Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa
File:                     8789b761-bc71-3c11-b18a-efee96fb1b2f.roa (raw, json)
Hash identifier:          hjOpccHhFzxtN+/VMY9w8bk6xFrR74wdH1QJlS341V8=
Subject key identifier:   98:FE:65:65:4F:FB:A7:BD:C4:DF:6D:19:3E:01:A5:FE:21:BA:55:97
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A093AA27269E168F5C1D76380
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     54643
IP address blocks:        64.34.70.0/24 maxlen: 24
                          64.34.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a2:72:69:e1:68:f5:c1:d7:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=7e5ec872-2571-4442-bf66-d0a94aca2b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:c0:77:d9:f9:f9:79:41:df:bd:9f:1f:ce:
                    f7:f6:03:64:fc:72:a6:29:ed:ac:b9:5f:e6:86:e5:
                    49:f2:3f:0f:30:90:e1:a1:32:20:a5:70:f9:62:07:
                    a2:7d:cf:55:78:6d:01:db:82:e1:51:8d:2a:a6:ba:
                    b9:a9:ed:9c:7f:bc:a4:70:bc:be:8b:c7:48:c1:40:
                    1a:1a:68:1a:a9:67:65:35:e5:fa:2a:02:b8:79:6a:
                    e8:c0:d6:f0:8b:33:fd:7c:b8:89:4e:b6:6e:de:fe:
                    1e:9c:52:9b:d7:e5:0d:a1:09:b4:85:c2:34:6c:9e:
                    e6:5b:fe:88:bc:7c:29:8b:0c:7c:65:66:d0:3c:b9:
                    77:4a:d9:7b:d7:8f:b2:6d:23:8e:48:65:bb:ab:de:
                    1a:4c:be:53:6a:90:5b:af:dc:a6:96:c2:a0:67:da:
                    78:ef:41:d7:27:3e:2d:f9:3a:24:c1:7b:c0:94:5d:
                    52:da:e5:05:a6:d2:31:e3:da:bb:74:b6:d3:7a:d2:
                    8f:d4:6d:3e:3f:02:16:29:50:6a:f6:a4:ae:a5:df:
                    c8:79:cc:55:cd:f5:87:0a:f5:88:0f:1c:66:51:97:
                    67:01:77:68:ae:25:ca:c9:16:35:4c:0b:f2:0c:5a:
                    dc:b9:0f:d5:60:e3:c5:ea:77:b7:bf:4a:04:6d:a8:
                    57:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FE:65:65:4F:FB:A7:BD:C4:DF:6D:19:3E:01:A5:FE:21:BA:55:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.70.0/24
                  64.34.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:af:ec:0e:3b:41:3d:6f:2e:8e:b8:f1:9f:19:ce:6a:9e:a3:
         88:26:d3:a4:a0:87:24:af:38:33:7f:74:f1:be:6d:b5:c5:2a:
         7f:03:ee:12:8a:23:34:1b:84:ce:56:ba:a0:62:f9:66:a2:68:
         54:d6:7a:c6:e8:66:10:c0:3f:de:a6:b3:d7:cc:c5:92:3b:2c:
         1c:4b:09:f3:27:37:2e:01:e6:e6:b1:51:ad:31:84:02:9f:27:
         b0:8f:c6:57:f2:e7:b4:bd:5c:a6:69:0e:a7:80:25:91:ea:fa:
         df:ce:9f:f8:50:d1:14:45:3f:2b:c6:4d:cc:0d:69:4d:9d:19:
         ff:6b:97:d5:d9:32:e6:c2:96:a9:17:46:98:f6:d7:39:ad:43:
         92:b8:19:bf:48:ec:d0:b2:2a:67:c3:cb:b1:76:1e:b8:b1:88:
         13:d6:bd:0c:11:c0:5e:ea:95:8a:16:8c:f9:6a:a1:12:9a:27:
         a6:62:d4:df:36:ab:a7:bd:20:17:4f:35:06:2b:2d:4a:e8:c9:
         3c:54:5c:9d:ab:d4:98:7e:71:80:9c:ae:9e:a0:06:12:8a:cb:
         a7:02:ee:d2:57:fc:38:c8:4d:8b:46:53:0f:9e:5e:b9:8f:29:
         71:6c:38:1e:e8:c6:98:a2:4d:b7:53:40:52:72:e7:94:aa:4c:
         bd:6b:bc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:41:44 2025 by rpki-client