Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa
File:                     fe55b376-4f8a-303c-a275-778287cb6142.roa (raw, json)
Hash identifier:          jTv6ahRaPMiOytePDPF3W2TjCAflXwwwVRcGi/dlJm0=
Subject key identifier:   DF:4C:6F:08:F4:7F:29:3E:95:1E:9B:81:2A:6C:42:FA:BD:56:3B:5A
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285849C4D4BF61BECAAAC828607A00
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     2906
IP address blocks:        64.120.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:bf:61:be:ca:aa:c8:28:60:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=c61b3070-aaec-4cc6-a4ad-cccdb496df73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7b:48:af:12:e1:81:94:73:9f:d6:f5:72:56:
                    0f:03:1b:e2:22:b1:ae:21:c8:da:9a:15:0f:4e:29:
                    00:22:12:27:65:9b:d5:04:1c:15:90:b3:74:36:95:
                    c2:96:4a:86:6f:18:e0:95:23:d8:69:43:a0:06:a9:
                    79:69:cd:c4:de:e6:85:69:8f:7e:ec:73:10:87:e1:
                    16:3b:ca:a8:68:f4:28:df:7e:96:da:66:ad:6f:12:
                    0a:49:32:fc:48:cb:73:a1:c5:5b:a0:a8:51:b6:d4:
                    d7:55:d1:4d:b8:9a:14:00:b8:90:9f:8c:57:fe:07:
                    e1:4a:64:05:8f:1f:f3:f0:3c:5d:78:6f:8e:e3:ec:
                    49:7d:04:fb:e8:d6:7e:b3:5b:7f:41:12:0d:e2:7c:
                    24:77:47:0e:67:c1:46:e4:e3:83:49:55:33:28:d1:
                    f3:98:e3:ef:37:f0:c1:69:77:63:03:20:8d:7d:0c:
                    7e:9a:d1:30:95:43:9b:b7:bd:37:44:72:10:db:0f:
                    08:2e:98:ff:92:38:8e:9e:d9:ae:79:c5:3e:33:b8:
                    88:90:8a:9a:14:66:3a:13:9a:1d:f2:b8:82:a5:c7:
                    b5:34:7e:a7:12:68:8b:af:72:66:7a:ac:c6:7e:94:
                    0a:a4:d8:68:99:41:e6:66:cf:2f:0f:2d:58:0b:64:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4C:6F:08:F4:7F:29:3E:95:1E:9B:81:2A:6C:42:FA:BD:56:3B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:75:d0:94:49:cc:b0:02:e2:20:0f:5a:a0:1f:e8:a3:b3:73:
         5d:8f:1b:03:a3:6d:39:43:83:69:56:80:d7:08:a4:fd:35:57:
         99:96:51:3d:6b:b0:38:6e:75:46:52:ae:e7:67:4b:53:b2:44:
         5f:5b:06:da:c5:cf:7b:07:37:e3:4e:b9:e9:e9:15:08:83:19:
         95:5c:67:f5:ac:e0:a9:64:d6:b1:2e:f8:c2:1c:81:55:73:e5:
         86:a3:b9:44:04:8f:27:13:32:28:58:82:c5:95:08:d1:81:a8:
         41:6b:67:12:8a:32:7f:98:eb:91:89:55:1e:1e:29:d5:f0:13:
         17:ca:00:af:c8:df:1f:27:26:70:1e:78:d9:78:76:cb:20:9f:
         4b:57:24:6a:0a:57:32:4e:5e:57:de:b5:96:a6:4c:8e:17:78:
         9a:b2:c5:68:20:5e:43:db:18:2c:a7:09:f2:01:e0:9b:00:48:
         85:1f:b3:80:0e:04:5d:d8:67:dc:bd:cc:1f:e5:e7:b5:f4:c2:
         53:bc:7b:00:89:d0:e5:65:67:e4:e5:c9:a7:d1:99:d0:dc:97:
         be:f4:58:dd:2e:81:7a:6c:27:2d:4d:93:17:fa:49:e4:80:8e:
         2d:e5:02:e9:29:d7:29:28:98:76:c9:2f:08:91:f4:3f:d0:6b:
         d8:bd:47:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:14:18 2025 by rpki-client