Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/4e3a71f8-743a-3226-872a-784b5ba49c8e.roa
File:                     4e3a71f8-743a-3226-872a-784b5ba49c8e.roa (raw, json)
Hash identifier:          7y0KHkx/5TSnzReWYHsr8hGUO/y+/TF+jv1n1jkdJrU=
Subject key identifier:   E5:CF:6C:50:DD:4B:46:61:94:B4:41:EC:26:D8:69:71:A5:12:2A:60
Certificate issuer:       /CN=78750804-3afd-47fa-9a58-deb2fe74ecb6
Certificate serial:       010D0C9F4328584A41105A9D75640BD25AF94208
Authority key identifier: 6C:DD:0A:AE:12:D0:6A:88:04:07:1C:65:C1:CF:1D:78:73:9B:E5:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/4e3a71f8-743a-3226-872a-784b5ba49c8e.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     62782
IP address blocks:        192.64.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/78750804-3afd-47fa-9a58-deb2fe74ecb6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/78750804-3afd-47fa-9a58-deb2fe74ecb6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:5a:9d:75:64:0b:d2:5a:f9:42:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78750804-3afd-47fa-9a58-deb2fe74ecb6
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=10f2152e-9704-4698-8239-88aafdb76fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:e8:c8:7c:7b:85:89:6e:2a:09:dc:89:36:
                    7f:85:13:00:43:4f:56:44:c1:7a:36:51:f1:92:ef:
                    32:df:01:f9:9d:55:a4:27:1e:4e:61:10:f4:c3:bc:
                    0d:c9:26:41:ab:e1:6e:73:28:6f:f4:a0:b4:c6:5e:
                    22:1f:08:76:84:94:7a:5a:80:16:b3:b0:fa:74:22:
                    d5:77:26:91:5c:82:a6:a5:d6:89:ad:da:dc:5a:a8:
                    cf:ed:3a:fa:f0:0a:22:4b:6e:a7:36:fc:b8:d1:17:
                    a4:b8:98:eb:34:d2:b8:24:ec:54:44:0c:c4:30:1f:
                    d9:fc:d4:d2:50:1c:82:53:8e:47:0b:b3:44:99:7a:
                    b9:36:0b:54:ae:63:87:8b:43:55:b4:8f:cd:2a:7d:
                    1e:03:cc:40:86:47:ce:e6:38:e0:41:6c:2e:fc:80:
                    eb:ad:ab:c0:8e:74:7c:cb:9b:e1:f3:1c:f3:2e:95:
                    32:50:46:0e:ea:a3:a5:e3:ca:6f:b7:55:57:40:c7:
                    06:e0:40:15:5e:82:7b:a4:70:57:b3:25:25:b7:7d:
                    19:71:f0:0f:38:75:ad:cc:14:13:9f:3e:a7:96:fe:
                    ce:40:cd:81:1b:2a:df:c5:ae:8a:f2:73:40:f8:c1:
                    a7:34:66:16:ce:27:bd:f3:eb:35:b3:0b:64:a5:d0:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:6C:50:DD:4B:46:61:94:B4:41:EC:26:D8:69:71:A5:12:2A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/4e3a71f8-743a-3226-872a-784b5ba49c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/78750804-3afd-47fa-9a58-deb2fe74ecb6.crl

            X509v3 Authority Key Identifier:
                keyid:6C:DD:0A:AE:12:D0:6A:88:04:07:1C:65:C1:CF:1D:78:73:9B:E5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:2e:a7:c5:0e:30:a6:9e:e1:36:f9:88:20:ec:8d:64:9d:43:
         a7:22:ed:99:0c:fc:bf:6b:fd:ee:e1:67:14:93:b9:01:35:60:
         5f:94:73:7a:f7:4c:df:90:a0:04:c5:a8:cc:78:0c:04:45:1e:
         09:67:9a:06:01:cc:d3:c7:8c:c4:09:a0:6d:5d:1b:eb:46:b6:
         e4:9d:71:5c:c8:cf:4a:ad:07:6f:1e:7e:15:75:d5:9f:73:72:
         11:ec:33:ba:25:dc:3a:b1:af:70:ac:d6:81:13:a4:f7:e9:90:
         d1:99:f5:26:70:a0:13:ef:07:f2:77:e7:0d:2a:27:79:8a:2a:
         25:27:38:f8:77:e0:07:18:87:d2:68:38:3d:11:40:29:ea:c9:
         74:47:15:32:1b:c4:17:2a:f9:74:39:7a:64:65:5e:36:24:a1:
         e7:09:d9:cc:85:15:e8:96:9b:9c:16:db:84:ab:5c:80:ef:13:
         41:67:b4:32:d9:0a:cd:a7:97:50:e8:cc:81:93:15:66:1c:ff:
         89:38:67:31:56:87:8a:81:0d:1e:c6:e6:5b:4f:d1:7f:ec:67:
         7a:23:08:bf:f6:e7:b1:03:cb:c9:fc:c8:b8:06:ed:8c:2f:86:
         f2:96:89:1c:5e:af:85:6d:ff:35:d8:1c:63:af:eb:98:78:64:
         aa:a6:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 07:29:51 2025 by rpki-client