Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/3f13f3ae-f958-37b6-b60a-87e8736eb1be.roa
File:                     3f13f3ae-f958-37b6-b60a-87e8736eb1be.roa (raw, json)
Hash identifier:          xLUuplQjbKjkNmcxCZR3cxxQkEgJohEuPx2TsQq+pCk=
Subject key identifier:   8F:71:3C:CE:BF:E1:F7:20:F3:72:22:10:AD:7A:11:D5:99:D2:46:80
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F43285849357073373F3A6D0A0EB41B00
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/3f13f3ae-f958-37b6-b60a-87e8736eb1be.roa
Signing time:             Sun 16 Mar 2025 16:18:14 +0000
ROA not before:           Sun 16 Mar 2025 16:18:14 +0000
ROA not after:            Sat 14 Jun 2025 16:18:14 +0000
asID:                     22351
IP address blocks:        64.88.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:70:73:37:3f:3a:6d:0a:0e:b4:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Mar 16 16:18:14 2025 GMT
            Not After : Jun 14 16:18:14 2025 GMT
        Subject: CN=577c4ce6-786e-425d-b190-1ae30a8017af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:19:bc:61:3a:62:a4:e5:33:86:7f:8e:c3:
                    25:27:aa:12:aa:8e:8c:ef:16:db:21:50:02:55:bc:
                    ac:fe:7a:1b:32:50:c4:c7:d9:42:2b:a0:b3:7f:24:
                    18:cc:e6:dc:ae:56:34:87:e9:37:0b:a6:ae:5b:a3:
                    31:48:5e:68:ce:e6:eb:33:07:3a:b5:56:a6:b0:62:
                    e9:0a:24:ce:3d:0f:c7:96:e7:9f:aa:2b:ed:85:42:
                    81:d4:db:d5:48:52:58:ed:38:ac:ef:05:00:6c:a4:
                    ca:d8:2f:57:08:be:18:1c:39:1a:c0:48:fe:0d:45:
                    7e:ff:2e:45:f0:68:a6:92:43:30:f6:11:88:d2:be:
                    42:18:ef:12:ca:66:1f:9b:f6:f1:e9:79:a2:69:f9:
                    36:31:13:9c:49:0e:54:02:a7:cf:9d:0a:a0:3c:5f:
                    39:69:c8:d8:46:c9:90:c9:a3:bb:86:06:05:0e:9d:
                    5e:6d:7c:7c:65:a7:ef:a7:73:90:72:34:19:16:d8:
                    5e:99:c2:53:d4:1e:16:13:52:f6:8d:f2:a0:ac:42:
                    0f:b9:30:1c:68:46:17:9d:f1:f0:01:44:d7:ca:62:
                    7f:18:6f:b2:e0:41:e1:26:5b:2e:bd:6c:b7:96:a6:
                    f9:06:b2:69:c8:cd:ec:6e:fe:b4:b2:71:c8:3f:f8:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:71:3C:CE:BF:E1:F7:20:F3:72:22:10:AD:7A:11:D5:99:D2:46:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/3f13f3ae-f958-37b6-b60a-87e8736eb1be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ee:70:36:e0:e8:6d:84:6c:ea:71:c5:2d:1e:cd:8e:31:3e:
         c2:43:ed:b7:09:77:b2:f5:f8:83:40:55:dd:cc:d5:22:a3:99:
         b3:73:68:59:61:89:4a:21:87:22:f8:32:14:ac:6b:5c:0b:cf:
         07:bc:33:95:07:ec:85:5d:01:4b:23:55:ce:f5:2e:a7:b3:96:
         4f:7a:e1:a4:02:a0:50:ba:72:94:d9:11:99:d1:7d:cb:48:31:
         fc:09:35:5f:68:44:47:d6:b7:e5:24:2e:82:ae:fb:3b:04:f4:
         e6:90:fb:63:4e:33:68:7c:01:8a:00:57:f3:24:6a:5a:f9:24:
         03:17:5f:6d:f2:ed:93:89:51:60:9e:d9:ba:43:07:b5:6e:07:
         aa:7c:61:d7:21:c6:b7:72:85:df:7a:ef:67:a2:7f:14:ae:4a:
         55:8c:ce:4d:91:6f:dd:9b:9e:fa:44:76:eb:cf:c6:70:b9:1f:
         8d:96:79:35:de:13:fa:eb:c0:0c:b5:59:fb:51:c0:97:d9:71:
         dc:da:b6:7a:07:24:38:df:ac:11:3a:e2:50:a4:29:83:e5:5b:
         18:6c:0f:c1:9f:de:0b:25:5a:84:97:68:17:56:7d:06:56:b7:
         f0:f0:67:32:ee:29:09:73:1b:8a:23:c4:fe:e1:06:ba:01:7b:
         c2:cd:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:15 2025 by rpki-client