Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7eb4e176-77e0-3dcb-b587-86e31f618883.roa
File:                     7eb4e176-77e0-3dcb-b587-86e31f618883.roa (raw, json)
Hash identifier:          Jhc96Gya6TUBLPvyjgRqWshZTGPlWfvKYgqTujO1P1w=
Subject key identifier:   0A:DE:49:2B:4A:0D:3C:D9:C4:2E:88:CA:A4:9B:2A:B6:32:45:CF:B9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584ACF710EF331AF2B0AD2E37780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7eb4e176-77e0-3dcb-b587-86e31f618883.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     401742
IP address blocks:        64.71.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:0e:f3:31:af:2b:0a:d2:e3:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=b74f9f86-4831-4504-809d-1ef99e5539de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ec:bd:5e:a0:08:08:ef:38:9f:d0:7f:fa:df:
                    f0:15:df:3d:cb:c1:d1:af:ed:53:2f:ae:e5:9c:1f:
                    6a:ea:ce:58:87:6e:0f:09:62:8e:d3:3a:d7:89:88:
                    9b:37:a8:79:f3:71:c1:5b:36:7e:a0:ee:ed:9e:77:
                    fa:38:96:76:cc:62:03:84:3f:77:b3:7d:05:ba:12:
                    26:76:8f:4a:9a:8a:0c:f7:6a:3d:2a:21:16:ad:97:
                    d4:97:a0:b1:b4:57:ba:53:21:1d:ef:52:61:22:a1:
                    62:07:b1:3c:ed:70:c7:0d:8b:65:c4:d9:5e:99:65:
                    96:72:61:12:4d:24:b4:24:85:c0:c0:d9:31:60:67:
                    e3:29:bb:19:53:72:e3:bf:fd:3b:1f:97:15:78:ad:
                    e8:3a:8a:12:17:20:10:3b:61:34:ce:9e:9c:f8:86:
                    b5:b9:8d:77:6b:ae:7b:84:81:f3:d0:17:1b:1a:10:
                    f9:bd:54:46:68:bd:3d:3f:25:4d:5e:fc:1f:53:65:
                    be:23:2c:5a:f7:27:84:7f:95:20:b3:a9:cb:73:4f:
                    6e:a0:4b:42:71:56:22:c0:31:89:1d:e3:33:c3:f9:
                    4b:97:6f:94:be:05:d9:29:73:6d:bc:38:0a:72:44:
                    a0:49:1e:e4:53:cf:81:ed:de:03:c0:94:c5:75:a1:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DE:49:2B:4A:0D:3C:D9:C4:2E:88:CA:A4:9B:2A:B6:32:45:CF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7eb4e176-77e0-3dcb-b587-86e31f618883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:38:3d:e9:13:f9:76:a5:97:47:80:f7:67:e7:07:fa:ef:9f:
         be:d8:03:e8:0c:7d:ba:0f:9c:bd:50:ef:98:39:ee:fc:78:91:
         57:a2:d7:e3:7e:c4:15:b1:aa:52:ce:5c:27:7d:a2:48:69:e7:
         35:9d:75:10:57:2e:23:1d:0e:b1:1d:f6:7f:45:60:97:2b:fd:
         c3:b3:e2:ae:32:3c:c7:81:4f:32:75:24:c0:4c:ce:06:c9:be:
         69:1b:51:77:c2:1d:ae:8b:cd:01:f6:9b:bd:55:b8:67:37:b3:
         61:22:bc:c3:4d:dd:0b:72:a7:fa:ed:3e:12:90:cf:10:2a:9f:
         dd:69:1a:41:cc:63:86:c1:3b:89:3e:5f:3c:43:6d:6c:ec:94:
         fd:1b:71:98:89:79:88:13:d9:53:30:bf:92:91:77:bb:4c:b8:
         74:25:ba:6d:db:dd:c9:6e:69:66:7d:6b:9b:a8:79:b1:81:ca:
         e4:cb:9d:d2:25:e1:f7:af:24:92:56:b3:09:e3:00:f1:65:d3:
         07:86:02:86:37:94:60:6f:76:9b:b8:fc:21:b2:a7:51:96:c4:
         8e:7a:8c:74:88:d8:42:d2:ff:9b:3a:11:b3:65:d1:0c:6c:5d:
         72:4c:d4:85:75:e6:3d:3f:a1:2f:e3:7a:b7:ca:41:6e:b6:14:
         ec:6a:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:14 2025 by rpki-client