Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a32daf56-17b9-3a5f-b89a-f0bad43c02b6.roa
File:                     a32daf56-17b9-3a5f-b89a-f0bad43c02b6.roa (raw, json)
Hash identifier:          qchtp9CmwdjXRii8jdk/H2XvfMjb9Hb1B1c7huoymnw=
Subject key identifier:   DA:50:74:A4:40:D2:5F:39:1F:29:5D:F2:32:13:96:61:27:E8:B3:79
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FDB8E9F2BF5AB17FDC3E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a32daf56-17b9-3a5f-b89a-f0bad43c02b6.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     63186
IP address blocks:        64.71.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:db:8e:9f:2b:f5:ab:17:fd:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=7b173e6b-5063-4faf-abb9-abd36412aa02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:d8:50:d7:00:e6:5c:91:9b:75:3d:d4:fc:
                    fc:5c:71:24:33:7f:82:73:7f:ec:f8:1f:b6:96:a3:
                    8f:a1:55:7d:ab:59:51:00:cf:57:4e:5a:43:a9:af:
                    40:d4:06:f1:2d:80:15:6c:57:5a:49:04:02:27:44:
                    03:40:a9:35:2d:e7:23:5a:6c:cc:f8:c7:2c:ca:ff:
                    22:42:63:33:bf:97:b3:a6:79:8b:6c:1d:07:13:76:
                    db:24:dd:02:8f:87:9c:51:4d:29:78:94:ac:70:ae:
                    b5:fb:90:56:c8:f8:2c:82:7a:bc:27:43:7b:3b:16:
                    57:ac:63:58:b1:f4:33:d5:6d:e6:92:2a:ae:d1:2d:
                    c7:3b:29:c8:d5:7a:36:db:ed:ee:49:5e:6e:9a:57:
                    f5:0e:6b:dd:43:b6:9f:ea:63:1c:d4:3c:04:ab:80:
                    4a:6a:ac:49:0b:01:b4:4f:aa:86:7b:72:4a:2a:a5:
                    87:12:82:18:9d:41:47:36:14:09:ae:e4:59:2a:e3:
                    23:b3:90:86:2d:0d:01:98:23:06:34:06:56:28:80:
                    e5:9f:6a:f5:1e:6d:82:59:78:82:d4:a1:60:cf:6e:
                    93:be:62:3f:24:c9:fc:7e:23:97:97:59:54:b0:b7:
                    1f:ea:0a:0a:7e:77:81:97:75:17:5a:18:cf:81:76:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:50:74:A4:40:D2:5F:39:1F:29:5D:F2:32:13:96:61:27:E8:B3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a32daf56-17b9-3a5f-b89a-f0bad43c02b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a5:b9:7b:95:c2:5e:1f:87:e2:92:ea:65:f6:5a:4d:a8:85:
         fb:81:21:88:79:28:29:73:16:bc:9b:d5:a5:8f:8e:5e:aa:b5:
         e6:db:56:49:cc:d0:fc:7f:ef:54:ea:85:2a:c4:75:54:97:f9:
         80:e8:de:47:3b:bb:df:2d:32:de:45:b9:ad:4b:13:f7:1b:21:
         87:a0:28:d1:7a:b0:49:77:6d:93:3a:f3:a5:5d:85:66:46:f8:
         e5:50:9c:3d:1d:ba:ff:1d:07:38:8a:97:f5:2c:3e:a8:e7:8d:
         cb:a9:84:ca:32:00:7f:32:19:94:3d:19:93:c6:d7:f0:9e:98:
         b6:e9:c5:cf:0b:9d:fe:2e:79:02:f8:57:90:d3:85:2b:74:be:
         d7:83:6f:f3:4e:80:9b:26:3d:0d:5f:6b:9b:b1:89:cf:dc:8d:
         60:d4:87:22:56:0f:32:e0:6d:74:07:e5:08:d7:c3:52:26:c7:
         a4:83:11:55:46:80:63:45:a7:14:f8:81:40:a5:ec:b3:20:99:
         e7:a9:07:90:45:99:3d:5f:66:ae:fe:a8:d5:c1:55:8d:d6:74:
         cf:0e:2a:10:4e:59:7e:b4:2b:15:a8:ce:6c:70:c5:52:44:b7:
         1f:53:ac:0d:4a:fd:62:55:d6:c5:39:a2:02:19:83:17:5e:7c:
         c8:c2:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:27:03 2025 by rpki-client