Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/66bad564-5c6b-33f7-939f-14eca8152c93.roa
File:                     66bad564-5c6b-33f7-939f-14eca8152c93.roa (raw, json)
Hash identifier:          vt0cgvSDdpm5XIBqj5UdNHeE+iS59ZMKHylHEalV0nE=
Subject key identifier:   CE:FA:7F:1B:E1:DF:0B:D8:45:64:33:3C:EB:4A:09:B7:98:52:A8:61
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F43285849FCAA7C0AA1618DDB1787CD80
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/66bad564-5c6b-33f7-939f-14eca8152c93.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     30860
IP address blocks:        64.79.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7c:0a:a1:61:8d:db:17:87:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=6c7f2150-9b78-46d3-9df9-b602145911ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:64:a9:ca:77:12:23:14:99:5e:94:ec:28:
                    56:29:24:55:06:cc:84:0e:d9:a2:30:fc:d0:f6:c7:
                    b8:e4:23:e6:92:38:c7:da:2f:8e:28:f5:bf:55:d4:
                    08:b4:6b:35:13:22:d9:7b:49:a7:60:2d:1e:bc:34:
                    41:e8:e9:b8:89:f8:7d:d5:73:d0:8b:68:a7:52:2b:
                    39:01:82:8a:09:f0:d0:2a:a1:b9:5d:f5:af:d0:71:
                    a3:b5:f0:53:a4:f8:d8:87:9f:09:9c:e2:67:fe:1c:
                    c5:8c:6a:72:a6:87:c9:71:e9:f9:d7:04:f7:1a:85:
                    f6:72:33:70:00:ee:15:9b:8c:55:2c:2e:64:d6:f4:
                    2c:cc:fc:42:4d:b7:ba:1b:2a:2b:d5:47:e2:c1:e1:
                    45:07:64:37:1e:de:5a:aa:4b:67:be:f5:d9:c1:70:
                    0d:c2:f3:f0:94:eb:d3:29:0b:cd:b1:98:6f:fd:cd:
                    ba:89:80:57:1a:0b:c6:7b:3e:ba:c5:5f:39:ce:28:
                    fb:3b:67:b6:8b:b4:98:bb:4d:de:d8:8e:5c:52:3c:
                    ee:0b:bb:cb:b3:15:dc:64:d3:f5:61:0b:f8:9f:93:
                    ac:1e:90:c7:d7:a0:ce:b5:1b:2d:2d:91:e2:60:5b:
                    02:6e:eb:5e:32:5a:eb:8a:c6:45:58:e1:25:20:96:
                    09:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FA:7F:1B:E1:DF:0B:D8:45:64:33:3C:EB:4A:09:B7:98:52:A8:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/66bad564-5c6b-33f7-939f-14eca8152c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:8e:b2:44:77:ca:6b:9f:95:ba:77:a9:a5:6b:f6:f8:a6:d7:
         89:bc:09:d8:f6:b5:77:30:11:b9:33:13:65:88:1b:d5:24:70:
         f4:0e:c6:69:59:18:a9:a6:f1:cb:e2:e6:67:c2:47:cf:8e:eb:
         2c:9f:f1:a8:66:66:00:d2:6d:67:f4:60:ec:22:35:7e:15:2f:
         5a:a3:bc:09:e1:3d:99:35:12:ac:e0:37:27:74:97:98:36:b2:
         0d:55:3b:42:69:f2:99:d2:00:28:04:ae:68:51:48:56:93:03:
         9a:1c:65:3c:89:fb:e3:af:0b:07:e3:63:7b:fe:db:7a:5b:72:
         a1:5c:58:69:14:4e:62:ab:7f:d7:3a:3c:49:0a:fe:a3:f3:52:
         30:65:e2:0a:69:b4:7e:9a:15:f8:ff:7a:0b:92:59:b4:64:61:
         73:78:56:42:e2:c2:7e:96:2f:6e:39:9c:dc:e4:59:33:40:b8:
         53:9e:bb:3f:f5:6e:e0:27:ce:ac:12:75:2b:0e:79:69:5c:bc:
         af:fd:37:69:2e:12:1b:b5:3a:71:78:2c:6b:ec:75:49:b4:43:
         54:e4:5d:da:82:ff:ab:71:63:aa:e1:f8:78:7e:81:44:bc:b3:
         2e:fb:53:cc:ba:0b:88:d5:79:04:34:bd:30:ba:be:15:34:5a:
         04:9e:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:04:53 2025 by rpki-client