Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/512c61ca-308f-3648-8d94-4e9b144897e9.roa
File:                     512c61ca-308f-3648-8d94-4e9b144897e9.roa (raw, json)
Hash identifier:          l9Uc18vL4Y8BmrqU0beNCKFgrkJMw57PeDZowivjSpw=
Subject key identifier:   91:DD:B4:74:C0:66:B5:01:0F:61:8B:22:10:DD:AC:97:1A:E8:CF:AD
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584AFAB683DC64894B358F632100
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/512c61ca-308f-3648-8d94-4e9b144897e9.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     834
IP address blocks:        64.113.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:83:dc:64:89:4b:35:8f:63:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=7b6f638b-998b-4ac9-ad13-9370000588f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:e2:e1:f0:4b:c4:0f:df:de:bc:55:e0:a4:
                    f2:78:0c:7d:85:8e:4e:cc:54:f5:1d:87:8d:95:8b:
                    da:c7:21:01:c1:bd:91:fb:be:18:be:55:ed:8d:35:
                    1e:3d:2e:5b:85:d7:f5:87:b1:57:b4:44:8e:94:b9:
                    49:03:2a:62:e7:90:68:09:b9:de:95:ed:7e:be:55:
                    38:93:d2:c5:91:ae:0c:85:1a:e6:e9:fd:c5:45:c0:
                    dd:19:a0:25:60:82:c8:09:d1:c5:66:b1:94:f9:9d:
                    3a:61:15:35:b5:ad:74:70:c4:5f:3c:7d:a8:2b:82:
                    79:b7:ab:a1:c9:63:26:2a:86:45:d8:d7:2f:85:b3:
                    49:e3:04:96:31:34:5b:97:ac:ca:e6:9d:56:7d:39:
                    6f:e6:fa:6e:57:3b:2c:c8:27:41:de:17:f5:5c:0d:
                    47:ae:e6:e1:4a:ed:25:b6:37:47:80:c4:37:51:4a:
                    8f:2b:97:46:8b:bc:ae:3c:30:89:37:0b:74:cb:a9:
                    a1:f1:9e:c0:ec:1c:33:c0:f8:bc:05:ef:20:70:c4:
                    58:fd:99:29:e3:ca:e9:45:ff:7a:2a:31:ac:7a:64:
                    cc:93:ea:0a:52:7d:3b:0b:b4:bb:79:36:d1:5f:65:
                    78:38:64:b3:90:15:fd:2a:be:c4:65:4f:27:84:20:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DD:B4:74:C0:66:B5:01:0F:61:8B:22:10:DD:AC:97:1A:E8:CF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/512c61ca-308f-3648-8d94-4e9b144897e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ea:3a:a1:92:8b:0b:d6:12:d6:cb:74:ff:96:29:a9:b4:b7:
         eb:48:46:80:8c:c7:eb:1a:c2:4d:d8:87:e4:92:5d:08:42:08:
         69:65:5c:9c:a5:45:21:b6:48:45:fc:24:42:ba:d9:48:0d:e0:
         da:d2:26:04:d4:de:0d:0b:fc:ca:1c:08:64:4a:31:d9:ee:4c:
         b8:ff:99:91:53:53:83:4b:69:e6:96:40:34:54:5f:f0:cd:5b:
         f9:47:1f:e3:4a:e8:c8:4b:0a:ce:4e:86:91:3e:f6:d4:0b:07:
         46:05:0b:9a:cf:4e:2b:6d:a7:d4:19:25:5c:40:02:85:97:1a:
         b9:0b:1e:86:e7:e7:23:39:ce:8e:86:57:f8:dc:10:39:39:2a:
         4b:6c:34:bd:66:f5:a6:d0:0c:9c:3e:6c:2c:b6:84:bf:ca:f2:
         6b:bd:66:54:f8:90:04:00:02:06:2e:a0:47:f0:7d:af:42:ce:
         54:1d:c9:63:1d:8d:18:7c:0a:88:d8:7b:6b:ae:d5:2b:aa:63:
         e3:e0:7c:23:76:1a:54:5f:c4:3c:e1:93:2f:ce:9d:6f:ac:c5:
         b5:70:fe:8f:6a:8c:b1:c9:93:5e:e6:6b:76:bd:73:8f:57:f4:
         e7:4c:99:9a:e2:9b:48:97:87:9a:f0:6d:a8:0a:51:97:db:72:
         cc:4d:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:28:03 2025 by rpki-client