Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d8d06444-9d5b-387b-a943-41304f3a690f.roa
File:                     d8d06444-9d5b-387b-a943-41304f3a690f.roa (raw, json)
Hash identifier:          23Plq/IN0CMv11HhE1qkrbeApWTdAoJcbxhEKzC8pg4=
Subject key identifier:   35:02:44:97:16:47:9D:B5:57:56:99:BC:02:5B:6A:8E:30:17:D1:F3
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F43285849E654FA53BA132C5DF938B000
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d8d06444-9d5b-387b-a943-41304f3a690f.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     36832
IP address blocks:        64.112.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:fa:53:ba:13:2c:5d:f9:38:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=7b53dad4-0c21-4748-a493-68f7fa31f64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:a8:4b:fe:ee:74:89:8e:9f:b9:2d:9b:4c:
                    e6:81:85:16:f5:07:83:c6:6b:ff:e9:f7:14:73:b8:
                    80:77:9b:40:89:72:83:c8:67:fb:1d:37:fe:46:9d:
                    e8:ea:21:f0:d1:29:86:3b:ba:c4:a0:e3:14:a7:a6:
                    10:1d:93:15:af:fc:ad:ec:09:90:94:78:85:79:c3:
                    bf:bf:f0:a7:8d:51:67:cc:8b:57:05:d5:33:25:1e:
                    35:82:7c:f3:92:2d:64:a2:99:bf:55:66:75:47:5a:
                    cb:65:ec:59:89:88:54:5b:74:bb:15:98:93:5d:a8:
                    17:0d:85:ab:78:4a:a6:f1:c8:5d:7d:e4:7b:6b:9f:
                    ff:45:53:7a:93:0d:28:94:71:73:e3:9d:94:97:c1:
                    b0:3c:0f:bd:3a:6f:d6:27:3c:c4:ce:0c:d3:36:df:
                    d8:07:d5:61:4d:11:c2:86:d5:26:84:e8:f6:33:c5:
                    40:de:fd:e0:67:96:a0:c1:1b:e5:24:a5:4f:a3:93:
                    b9:9f:ac:ae:75:0e:bd:5e:6b:11:bf:a7:14:7a:ae:
                    0e:ca:0c:b6:5c:56:1f:69:1a:b1:e4:98:ac:29:33:
                    34:bb:c8:d4:44:c3:8a:ac:92:73:02:c2:f6:4b:74:
                    06:1a:f0:a5:c8:d5:39:4d:e5:f8:dc:8d:55:b9:fb:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:02:44:97:16:47:9D:B5:57:56:99:BC:02:5B:6A:8E:30:17:D1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/d8d06444-9d5b-387b-a943-41304f3a690f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:de:8a:22:45:51:cc:1f:16:b4:7d:ae:e5:b0:54:b6:c9:
         71:a3:80:81:01:ba:5a:1e:7a:53:1d:f0:e5:09:5d:b8:76:37:
         c9:1b:52:67:0d:a4:dd:22:01:ca:11:ee:99:50:d2:5f:ec:4d:
         a5:8c:09:71:fb:84:f2:1a:af:7a:cb:ce:4b:c7:8d:99:a9:d6:
         22:89:54:79:cc:d1:51:44:38:7f:44:8a:11:a6:d5:14:af:d4:
         45:81:56:62:52:47:79:55:32:32:60:05:1b:48:19:c3:94:13:
         35:30:78:b4:05:fa:ab:f2:bd:6d:24:b9:69:1a:77:71:38:ff:
         cf:f6:6a:d0:31:65:87:59:29:aa:f6:23:11:f8:44:a7:3a:72:
         a1:fc:78:44:dc:71:9b:e3:b3:05:07:95:b2:eb:42:ea:fd:2b:
         02:67:cb:9a:78:05:0a:be:eb:f1:fe:27:43:cd:1c:bf:cf:10:
         14:14:ad:1f:df:47:6a:c3:10:64:d3:42:ac:2c:b5:ba:e9:19:
         f3:c0:c9:79:a4:da:8a:06:d1:5d:41:a0:c0:e3:22:fa:00:dd:
         9b:6e:bf:2d:71:8e:f7:79:3e:6d:59:58:24:55:b8:d2:e2:fa:
         1c:cf:38:bd:e6:54:39:18:26:43:58:51:f7:90:be:ba:82:6a:
         9c:d2:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:37 2025 by rpki-client