Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa
File:                     29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa (raw, json)
Hash identifier:          6zNtCBkCsDYYDwNbtJIaPgltoXStyKi70YBaANs89DM=
Subject key identifier:   6A:A6:41:96:03:46:9E:59:43:37:A1:D8:45:C4:D1:BC:5C:62:9F:0D
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A7FE094D7A8E89548E03653C0
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     931
IP address blocks:        64.112.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:94:d7:a8:e8:95:48:e0:36:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=27b96fc4-1f75-48b4-9fa4-4a63e9640768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:54:6e:8f:08:f3:e5:19:13:ca:fd:ce:16:
                    53:73:45:03:9d:6c:7a:b3:a3:9c:94:9f:64:22:ac:
                    c3:91:73:23:90:cb:c8:6f:29:c8:dc:1e:10:17:94:
                    9b:18:40:44:d5:4c:87:1f:8f:9c:1d:7b:af:41:ec:
                    3e:70:73:58:fa:ab:e4:48:24:4e:d6:ed:02:50:76:
                    f7:91:fb:34:e3:43:9c:a9:23:c5:7c:e8:4c:c1:ef:
                    23:67:d3:83:87:fb:22:73:56:4c:7f:69:f4:ab:54:
                    50:ec:9e:24:a4:96:d1:99:14:05:cc:ff:f5:1b:e7:
                    c1:62:6e:06:88:d0:65:9f:fb:77:a7:c9:06:f3:35:
                    31:7d:08:d9:f7:b8:c2:41:5a:4f:d1:c5:d0:9a:95:
                    4b:da:f4:af:73:60:72:bd:97:1a:52:07:7b:e8:61:
                    9b:80:80:1c:4a:bb:d2:b3:fb:00:a8:8c:af:11:c2:
                    3a:d6:64:38:42:af:69:27:1b:d8:9e:93:1d:98:10:
                    80:81:76:da:39:e8:3e:15:ca:76:25:45:37:1a:3f:
                    84:e8:71:f9:81:72:e7:9c:66:ed:ba:e2:97:0f:61:
                    08:81:b3:68:fb:a8:cd:57:9a:7e:a2:95:9b:ef:28:
                    f4:4c:1e:1e:0f:2f:46:f0:35:92:a2:e8:4f:0e:32:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A6:41:96:03:46:9E:59:43:37:A1:D8:45:C4:D1:BC:5C:62:9F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8e:47:af:0a:51:d3:73:74:58:cf:4a:3c:29:99:85:67:cb:
         08:28:36:ca:49:40:6d:7a:98:8e:a1:aa:91:88:ae:7b:4b:90:
         9f:a5:74:d1:20:69:76:ab:77:36:ac:eb:88:6a:62:4a:5a:6a:
         c3:bc:90:de:9a:cd:bc:45:fa:27:07:23:dd:76:f4:ce:73:ad:
         2c:02:dc:eb:3c:93:e8:1d:3e:1c:ff:19:54:be:64:bf:03:df:
         86:f6:ec:84:f0:8a:0a:a3:1c:d4:ac:2b:3d:2e:cc:de:28:c5:
         fe:63:9d:b2:2f:dd:48:2e:52:4c:38:bf:aa:85:4f:5e:41:a5:
         da:09:7a:ee:dc:5a:d7:fc:c8:23:49:dd:78:57:53:6f:43:c5:
         2b:bc:4d:5d:f9:16:4d:95:f8:2f:b1:b1:20:73:4c:3a:db:a7:
         c6:f8:3d:7e:ea:e0:06:1a:ae:b4:28:63:51:eb:72:f6:ab:b0:
         80:ae:e4:c9:99:a2:3e:7e:3f:7e:c7:d1:82:bd:05:9a:14:9f:
         fd:f8:89:7b:95:55:d4:64:57:68:c5:35:8e:ed:1c:79:19:5f:
         8f:63:46:a6:8a:e3:5c:45:97:92:80:9c:53:f2:f4:95:e2:f4:
         b6:13:d5:e5:6a:d1:fd:57:da:4f:e2:71:44:a4:a2:da:a2:12:
         b3:39:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:08:48 2025 by rpki-client