Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/42ead1c1-7530-358c-9d67-39d6110745d1.roa
File:                     42ead1c1-7530-358c-9d67-39d6110745d1.roa (raw, json)
Hash identifier:          V5gCoWniKbIVZpV2NL+QbUt2EaqyuBXXHdXD3mOuNUo=
Subject key identifier:   D9:D9:BD:5B:C7:23:06:E1:41:30:3B:8F:E2:8B:A2:0B:61:03:01:DE
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F4328584A4E5C7619F9E49153DC4C8E80
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/42ead1c1-7530-358c-9d67-39d6110745d1.roa
Signing time:             Wed 25 Jun 2025 07:20:07 +0000
ROA not before:           Wed 25 Jun 2025 07:20:07 +0000
ROA not after:            Tue 23 Sep 2025 07:20:07 +0000
asID:                     26286
IP address blocks:        64.112.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4e:5c:76:19:f9:e4:91:53:dc:4c:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Jun 25 07:20:07 2025 GMT
            Not After : Sep 23 07:20:07 2025 GMT
        Subject: CN=f94fcd7d-dbf5-44d5-bade-f02f36c03898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:49:38:e4:ad:f0:83:46:30:2a:9c:65:be:a2:
                    5c:4b:9e:e8:35:34:1b:20:27:f8:d6:c3:b3:18:24:
                    11:ad:7a:6e:c2:3f:8b:84:3e:4b:72:92:5f:9e:0d:
                    85:0b:57:d1:b9:c7:e7:b1:d6:0a:66:76:98:c0:e4:
                    fb:3f:59:52:d2:df:03:97:57:bc:84:e5:85:a0:f7:
                    ef:b3:ef:71:dd:89:50:cc:48:22:ce:ed:e6:6e:e2:
                    a6:89:aa:b3:3c:c9:27:2d:00:81:52:72:03:62:63:
                    7f:b2:da:f1:00:c6:a4:64:3e:e4:7c:2e:b8:3a:6a:
                    b6:05:b0:ec:a9:b6:b9:aa:1f:e2:45:f7:12:28:79:
                    0c:14:a9:2b:23:3d:58:b7:41:d6:42:c2:5c:8a:d9:
                    11:f2:35:ae:56:ff:52:5f:19:49:ea:88:d7:0b:6b:
                    54:e8:64:fa:1c:22:6c:6c:40:69:5e:0c:19:9f:8c:
                    88:5c:47:aa:3c:cf:84:93:02:1e:b7:f3:71:f6:2b:
                    15:32:b8:17:41:83:eb:c6:a4:49:f5:b5:19:8b:00:
                    07:7f:40:14:ca:cc:63:1b:e0:43:7c:00:b1:e4:bc:
                    05:10:74:f4:e1:fc:27:23:4b:58:51:56:de:38:b1:
                    33:80:c5:b8:d7:b4:56:f6:41:0c:24:67:27:bd:d7:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D9:BD:5B:C7:23:06:E1:41:30:3B:8F:E2:8B:A2:0B:61:03:01:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/42ead1c1-7530-358c-9d67-39d6110745d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:9a:32:9b:da:a9:18:35:26:3c:e2:aa:db:6a:2b:11:34:
         48:df:71:f1:f7:0d:5d:b9:b1:fa:ac:de:5d:22:09:ec:f4:a1:
         f3:be:a5:7a:1b:d7:1d:c1:26:ee:2e:82:cb:9b:2c:fe:d8:59:
         ed:ec:e9:72:06:7d:37:d7:9d:69:95:d7:bc:ed:52:3a:bc:e7:
         f7:76:0d:45:79:e0:eb:32:6e:4e:cb:7f:d4:b4:6b:74:7a:36:
         06:cb:91:72:25:7e:5b:fd:98:3c:82:89:fe:4b:5f:ae:e0:27:
         35:6d:aa:e2:7c:07:ed:e5:57:f5:ab:64:48:d7:3c:a7:e9:25:
         d2:c8:e5:a0:2f:2b:6e:ba:15:59:dd:d4:03:1f:c4:3f:dd:ff:
         8d:57:a8:e2:c6:93:bb:bf:32:a1:70:75:74:66:59:77:07:a7:
         af:50:61:fd:98:d0:31:9a:d5:13:44:03:21:36:ba:1f:7f:50:
         85:55:5c:df:a8:d5:ad:e0:b9:5f:75:4e:b9:85:ac:d9:f1:f4:
         9f:87:d4:b2:c0:bb:1c:56:88:52:16:6e:d7:b3:d3:c5:5e:95:
         f5:43:64:d9:e9:0b:ea:8f:32:92:a4:ed:9a:29:ba:bd:f1:e1:
         15:6c:4a:2d:dd:73:6f:0b:dc:e0:b5:4d:67:44:61:59:a3:57:
         13:71:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:57:51 2025 by rpki-client