Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa
File:                     8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa (raw, json)
Hash identifier:          SgNaOqy2Kyta4WNoEs4qEWtibWMXIP4lJMg8e4hukuU=
Subject key identifier:   40:77:12:38:9F:94:B6:AF:F4:A9:59:9E:E1:76:43:49:85:FD:43:40
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285849DC8FAB5C7E69C3C78FBF1FC0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     6453
IP address blocks:        64.86.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ab:5c:7e:69:c3:c7:8f:bf:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=4066a88a-eccd-4934-9cc8-aec7a0a391eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:20:03:05:6d:48:c8:3f:da:6a:c3:0b:54:
                    db:4f:de:14:54:63:8d:f8:08:5e:c0:3b:de:5a:e8:
                    70:0f:82:7c:c4:ae:4a:af:0c:1f:c0:b0:0c:f5:9d:
                    9f:0d:28:40:ac:bb:ad:55:c4:cb:08:72:8f:0d:fd:
                    b4:ff:a3:6d:0d:86:81:93:52:fa:8e:0d:6d:cd:fe:
                    10:76:45:dd:ee:c7:0f:a0:55:fc:c3:f7:d5:73:f0:
                    ce:9d:c6:ba:32:9e:4a:d2:fe:d5:68:a1:fe:48:1c:
                    c3:5d:2f:70:81:97:dc:21:96:60:f5:05:3f:df:73:
                    00:19:06:a0:af:f1:c5:a1:11:7b:12:c0:ad:2a:1b:
                    aa:76:ba:3a:64:3e:42:c8:70:61:34:8f:e4:78:63:
                    5f:23:51:7f:dd:22:96:40:c8:7a:32:ce:43:10:37:
                    9d:f5:47:6b:79:3f:5c:71:1a:9b:3a:5d:cb:48:73:
                    17:17:5e:6a:12:3a:82:43:6d:fa:42:71:f5:64:5e:
                    5c:29:71:1f:07:7f:63:71:7e:69:aa:c7:bb:72:1e:
                    3e:47:38:f5:25:6e:88:5b:c4:18:a7:d9:c6:b5:23:
                    a2:22:ec:95:b8:0e:f7:be:9e:da:f4:da:64:25:7c:
                    28:53:90:d6:c4:2a:69:23:9e:fd:21:b9:a3:16:db:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:77:12:38:9F:94:B6:AF:F4:A9:59:9E:E1:76:43:49:85:FD:43:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:36:d9:de:b7:d8:f2:d0:05:a1:ea:23:1e:88:b5:5d:0f:
         52:e7:84:f5:68:4b:56:e8:3b:6c:34:5c:4f:b2:c4:e3:98:ae:
         e3:71:fc:8d:6e:d9:9c:1c:c6:3e:f8:f3:cf:f1:68:d7:f1:ca:
         58:e5:97:d9:68:79:8b:ea:ad:dd:7a:85:02:4c:cf:0e:db:87:
         b5:cc:b7:71:c0:f5:03:a8:05:f1:42:85:17:ee:18:76:f4:d5:
         fd:c6:4c:e9:ae:29:54:71:9a:b8:9e:b7:01:af:5f:81:8c:e5:
         32:7d:65:cb:5f:6f:18:f0:c8:cb:00:b8:57:a8:0d:12:ed:26:
         0e:ee:dd:09:2b:26:15:78:83:6e:5f:16:bf:23:b8:f5:61:18:
         a5:cd:e3:43:17:29:5c:10:c3:ac:6f:50:9c:d7:63:be:e7:d5:
         4b:1e:c2:b1:33:da:a2:35:f9:bc:ba:fc:0f:c0:47:65:ad:b4:
         26:5b:de:f3:03:1b:c4:e8:be:43:19:ef:d4:a5:25:0d:a3:fa:
         7d:81:ee:85:4d:e3:09:bb:5d:80:b8:bf:d5:3a:44:6a:ae:11:
         ff:8b:3d:3b:3e:a1:0d:5e:3f:ac:ab:3a:f4:b3:f3:ab:fe:5a:
         4e:ef:68:3a:8c:a9:62:b1:d9:06:98:1d:0c:a1:d8:a4:b1:73:
         79:d0:fa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:20:57 2025 by rpki-client