:4c:df:6d:50:ed:4a:
                    91:c0:fb:0b:31:a3:39:33:8c:38:13:97:23:c9:23:
                    46:56:9d:eb:85:0f:4c:d5:dd:04:fd:75:8d:43:8a:
                    a6:46:56:32:c0:31:8d:a1:7b:dc:17:91:3a:75:83:
                    76:ac:78:25:b7:76:47:46:c3:ca:b6:b6:2e:6b:1b:
                    c5:9d:13:5e:ac:26:7e:dc:5a:8c:ce:5a:16:91:7c:
                    92:6f:e8:8f:d8:3e:e2:f4:b9:04:bd:e3:1c:5b:67:
                    1a:3e:e6:f4:f8:fa:cf:cf:11:22:86:66:ee:0f:59:
                    29:20:3f:84:c9:0c:c2:d8:42:d0:13:77:56:00:2d:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:E3:64:8A:C2:EC:CA:B0:A8:A7:AB:02:C6:0C:61:5C:EE:5E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:33:5f:44:fd:bd:9e:60:4f:ee:1a:6e:0b:4c:43:62:30:26:
         bb:67:90:63:3b:2c:cd:e1:e0:df:79:be:c0:26:fb:3f:54:79:
         f3:43:1a:c6:30:0d:73:29:6c:9a:26:c8:71:17:fa:5b:10:fc:
         28:3c:f3:7a:00:cc:a9:cd:c5:43:b3:97:39:7f:3a:d2:bd:aa:
         e3:e4:ae:e1:cf:46:0c:eb:2b:f8:32:c0:a3:7c:5b:0e:1b:87:
         f8:b2:c7:42:e3:97:d6:43:e2:1f:f3:a9:39:ae:ac:5e:b3:a8:
         1f:17:69:fa:96:33:79:3f:99:f5:73:ad:0f:8e:00:40:44:91:
         09:7e:58:b4:86:86:c6:c5:6e:c7:6d:79:19:53:17:44:b4:e4:
         4c:4d:13:dd:56:ac:17:cc:ff:ca:30:47:ff:93:3f:bc:81:37:
         5b:dc:ba:8c:a3:f7:8f:43:b5:c7:83:6b:34:3b:5d:29:ef:d4:
         0f:6a:3a:c1:b9:e5:28:00:99:24:99:d8:7f:48:2c:56:92:c4:
         17:6b:b3:71:24:cb:f5:13:1d:18:e6:b9:2a:18:33:e6:0d:d4:
         f6:b1:1b:60:b4:73:bf:32:91:9b:09:0b:e2:6f:54:d7:cf:36:
         61:19:f8:f5:6b:d2:a9:3c:f7:c9:3c:cc:73:68:9b:af:b0:7a:
         d7:68:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:58:53 2025 by rpki-client