Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa
File:                     4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa (raw, json)
Hash identifier:          iPpSu1ruSK88WzudujIScOe3vQgpiYhAhMCxUY1tzzI=
Subject key identifier:   60:54:AA:36:06:67:D0:EE:76:B4:C0:16:7C:E7:31:9F:10:18:D8:F9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7780825733910EA340B1DC00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        64.114.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:82:57:33:91:0e:a3:40:b1:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=f0ec7a54-6548-4c83-b959-456a8f9ea877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:4a:7a:d2:3a:49:78:a0:66:b9:ac:25:54:
                    bd:ac:46:b3:55:83:21:9f:f7:57:22:d3:80:2d:00:
                    b3:5c:29:c1:1b:4c:af:a9:7a:22:79:d6:19:7c:e1:
                    08:3c:cd:6e:96:40:d6:39:cd:e8:f9:28:24:64:28:
                    98:ae:26:93:39:64:47:19:05:60:9b:55:7b:64:f2:
                    7b:8f:28:f0:bd:3b:f2:a9:10:dd:de:de:8e:42:d7:
                    e5:93:b4:53:1e:18:97:40:44:65:bd:0d:36:77:91:
                    20:c9:6f:1b:4a:d0:8f:39:c7:0d:33:04:71:e3:80:
                    bd:2c:60:a8:cc:84:6e:86:67:ea:be:7b:86:31:f2:
                    4b:4f:4c:6c:e6:2d:61:a9:8e:be:2c:7b:96:f5:bb:
                    ec:19:3e:71:b5:f9:b5:cd:83:6a:e1:f5:d9:cf:19:
                    6b:8e:6e:af:a3:05:7f:aa:66:66:6f:c7:b5:6c:55:
                    20:3c:fb:c2:2d:53:7d:21:e5:fa:60:f2:42:2e:ff:
                    dd:a6:99:b5:69:c5:27:64:37:17:6b:fc:0e:dd:27:
                    1e:3f:2b:19:55:62:78:c0:2f:3e:c0:38:9f:2a:13:
                    d7:ce:39:b6:58:dc:ce:3a:e3:7c:62:d3:9c:ed:36:
                    55:51:b6:f1:9f:47:4e:a0:cd:cd:47:4b:41:de:fe:
                    45:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:54:AA:36:06:67:D0:EE:76:B4:C0:16:7C:E7:31:9F:10:18:D8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:dd:77:2d:d1:15:c4:26:6e:5b:d8:f4:71:08:94:0a:ad:3c:
         38:46:90:e7:97:d0:58:49:e5:6a:8a:e5:28:18:8f:72:fe:2f:
         a6:50:07:66:39:8b:04:2f:7c:81:40:a2:b1:9d:0a:de:ec:8c:
         3d:5b:9e:ed:f1:66:4c:91:1c:9f:d8:48:b1:84:58:9d:5f:ea:
         aa:a4:72:98:9c:0e:31:ee:d9:22:01:95:ab:53:50:2e:71:e5:
         2e:78:51:91:0a:d5:9c:51:10:3a:44:37:33:bb:a1:ce:40:45:
         7b:9b:a2:53:d6:02:b1:bd:47:27:7d:cf:2d:7b:bc:cd:ce:e1:
         61:26:b8:0e:7a:d4:01:bc:3f:47:83:8d:eb:47:ee:eb:cc:98:
         3e:33:29:fa:97:71:c1:32:38:7d:02:f8:2f:0d:ab:25:36:7b:
         0c:81:93:a9:b6:65:6c:dc:f6:eb:64:61:59:8a:5d:a4:a6:0b:
         67:39:69:01:bd:e8:13:62:f6:73:ef:c6:1e:09:d8:8a:86:98:
         41:84:cb:28:ee:c4:45:60:bf:c3:96:df:0d:1c:e1:74:21:2c:
         ac:0e:bc:9d:c9:c3:70:7b:28:02:78:ac:7f:91:f5:65:3e:86:
         08:33:dd:b0:dd:6e:19:b4:d2:7a:07:d8:57:fb:ff:0d:de:f0:
         a5:37:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:27:19 2025 by rpki-client