Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3277eebf-5b52-3283-aa01-954c86fca964.roa
File:                     3277eebf-5b52-3283-aa01-954c86fca964.roa (raw, json)
Hash identifier:          ZDUsQ28Dkc1atsn9FleyVfKXLujXRvo+YxA5XoPjPg0=
Subject key identifier:   F8:D1:EF:3B:39:D6:D9:26:BE:E4:5D:62:92:3D:38:88:02:CF:0F:BF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B0B76C8E5AFCB694B744B1360
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3277eebf-5b52-3283-aa01-954c86fca964.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     397230
IP address blocks:        64.6.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:c8:e5:af:cb:69:4b:74:4b:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=731223ec-b70f-4779-9d16-7ca3dffb6f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:06:b8:f2:d6:0e:94:ee:10:50:49:5a:05:23:
                    43:27:06:d5:58:9f:ea:82:8f:47:37:ea:ef:e8:0b:
                    47:09:49:c8:78:39:46:1b:75:2e:d6:6a:f9:93:cb:
                    33:2c:af:87:06:b5:72:54:77:56:eb:aa:e4:72:29:
                    94:84:bc:72:95:fd:50:aa:35:7d:21:45:16:0b:66:
                    61:72:65:cf:fa:b4:85:96:c8:fd:6c:8c:60:c6:09:
                    0c:ae:10:d2:b9:b7:2c:f4:e7:0d:cf:92:46:f0:29:
                    bb:0b:b9:eb:f2:c4:14:e6:9d:d1:1e:91:97:83:e1:
                    0a:c0:91:09:b8:e7:92:64:5b:cf:10:44:5a:ee:82:
                    05:18:04:0a:e4:01:5f:ef:e5:8e:5d:b6:69:ef:41:
                    20:cc:3c:76:1f:9f:f7:a6:26:fa:1b:0e:3b:d7:31:
                    14:0f:60:b4:9f:aa:29:b1:20:20:7d:6d:8d:2b:cd:
                    e8:c3:2b:c9:44:72:e2:8b:2c:32:09:2b:bc:1d:03:
                    05:6e:c5:f3:9d:f7:18:48:8d:28:0f:59:e1:bf:5f:
                    c7:57:0c:b1:d0:de:93:56:14:b1:27:1b:f5:f4:70:
                    64:9a:fa:37:3b:b1:8a:ab:96:71:11:13:2b:8d:71:
                    89:e8:e1:6c:ca:97:d2:2d:5a:9a:87:22:77:6f:dd:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D1:EF:3B:39:D6:D9:26:BE:E4:5D:62:92:3D:38:88:02:CF:0F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3277eebf-5b52-3283-aa01-954c86fca964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:eb:c6:8f:d8:54:8c:27:c3:f7:96:f1:2c:7b:3d:f9:73:58:
         ab:18:ff:b7:52:41:b7:94:92:9c:e9:f2:aa:82:be:05:1a:b8:
         d0:4d:c1:40:70:e5:8e:97:45:33:ea:1c:48:f1:70:ba:5e:0e:
         5b:71:df:1b:7b:0e:af:52:80:ed:00:f4:eb:98:7a:fd:c8:69:
         ea:cd:ad:02:3a:53:24:fa:a3:2e:10:bd:16:70:cf:17:33:42:
         0f:03:47:40:6b:fb:61:e0:e2:5f:61:94:34:8b:ca:68:3c:eb:
         25:ea:7d:d3:7c:f3:6f:ad:3e:2f:9c:c7:f2:af:0c:56:ee:5c:
         d1:a1:05:49:a3:14:f7:7d:a0:da:5b:1c:0d:91:f5:80:9f:2b:
         04:28:5b:89:98:df:14:01:e0:0c:7d:ad:b0:90:af:20:f7:17:
         9b:75:3f:df:cd:9d:f8:1c:b7:01:e5:67:02:f6:f2:ee:4e:77:
         a6:9e:94:83:77:2f:5c:3b:14:de:1f:4b:4a:6c:59:01:7b:b6:
         45:3e:f6:96:97:b1:64:e5:69:a2:8d:92:2b:77:c1:21:a3:32:
         96:f7:44:d8:e9:c7:2b:18:de:4f:47:1f:38:4f:aa:c6:ea:56:
         04:3b:c1:26:5c:4e:a5:bc:ce:b4:2b:86:51:eb:68:f5:d0:45:
         7d:48:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:18:48 2025 by rpki-client