Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/07af3803-4603-394e-91de-73689d9c1f0a.roa
File:                     07af3803-4603-394e-91de-73689d9c1f0a.roa (raw, json)
Hash identifier:          byvik6A+88cLVeAtKmBplR0h1gHF+4Go4RTbSbZ7UGA=
Subject key identifier:   7B:AA:A3:62:3E:31:58:28:D7:C3:1D:2F:E8:F4:C8:88:A8:E5:34:21
Certificate issuer:       /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial:       010D0C9F4328584A655B3440414FAD821C035680
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/07af3803-4603-394e-91de-73689d9c1f0a.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     20091
IP address blocks:        65.254.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:34:40:41:4f:ad:82:1c:03:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=b9b65792-046e-4809-9709-e2443a20466e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:de:f3:b2:8b:49:37:ed:c5:19:9b:67:fc:6c:
                    b7:37:d9:96:2a:88:5c:6f:ed:1c:50:32:db:01:ee:
                    56:b4:8d:40:7c:db:8a:cf:dd:96:60:58:06:4c:33:
                    09:57:56:0d:11:c6:99:26:4c:ac:73:fd:65:8d:c9:
                    f3:48:45:55:0d:ac:f7:8d:68:a0:b8:2c:00:ec:17:
                    66:fd:be:09:b1:2e:4d:ed:18:62:0f:6a:c5:39:e3:
                    16:d1:a5:50:6d:45:a0:9d:91:bf:e9:3e:1d:b6:e2:
                    94:43:ab:30:18:bb:0a:46:e4:f9:13:d8:90:6c:63:
                    ab:0e:fb:90:bf:2b:8f:db:19:4c:8f:b2:f5:75:9c:
                    d4:c9:77:1a:19:70:a5:58:74:c8:07:8d:59:da:83:
                    e2:b7:54:1f:ac:fd:96:6a:2d:22:03:02:5a:ed:6a:
                    58:dc:93:96:49:de:40:a7:0e:ca:58:fb:79:54:b6:
                    f4:5f:a8:ef:94:5c:0f:ff:c0:10:4d:e4:14:29:68:
                    14:a7:c7:42:d6:ec:b6:95:96:02:77:32:87:08:0a:
                    20:a7:07:a3:bd:ee:58:d7:21:6a:84:44:c2:c7:6b:
                    27:45:7b:93:e9:84:30:19:4a:0e:b7:52:7f:89:24:
                    b9:5b:b1:e6:cb:44:09:14:96:4a:da:2b:ff:01:fe:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AA:A3:62:3E:31:58:28:D7:C3:1D:2F:E8:F4:C8:88:A8:E5:34:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/07af3803-4603-394e-91de-73689d9c1f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c2:58:88:09:e8:02:42:3d:36:9a:34:bb:74:b3:22:a1:fe:
         37:7d:70:a2:6e:f6:03:84:f4:c0:36:76:02:ab:9e:6d:c9:a5:
         fa:ae:a1:c8:e0:7c:50:d5:a3:8e:8a:92:64:88:60:7a:6c:0e:
         63:40:c4:d3:f5:b6:91:73:ae:a4:74:bf:1b:dd:c1:59:a9:79:
         96:2d:89:6c:6f:6e:46:d1:d3:fc:db:50:92:fb:d5:d6:33:00:
         15:b1:26:e4:c5:27:f2:e9:93:53:32:05:2e:e7:c3:40:b9:1d:
         97:05:59:7b:1c:87:a5:f4:1d:7e:d9:f5:e3:47:aa:9f:79:2e:
         1b:f4:e2:97:28:d2:56:8d:ef:2a:5a:7e:fe:ae:22:a9:f6:50:
         54:a2:d7:9f:92:ab:41:10:e2:f1:ad:14:ed:8c:22:8d:27:3c:
         a0:d9:3f:b2:70:8c:51:24:cf:2b:47:60:d0:85:d5:57:0a:de:
         9a:71:e1:a0:1a:7d:0c:66:5c:21:16:cf:67:f6:2c:d0:7f:d7:
         61:09:be:4b:29:1b:7e:87:ec:a9:51:94:a6:0e:4a:11:44:91:
         e0:9a:91:18:8b:e5:25:34:b5:dc:a4:38:b5:35:86:eb:9f:6b:
         c7:69:60:19:34:18:56:b4:e0:b3:ab:25:91:f3:5e:39:53:5c:
         c0:5d:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 21:33:34 2025 by rpki-client