Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/349473bf-2e3b-3135-9474-6245da8b2e08.roa
File:                     349473bf-2e3b-3135-9474-6245da8b2e08.roa (raw, json)
Hash identifier:          kgFrF9xaStPECRz8lrjInDzlNJrg7J8kZck93m20DYs=
Subject key identifier:   1D:64:8C:71:C7:B0:D3:EA:A0:3D:A9:C3:16:47:12:8C:70:C7:A1:99
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584A4F05C6F18CC32A1FA6D6B840
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/349473bf-2e3b-3135-9474-6245da8b2e08.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     20454
IP address blocks:        64.38.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c6:f1:8c:c3:2a:1f:a6:d6:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=a69e3f53-b51f-4f06-bf5d-db0a74490ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0d:3d:2f:50:cd:ea:dd:ac:d2:cc:37:f5:0e:
                    ef:c4:36:ee:21:5c:1a:52:1a:ef:19:64:fc:0b:5e:
                    1e:c9:d1:78:48:bd:23:21:bf:8f:d9:eb:fe:09:ff:
                    c5:e6:a6:6d:8c:8a:33:73:13:f5:13:9e:69:d8:7a:
                    e0:5c:a9:10:14:a5:db:5e:de:fb:0e:7c:eb:03:e9:
                    1d:f4:6e:23:38:99:9d:ab:24:5e:39:bc:8c:54:ea:
                    02:4d:77:05:1f:df:31:de:2c:c3:f3:d8:9e:ff:e7:
                    3c:09:5c:d7:75:32:49:5f:ca:c9:e7:0a:10:b1:ab:
                    80:fa:de:2b:57:38:ce:95:41:33:1b:6c:06:65:59:
                    e7:7e:a8:0f:82:bd:55:f3:c8:61:ed:89:02:51:47:
                    96:54:96:aa:ee:3f:eb:fa:fc:61:3c:74:5f:e5:53:
                    8e:5e:76:dd:9e:e0:e9:d4:da:5e:93:01:17:fb:cb:
                    73:bd:f4:ad:53:a9:6f:6e:c8:e8:68:b6:62:f8:c1:
                    c0:00:98:f2:05:44:c3:9a:07:99:40:9d:77:6d:c0:
                    a0:73:66:cc:12:c2:14:6d:20:79:bc:ce:e8:36:22:
                    7b:58:8a:f4:2f:85:c8:2f:65:6e:c6:b4:fd:b6:d8:
                    36:16:e4:d4:3d:0c:df:9d:ba:f5:11:5c:cb:f2:f8:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:64:8C:71:C7:B0:D3:EA:A0:3D:A9:C3:16:47:12:8C:70:C7:A1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/349473bf-2e3b-3135-9474-6245da8b2e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:05:f6:ab:ce:4a:b8:fd:1a:2d:b2:bf:18:3d:d9:16:21:3f:
         09:08:2f:2c:3b:05:cd:b0:3e:d8:2b:bb:f3:48:b8:f9:2b:8c:
         7e:38:77:3a:43:d6:69:9c:72:c3:d3:e7:60:49:33:ae:13:ae:
         09:1b:e1:c5:6c:b9:78:99:94:ed:b1:3e:cc:f0:7b:b4:78:ea:
         d5:53:2d:18:3d:92:17:3d:10:3f:84:de:33:21:5b:8b:58:fb:
         01:9d:b9:8e:f5:09:4d:76:c6:a8:a8:0a:da:4b:23:a2:77:51:
         72:2b:e3:58:b0:29:54:4e:6c:d6:01:e5:1e:af:77:c1:55:85:
         b5:10:5f:4e:a7:9a:8d:09:45:d3:70:70:e0:2d:c2:44:9a:5a:
         e5:ff:bc:cb:a8:82:52:bd:12:15:62:96:79:23:58:7a:b1:22:
         53:60:b1:b6:b6:30:81:fd:19:9d:a0:76:35:0d:27:5e:1c:9f:
         6f:73:1e:90:91:37:1f:f3:a2:ea:00:06:f7:4e:c8:ba:40:9f:
         e0:7a:50:ef:ef:0b:9a:8a:42:87:64:9b:cd:fd:39:a3:23:5b:
         6d:56:6b:9b:ed:60:f3:ed:07:51:f1:be:be:14:5c:aa:37:0c:
         67:0b:e8:6b:26:f4:38:0c:dd:ce:b2:e2:64:da:be:0f:31:67:
         84:1d:e6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 06:06:32 2025 by rpki-client