Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa
File:                     d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa (raw, json)
Hash identifier:          fTH8L/xaZ2IbgzfqOVWy0FUgY4hzkaTmmeKtnYLMI34=
Subject key identifier:   B0:9B:FA:31:3C:F0:2D:17:17:6C:5F:DB:37:8F:3C:CD:8D:BD:CB:07
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285849A1EF79519C22AE859139FE80
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     6079
IP address blocks:        64.53.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:79:51:9c:22:ae:85:91:39:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=9a8dc9bb-9df7-45f2-a42b-0ddb4962e6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b5:18:b7:63:e8:ac:b9:cd:07:be:0d:3b:e8:
                    2b:22:93:e0:8f:ae:31:fd:e8:88:0e:3e:14:9f:84:
                    41:45:72:c5:a5:1d:11:75:e9:18:30:40:6c:b7:63:
                    a4:4c:e8:10:7e:76:c8:14:ef:2f:89:a5:5f:13:ae:
                    67:8f:b3:fb:0e:49:eb:8c:23:2f:8e:51:d2:84:6a:
                    65:f2:c8:cb:f6:cf:4a:0c:15:5d:9c:f1:ba:6c:04:
                    10:4a:57:8d:38:1b:f7:40:54:35:96:3e:ac:07:52:
                    b9:3c:73:c0:61:5f:fc:9e:83:2e:b5:dc:88:33:e2:
                    aa:f4:3d:08:5d:f0:99:ab:27:a6:81:6e:68:53:2b:
                    6e:fc:27:a5:17:ed:01:c5:e3:4c:49:be:46:33:13:
                    fc:18:46:d8:7b:70:a8:24:0a:a9:88:16:0c:93:9e:
                    56:11:8d:2e:33:26:b0:a5:f5:b4:82:86:fe:35:92:
                    dc:c7:df:1b:70:54:a7:b3:c4:a6:22:70:83:90:69:
                    75:0c:2c:5d:10:46:96:18:17:33:29:96:f3:59:7f:
                    59:16:50:9c:59:b5:34:07:52:96:43:c7:e3:88:cd:
                    3c:66:e8:29:c4:49:54:45:4c:cd:db:8e:15:51:3e:
                    89:37:ad:44:6e:7c:bc:7e:be:e0:0f:b4:b3:4a:67:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9B:FA:31:3C:F0:2D:17:17:6C:5F:DB:37:8F:3C:CD:8D:BD:CB:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.53.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:e9:30:83:df:99:97:11:39:70:29:fe:80:5e:f6:46:ba:
         f9:57:ce:84:9b:cd:00:86:b2:1a:fa:a3:07:bc:22:47:27:29:
         15:a8:58:76:70:7b:28:fa:38:23:72:fd:8a:03:b7:21:04:3e:
         3f:b0:34:9f:15:d1:30:3e:cc:17:37:77:9c:ef:0c:7a:b8:0e:
         56:3e:f8:bb:50:b1:a9:63:35:8d:ca:ce:fe:e1:37:35:72:ec:
         99:16:eb:da:88:b1:10:41:6f:71:03:c8:a2:87:9d:02:3e:20:
         8d:5f:19:b3:9b:4e:5f:38:98:ea:28:4d:6a:e2:f0:93:3e:1f:
         96:4b:57:f2:87:55:9d:80:97:0e:ef:cc:27:8c:06:dd:e1:61:
         ab:6a:bc:ee:e7:79:0c:3a:24:51:6b:11:b6:1f:3b:93:55:b0:
         10:49:dc:d2:de:f1:ee:02:41:aa:15:7c:83:5c:9c:a0:d8:b1:
         0a:26:29:ea:2d:46:1e:ba:74:5d:f9:b3:76:13:af:bb:e2:64:
         7e:e2:9b:09:6c:b4:5a:66:2a:d7:6c:c3:f9:21:c9:a5:e1:0a:
         3a:af:1e:83:fb:03:e9:50:83:00:f4:0d:ca:0e:b5:1b:d7:09:
         93:71:24:f0:dd:81:d4:d4:91:c9:43:c7:f9:ac:07:6a:fd:f8:
         97:47:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:19:20 2025 by rpki-client