Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6b11d489-fe5c-3318-8635-526482027dc2.roa
File:                     6b11d489-fe5c-3318-8635-526482027dc2.roa (raw, json)
Hash identifier:          DEesC05u7tVMrAZTZ6LSfYfnNjsoaX0FAHR7+PAxwQ4=
Subject key identifier:   F0:C0:97:1A:4C:53:CF:94:85:63:EF:B5:4C:09:BA:33:1D:1F:2C:B6
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584A71EB4DD50741E23316100A40
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6b11d489-fe5c-3318-8635-526482027dc2.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     21840
IP address blocks:        64.113.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:4d:d5:07:41:e2:33:16:10:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=647f7247-6ccd-4b58-bb3a-b040fdb855f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:95:03:e3:9b:21:36:d4:30:0d:e3:a4:0b:
                    ba:2f:6d:d2:35:1f:59:a9:97:1a:37:8d:93:e2:c4:
                    29:94:62:1e:d7:6d:c8:da:5e:71:f2:cf:66:be:c3:
                    23:9f:62:69:b9:bc:a8:5e:7d:24:a0:38:89:ef:0d:
                    3b:ad:4c:dd:08:74:d9:6c:1d:62:5f:a9:d5:f2:15:
                    20:23:b5:59:d7:7e:51:89:51:53:c6:17:9a:f7:ed:
                    2b:f7:f2:f0:6e:8c:97:95:42:40:b5:0b:76:ed:c0:
                    fe:8a:49:0c:98:b8:aa:7b:e6:ac:77:b5:f7:89:d2:
                    f3:c5:2f:60:62:77:77:46:81:e8:33:a6:8f:b1:2e:
                    6f:82:14:49:41:73:30:c3:71:35:51:fc:00:0a:e1:
                    43:46:36:62:c4:61:94:41:ce:aa:eb:df:43:58:66:
                    3d:81:74:0c:a1:31:00:a0:a2:5f:a2:cb:59:d1:48:
                    25:47:57:8d:71:27:b4:d2:1f:43:89:82:6f:56:d7:
                    35:81:ab:a9:a9:90:18:d6:ac:5e:0f:8e:5e:d9:8d:
                    4b:57:31:61:47:47:a8:d7:18:84:0e:36:ab:fa:55:
                    be:93:1a:37:72:23:18:20:f2:23:21:1d:76:ef:98:
                    2c:4d:5d:11:85:e6:b3:15:d6:06:9c:3c:f5:24:5d:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C0:97:1A:4C:53:CF:94:85:63:EF:B5:4C:09:BA:33:1D:1F:2C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/6b11d489-fe5c-3318-8635-526482027dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:df:25:0a:08:df:08:d1:32:a8:f5:72:55:ba:62:22:01:d3:
         a1:2e:cd:38:03:af:40:5d:84:41:a8:a8:db:b4:17:1a:9e:8f:
         93:06:f5:8c:44:1a:9f:8d:1c:2b:65:13:5c:60:54:b4:06:9a:
         f0:fa:67:0e:c1:29:e9:58:56:6f:2c:fa:d3:6e:1f:3a:98:a1:
         1c:76:ad:2d:2c:4c:57:ed:9d:24:cf:a2:54:6a:e6:a7:f1:74:
         51:64:7e:e8:8e:54:fc:ce:a6:da:46:bc:d1:99:8a:e6:cc:2b:
         8b:4d:fb:f3:79:16:3a:d2:b0:2d:b5:f3:0b:47:b9:d6:71:a0:
         39:3c:62:15:1f:23:23:8e:79:33:b7:bf:57:1a:7d:54:1a:3c:
         09:70:de:0d:a3:e0:c6:e1:57:75:a8:22:56:42:2d:1a:d9:a2:
         bc:16:34:c4:e0:e6:76:fe:9b:42:34:45:80:b3:13:61:7d:82:
         17:71:bc:52:74:91:d3:cd:b2:88:a6:c2:67:e1:de:9d:12:8d:
         d4:96:44:22:93:3e:b5:9a:2d:51:05:9c:58:0d:e8:f6:e0:43:
         e0:57:6f:1d:c4:c3:50:a1:28:58:dd:ad:bc:f8:00:6a:1e:0a:
         a8:d5:1b:09:5d:c0:2d:42:ed:d7:a2:28:02:19:45:6f:a1:09:
         13:2b:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:19:15 2025 by rpki-client