Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa
File:                     42c626f3-6616-371e-a23f-3647b3c8eb49.roa (raw, json)
Hash identifier:          DdK/kYuJfRisFMVtu6y5KVqkir75teRTx2SkaxuUnWk=
Subject key identifier:   19:AF:25:D0:B8:B1:FA:94:6F:06:3D:31:FD:A5:67:6D:4C:68:80:83
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584A7085EBB3EE8D28A87DD07140
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     396032
IP address blocks:        64.38.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:eb:b3:ee:8d:28:a8:7d:d0:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=b42f0dea-8e96-4743-aa20-af41fdd9e91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:11:6c:2a:b4:4f:59:58:08:97:b0:64:34:
                    88:79:8f:88:9c:f0:45:f9:b2:35:cf:f9:a3:e9:bb:
                    a0:a6:d5:7f:db:8b:5f:2b:66:1e:f7:be:42:7a:8b:
                    6c:14:f9:06:42:d3:f2:97:97:eb:47:40:6b:6f:5a:
                    53:a5:b9:57:c7:44:f4:26:30:b2:6e:65:2a:55:22:
                    0f:9c:f3:5f:5d:fd:a8:cc:f5:85:d0:9e:43:9d:bb:
                    16:22:0a:f6:3f:b6:db:f9:80:ca:31:ce:6b:9e:24:
                    c5:fe:75:ea:c5:71:d9:dd:bf:0a:33:7c:e1:e2:1a:
                    1b:f9:e1:bd:db:13:6c:65:fe:84:03:3b:f7:6f:2e:
                    bf:32:2a:bc:88:04:5e:ee:97:e8:51:b7:df:b3:8c:
                    f1:e3:32:18:eb:d7:bc:8e:6f:94:e7:58:a5:71:5a:
                    40:4d:aa:d5:35:ae:c1:ff:d6:dc:86:d8:43:3b:88:
                    e2:9c:81:90:ce:01:5c:48:22:ca:f3:ff:e2:6a:e3:
                    35:1b:f8:94:71:ab:9f:f9:49:7c:3f:c4:11:09:bd:
                    c5:84:61:ea:38:98:a8:94:53:0c:65:80:3d:18:d7:
                    a4:07:50:f1:cb:54:1f:39:9e:4a:e0:75:03:01:a3:
                    2a:a6:8f:70:41:c8:43:a0:43:bc:06:59:a9:8d:64:
                    49:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AF:25:D0:B8:B1:FA:94:6F:06:3D:31:FD:A5:67:6D:4C:68:80:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:83:af:cf:13:37:f9:ba:e0:0f:92:2d:3b:6c:8e:21:22:9d:
         61:0c:a9:61:b2:0e:1d:2a:46:42:1a:a4:22:ed:95:37:ed:18:
         33:fb:df:3c:96:eb:00:9d:f2:30:17:17:06:95:6f:d6:0e:e2:
         af:ca:10:fc:7e:9b:21:16:c7:bd:67:82:2a:74:fb:4e:ed:24:
         1a:2e:89:c7:a1:3d:75:77:61:14:40:46:f2:db:1d:77:a6:6f:
         6e:06:9e:a6:68:9c:99:87:34:1f:75:d1:53:37:2a:84:78:30:
         1e:d7:02:b2:e2:98:d8:6e:ac:2a:b8:2b:95:5e:db:cd:cd:94:
         12:9c:c0:be:c6:d8:69:02:18:32:09:ee:fc:f8:98:40:c6:75:
         08:eb:36:82:98:c2:94:45:28:7d:2f:6d:42:38:b9:ef:ab:e8:
         72:bf:8b:a2:52:d9:92:03:a7:89:7c:28:ca:08:0f:ae:d0:e8:
         d1:10:b7:5b:af:d0:6d:f8:8d:ef:4d:07:cb:75:53:cd:1b:dc:
         8c:c9:62:3f:c3:51:d6:a3:4b:29:77:4f:3c:b0:9d:89:69:16:
         7a:5a:bf:8b:96:1c:66:4e:20:cc:f8:4e:93:bb:96:e8:e3:ff:
         c6:40:99:6e:ab:f1:b0:7e:53:db:e0:a4:d8:7f:cf:ac:2e:a0:
         24:ad:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:20:18 2025 by rpki-client