Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/8501162b-5976-3f78-a723-759699eb71bc.roa
File:                     8501162b-5976-3f78-a723-759699eb71bc.roa (raw, json)
Hash identifier:          5u43hqlBcQuX5UMF9VBITkN44wXcGEVSkm2LEiRKXE4=
Subject key identifier:   36:14:F6:23:19:CA:E9:9A:A1:C8:FC:49:43:6C:CA:39:AB:49:7C:10
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584A6C55C37EFF3F889B59EE03C0
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/8501162b-5976-3f78-a723-759699eb71bc.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     27539
IP address blocks:        64.68.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:c3:7e:ff:3f:88:9b:59:ee:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=91571b56-6d80-4d10-82bf-d7f73a10d0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:51:05:ff:f7:15:21:45:47:47:9e:5e:44:
                    e3:89:a4:ab:8c:6f:d5:db:41:3e:98:fe:9c:f4:0e:
                    d9:ed:96:92:cc:86:84:f9:5f:91:83:cb:bc:bc:33:
                    f2:90:d4:fb:38:a0:4c:46:14:23:16:52:d5:05:1b:
                    21:1f:77:7b:6d:b4:f3:0f:37:8a:bd:f9:b5:e5:39:
                    6f:3c:66:8e:5c:4b:0e:64:63:13:55:26:4f:b6:a1:
                    38:ae:7f:07:20:79:cf:9d:d4:38:0d:d8:da:c3:c6:
                    98:5d:82:cd:2d:d4:62:e7:d1:f4:12:c4:09:f7:fc:
                    37:bb:a5:70:53:89:4f:3a:a5:e0:43:64:d8:c6:5c:
                    5e:88:df:62:98:7c:1d:6b:0f:5c:0b:8e:9c:a2:13:
                    57:cc:a4:ed:8b:c9:ec:9c:e9:36:5c:9b:2f:52:41:
                    20:a4:be:3c:b9:56:de:de:4b:04:1e:87:18:db:1a:
                    30:b9:8b:5c:04:d6:bc:dc:11:0a:2e:0f:de:dd:0b:
                    ac:2b:92:fd:8e:c8:c2:a1:9f:aa:51:71:6f:fe:b8:
                    f7:cb:c2:4f:26:11:f4:ec:3e:65:6f:69:76:e6:c1:
                    6d:8e:b0:d2:11:8d:93:0a:b8:b4:17:1f:6a:e0:42:
                    e9:f2:51:5b:c4:2a:70:7c:a5:61:cf:25:6e:fa:2b:
                    56:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:14:F6:23:19:CA:E9:9A:A1:C8:FC:49:43:6C:CA:39:AB:49:7C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/8501162b-5976-3f78-a723-759699eb71bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:cc:be:60:9e:86:78:dc:d6:7e:91:77:29:1d:a4:78:6e:07:
         75:e7:91:5c:bd:45:ac:da:45:ac:d7:04:ec:7c:b3:95:e1:75:
         34:ee:40:f9:6d:be:93:88:b1:fe:0b:a7:bb:68:b2:66:7e:31:
         c1:59:2c:15:e4:1a:4c:55:88:c0:3a:33:49:6c:7d:06:26:0a:
         cc:d5:c4:0e:96:5a:66:1d:fd:a0:3e:2a:55:0e:cd:28:10:31:
         00:72:4c:11:2b:8c:b9:28:c6:85:da:95:f5:c3:8d:74:a4:09:
         88:77:c0:0e:1e:e7:18:53:7a:87:e9:e6:7e:9c:a8:95:12:c2:
         5f:84:45:56:a4:ad:6d:33:26:56:be:93:6e:2c:88:04:5e:aa:
         9e:8e:ef:da:bb:c9:d1:a2:9d:7a:8f:42:82:37:15:c9:3c:f1:
         a6:6f:ae:c1:08:39:43:60:72:bd:76:18:61:2d:88:e4:a8:24:
         49:68:89:25:a9:4b:f3:70:46:ee:5e:3f:51:32:8f:78:e3:2a:
         4e:fc:7e:c7:ee:b0:4b:39:b3:ab:29:d5:60:a6:68:c4:10:83:
         16:50:da:d3:7b:9c:32:fc:67:fa:ca:29:aa:5b:51:e7:31:97:
         5c:67:a9:4b:61:6c:02:70:3d:95:f3:35:1a:37:c8:c4:5f:20:
         c9:cf:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 02:49:04 2025 by rpki-client