Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/9f0d521a-18e6-3f71-9414-59cb81d22f6f.roa
File:                     9f0d521a-18e6-3f71-9414-59cb81d22f6f.roa (raw, json)
Hash identifier:          pWWKD8+mmQ2LbCuYkgqXRFq3QcVXbCgMylv6hOOrH3c=
Subject key identifier:   70:3F:A7:FE:55:9B:E8:96:25:C9:3A:02:45:6A:C0:64:31:49:A1:57
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F43285849D629197C5CC2A07444085940
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/9f0d521a-18e6-3f71-9414-59cb81d22f6f.roa
Signing time:             Tue 13 May 2025 05:59:37 +0000
ROA not before:           Tue 13 May 2025 05:59:37 +0000
ROA not after:            Mon 11 Aug 2025 05:59:37 +0000
asID:                     395793
IP address blocks:        68.64.134.0/24 maxlen: 24
                          68.64.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:29:19:7c:5c:c2:a0:74:44:08:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: May 13 05:59:37 2025 GMT
            Not After : Aug 11 05:59:37 2025 GMT
        Subject: CN=b6c52ad9-7e0f-4eb1-8499-6b6dc702c83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:e9:e2:5f:3d:04:79:a3:79:71:ba:24:58:
                    79:52:29:61:a8:2f:65:4f:e4:6a:85:2e:9a:a5:db:
                    8c:41:4f:25:85:5f:85:0c:cb:ac:7d:36:82:79:b9:
                    f7:e6:d4:24:ec:a3:09:c3:16:2b:5c:02:cf:17:77:
                    de:0f:40:43:08:fb:f2:c3:2a:9a:54:74:80:49:fa:
                    74:1c:0c:ce:9b:ae:ca:05:70:87:db:9c:34:de:fb:
                    94:b0:0b:42:07:49:07:d5:a2:50:9a:c5:3f:e4:92:
                    fe:df:15:3c:ff:ee:bb:0f:41:8f:84:49:9f:6b:d9:
                    ae:b9:23:50:06:31:9b:3a:13:f2:da:12:67:4a:ea:
                    e0:d0:e7:d9:8d:c8:a7:1f:1f:2c:2e:ad:1c:3b:13:
                    76:a3:78:a7:3d:d8:db:16:8b:f2:37:e0:9e:e2:de:
                    aa:94:c9:58:2d:c8:ea:0b:18:9f:b8:e3:7f:b1:29:
                    9c:7c:f0:25:10:4e:15:29:fd:e0:85:f8:4c:64:84:
                    cc:0d:9b:f5:09:5c:d9:a7:bb:c2:5d:55:3d:ca:c4:
                    0a:d9:fc:4b:ba:b3:68:63:ce:4a:d8:f5:c6:d9:ae:
                    56:e8:4d:b9:a3:a9:60:a2:9e:0f:27:47:35:0a:bb:
                    64:05:1d:f7:55:8e:11:e7:a5:a0:e5:6e:82:6d:16:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3F:A7:FE:55:9B:E8:96:25:C9:3A:02:45:6A:C0:64:31:49:A1:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/9f0d521a-18e6-3f71-9414-59cb81d22f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:01:bb:c2:17:60:68:44:cc:4f:18:bb:fb:c4:81:7f:40:20:
         a5:d8:c2:91:75:23:5f:01:a6:a6:9d:15:86:e8:65:e8:a0:07:
         f7:ae:e6:28:e3:75:7f:1c:8a:d3:74:55:6f:6a:5a:33:16:14:
         8d:95:ac:77:94:d8:81:10:0e:5e:c7:fc:83:ed:5a:bb:b6:5c:
         96:8c:1d:a9:f4:7a:6a:0a:4d:a1:bb:63:bc:1a:5e:56:cf:12:
         16:f3:26:82:a1:23:03:62:3c:f1:27:22:e4:5c:0e:21:4e:51:
         55:ae:a2:5e:7e:74:76:90:5d:8d:bd:90:8c:1d:1f:01:08:77:
         7a:ca:7a:88:54:1c:39:d2:dc:80:4e:01:97:44:34:b8:e0:3b:
         7d:c3:40:41:ab:ab:41:1e:c9:1d:ad:c4:ae:51:9b:94:50:fd:
         ec:a7:eb:14:91:59:1d:15:39:e9:fc:04:fd:90:86:09:31:34:
         ee:ed:b3:00:25:5c:3e:e2:4d:37:b2:da:91:a2:f7:c1:83:27:
         da:bc:c4:c1:a6:fa:12:b3:80:24:4c:1c:2e:4e:2d:b6:96:5a:
         39:53:88:08:62:b8:54:3e:b8:ca:ce:41:42:8a:ab:65:af:4b:
         08:93:05:9b:52:91:35:56:98:e7:82:a7:07:1a:c8:fc:1b:59:
         29:af:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:02:07 2025 by rpki-client