Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa
File:                     64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa (raw, json)
Hash identifier:          o3K+faisX2bG8ayPvMyOZzCaD1pEw3UUsuR3uXgvc+g=
Subject key identifier:   A5:0E:89:45:D8:14:D8:DB:3D:F2:D0:B1:E8:24:1E:31:41:66:BE:08
Certificate issuer:       /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial:       010D0C9F4328584A66C07973B36DF61CF6824080
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     394195
IP address blocks:        199.7.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:79:73:b3:6d:f6:1c:f6:82:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=d62fe764-2903-4394-84ac-729a47a2911c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:a1:f2:ae:ee:df:78:aa:fa:0c:f2:a0:5c:
                    fd:d4:e1:42:07:ff:dd:99:a0:db:73:81:15:4c:0c:
                    ec:12:45:c6:e2:3e:7a:c2:20:29:f8:ca:48:9a:c3:
                    3e:ca:b3:b6:6a:6e:ad:60:62:7b:44:c0:c4:bd:e4:
                    60:13:aa:23:14:75:bc:01:00:50:78:11:86:a2:5d:
                    61:f3:6d:12:24:c1:d4:3f:a5:16:18:ef:1d:6e:db:
                    ed:50:9a:fa:db:4f:a4:d8:94:17:93:78:e3:67:25:
                    f0:73:f8:c6:13:56:0a:02:89:e2:27:02:41:60:89:
                    3c:52:ca:01:42:e8:43:82:9d:8a:d6:28:e2:69:65:
                    d4:1f:dd:06:2f:41:a0:61:3f:61:37:b1:69:26:d1:
                    36:5b:11:53:45:8c:da:91:35:81:c1:42:7e:87:dc:
                    01:15:eb:55:2d:9e:38:4f:d2:e0:fb:c3:56:4d:87:
                    77:57:20:8f:bd:ed:31:dc:1e:ed:ee:33:00:e9:d2:
                    92:c7:02:6d:c6:c6:40:1a:3b:3b:e1:d8:a2:dd:ea:
                    e5:e9:ca:2b:3b:c9:27:46:8a:5b:1a:95:7b:cf:d0:
                    eb:2b:a9:d4:d1:c4:3f:0d:4b:2d:88:73:26:40:0e:
                    14:b9:a6:2e:e9:b2:e8:e1:dc:1b:c6:19:71:dc:2a:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0E:89:45:D8:14:D8:DB:3D:F2:D0:B1:E8:24:1E:31:41:66:BE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl

            X509v3 Authority Key Identifier:
                keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:d8:39:a4:1d:90:7a:2e:4e:24:18:cb:9e:02:a6:c5:80:
         d6:db:30:b8:b4:f1:fc:78:ee:92:ab:44:1f:28:de:5d:b9:8b:
         f3:04:52:08:56:f6:0a:5c:48:6a:31:95:6c:0d:40:ee:c0:46:
         85:69:eb:4b:db:57:76:34:16:94:c6:b0:15:3e:8f:c9:f3:19:
         0c:c9:3d:a6:8c:e5:a5:1d:f7:44:07:cf:c4:a8:b4:64:c9:e4:
         85:59:df:7b:eb:7a:5a:21:d4:85:d4:f6:1b:7f:f8:f7:18:b5:
         7c:5a:7e:89:81:31:a9:d5:51:55:05:cc:ad:6d:a7:22:f2:97:
         1e:e7:c9:14:eb:43:9f:eb:d7:bd:01:ec:07:84:15:65:ed:88:
         ce:ab:a3:9e:82:27:e7:38:7a:a1:fe:84:7c:fa:28:37:a4:5d:
         2e:21:2f:e6:00:e1:23:80:c9:b6:19:0d:1b:bc:ca:c3:a7:a7:
         2e:0a:92:bd:74:6f:d8:72:00:57:d6:1f:02:9d:bb:9c:2e:7d:
         da:e3:e9:88:4b:7c:ae:d7:94:7a:7f:e1:9f:8b:f8:af:ba:67:
         c0:f0:17:e5:e6:48:14:e3:33:f6:64:e5:2e:ad:72:af:2a:db:
         c2:57:38:24:e1:b0:5a:6c:83:d6:a9:d4:37:84:43:ab:f2:2a:
         df:7b:7a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:34:57 2025 by rpki-client