Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/f4f11ccc-96e3-3cf2-b098-334fb96b9cb7.roa
File:                     f4f11ccc-96e3-3cf2-b098-334fb96b9cb7.roa (raw, json)
Hash identifier:          G1eAu6F0O9FzzyqtD9jG7aqkqKsjLD3XLjatcVrH+oU=
Subject key identifier:   90:FF:01:FF:AC:4C:26:1E:05:68:FD:1D:74:A1:74:2A:62:65:CF:B8
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584A89A62183B5447B49BC8CF7C0
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/f4f11ccc-96e3-3cf2-b098-334fb96b9cb7.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     16713
IP address blocks:        64.113.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:21:83:b5:44:7b:49:bc:8c:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=060c7ca3-575b-4ea0-b3be-8ca865769b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:bb:29:0e:2e:0b:28:f9:58:90:ce:f7:f3:
                    9b:69:9a:20:34:64:59:5c:9b:df:95:21:ea:ba:f0:
                    e7:36:b4:22:10:24:60:12:9a:e3:7c:f6:f9:3e:bb:
                    8e:9d:c7:de:7c:e5:57:29:f0:c9:b0:99:69:31:aa:
                    fc:77:b5:fe:56:e9:66:6a:c4:fa:83:a2:60:95:c2:
                    d0:fe:33:6d:62:16:1a:74:e3:ca:67:78:13:e3:f0:
                    cb:3a:fd:d3:28:d1:97:48:e8:9d:a1:8d:36:06:64:
                    45:e8:e0:9c:73:b2:f1:43:8a:3a:5d:6a:aa:56:34:
                    0e:a0:45:a0:b5:01:d7:d6:e8:a3:8e:a8:78:98:3a:
                    73:dd:0e:14:01:a5:c1:df:99:89:2c:39:49:e9:94:
                    94:b1:16:8b:e0:c6:ec:b9:ab:dc:e8:f1:51:1e:14:
                    7c:da:29:e7:37:1a:ae:2e:07:01:0f:df:b0:1b:84:
                    e6:84:3e:b3:27:ce:37:bc:fc:94:b6:98:5b:4b:45:
                    97:6c:61:a0:f2:51:77:bd:68:54:99:15:05:03:b1:
                    46:4e:b1:29:46:d7:53:8d:46:77:38:0c:58:75:cd:
                    f4:e2:b0:59:0d:94:85:80:21:d5:ed:4a:ca:c0:82:
                    78:cd:e9:87:07:12:07:ee:bf:e5:6f:26:80:0e:5c:
                    f8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FF:01:FF:AC:4C:26:1E:05:68:FD:1D:74:A1:74:2A:62:65:CF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/f4f11ccc-96e3-3cf2-b098-334fb96b9cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:6e:94:8a:9b:ca:e5:5e:3d:be:62:4a:df:15:b8:74:fd:
         f7:ca:fd:e1:59:44:1a:9d:2d:dd:47:89:fd:fa:92:f6:0e:7f:
         01:31:d8:9d:4d:c6:f5:d8:85:bc:c7:9b:e2:e1:70:50:b7:d3:
         97:eb:18:88:bd:e3:5d:76:e2:ba:b7:5c:02:e5:87:35:02:fc:
         b0:35:3f:e7:d4:54:c3:82:37:68:46:2b:d6:34:d3:6a:be:5e:
         61:f4:2d:32:ca:83:dc:e1:1e:7c:1a:5d:ed:58:e0:c9:b2:dd:
         40:ff:fc:5f:8c:aa:d5:c9:11:47:71:ec:ef:c3:87:c5:97:61:
         90:c0:7f:05:e2:b7:de:ef:0f:71:5c:71:d0:ff:2c:49:94:62:
         03:08:ab:74:5a:f4:be:84:10:7c:c5:a4:bd:b4:01:e0:e2:8e:
         c7:32:27:2d:1e:01:f7:09:9c:2b:88:a0:cc:dd:4e:13:79:48:
         cf:1a:d1:52:7d:fb:12:7a:2b:85:ff:b7:10:9c:0c:c9:f4:58:
         ab:82:b2:e6:3d:4e:db:6a:0c:b8:df:4d:fc:a7:03:fd:57:c0:
         8d:08:3f:07:95:ed:8e:df:ca:e1:fd:89:51:7a:df:1f:0a:e1:
         ac:ff:ab:81:f9:40:a5:f5:22:28:e7:05:1d:2a:82:c4:8d:92:
         47:83:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:11:21 2025 by rpki-client