Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/629ce3ee-3c33-3b85-90ba-b0774574ca2d.roa
File:                     629ce3ee-3c33-3b85-90ba-b0774574ca2d.roa (raw, json)
Hash identifier:          EmpPi9daKnBsrfDwjCkbot+snGaGNnAIfRhTLG+BRw8=
Subject key identifier:   27:C1:7F:F6:37:12:75:DB:BA:0C:FF:A1:FB:86:60:9C:94:B2:CC:A1
Certificate issuer:       /CN=40c6f749-6a2d-4ad9-9012-1656d0adbd53
Certificate serial:       010D0C9F4328584ADAE291FFDCDD488D50D84660
Authority key identifier: 13:6C:DA:17:76:DF:B9:A7:C5:75:3A:D1:52:08:E7:F7:8D:5C:35:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/629ce3ee-3c33-3b85-90ba-b0774574ca2d.roa
Signing time:             Thu 14 Aug 2025 15:23:30 +0000
ROA not before:           Thu 14 Aug 2025 15:23:30 +0000
ROA not after:            Wed 12 Nov 2025 16:23:30 +0000
asID:                     30635
IP address blocks:        64.113.240.0/20 maxlen: 20
                          64.113.240.0/24 maxlen: 24
                          64.113.241.0/24 maxlen: 24
                          64.113.242.0/24 maxlen: 24
                          64.113.249.0/24 maxlen: 24
                          64.113.250.0/24 maxlen: 24
                          64.113.254.0/24 maxlen: 24
                          64.113.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:e2:91:ff:dc:dd:48:8d:50:d8:46:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40c6f749-6a2d-4ad9-9012-1656d0adbd53
        Validity
            Not Before: Aug 14 15:23:30 2025 GMT
            Not After : Nov 12 16:23:30 2025 GMT
        Subject: CN=3a1db7f1-3d2f-423e-807c-e1f34600336f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:68:82:40:92:f0:c2:d6:c9:4c:57:6d:1d:b1:
                    4a:a5:a4:70:5a:c3:13:ad:58:df:40:1c:93:1f:78:
                    eb:d9:2b:be:d4:74:7f:7f:ce:ab:f5:b5:d9:a8:4b:
                    4a:ce:c9:d4:7a:73:74:ce:5a:9a:04:a7:88:e2:dd:
                    a9:cc:d7:ee:01:af:ae:ae:0b:27:3e:9f:2d:3a:50:
                    41:48:04:82:fb:39:98:86:1e:10:21:ef:be:a7:fb:
                    d6:ec:6d:40:cf:07:03:dd:36:26:83:31:61:b4:ce:
                    6b:70:50:81:5d:c7:aa:43:c4:d8:63:5d:11:33:cc:
                    84:2d:c7:dd:cc:df:4e:1b:4d:d4:15:5f:42:f9:b8:
                    1a:24:0b:20:2d:73:e4:4f:20:e1:40:0c:fa:2b:51:
                    3f:ac:4d:02:e1:4d:01:6c:ae:4b:76:a0:b9:f4:f9:
                    f3:96:88:33:c6:72:ad:c0:31:a0:8d:64:b0:1c:60:
                    00:5e:c9:7a:cf:6a:7a:fe:26:89:53:0f:86:87:19:
                    5d:62:c6:39:24:79:aa:2e:48:db:77:dd:77:94:c8:
                    cc:a2:91:e4:4b:a3:67:17:e8:e0:ac:53:3a:d7:a9:
                    7d:2e:87:a0:78:34:aa:d1:69:65:4e:db:7b:32:72:
                    43:00:8d:36:fe:32:08:ef:06:61:90:e0:0e:32:a2:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C1:7F:F6:37:12:75:DB:BA:0C:FF:A1:FB:86:60:9C:94:B2:CC:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/629ce3ee-3c33-3b85-90ba-b0774574ca2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl

            X509v3 Authority Key Identifier:
                keyid:13:6C:DA:17:76:DF:B9:A7:C5:75:3A:D1:52:08:E7:F7:8D:5C:35:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:c3:71:ef:b7:56:61:e5:99:fa:c0:2f:05:a9:0a:84:d7:
         e3:de:0b:ab:15:41:fe:d2:b7:9d:4c:ec:55:33:b6:eb:16:d5:
         53:11:26:2f:0e:e1:a1:19:aa:cf:22:96:6f:3f:a7:de:2d:5c:
         4b:89:23:ab:90:89:ff:8c:62:e6:38:35:9d:f1:24:3b:16:24:
         7a:76:93:5d:9e:73:f9:0a:91:98:94:0d:6a:70:ce:59:e9:70:
         c8:f8:fb:a9:dd:0e:62:55:b2:81:36:41:27:b8:2f:1e:e3:e1:
         bc:c4:37:f6:83:a2:c1:bc:33:8f:41:38:f6:6b:1a:d6:0a:dc:
         00:5f:c2:f5:dd:11:76:84:12:32:1a:17:1a:46:45:1a:2d:e9:
         ad:7f:57:81:01:20:e9:ac:22:04:40:c6:92:55:26:05:80:7c:
         15:0f:2d:00:7d:1a:c0:bc:d4:a2:58:0b:5a:bb:5f:62:c0:3f:
         cb:88:9a:e1:9b:8d:59:69:a9:af:4c:fc:87:20:4a:af:1d:0f:
         45:ec:c9:f3:41:80:03:b3:d9:ff:3b:47:a6:18:f6:3c:ef:fb:
         c8:8d:d8:4e:6c:9c:ef:cf:da:d9:28:1f:29:42:6e:94:17:80:
         f5:f4:93:a8:f7:fc:f2:5c:34:e0:f4:a9:be:df:17:7e:2d:1a:
         66:cb:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:52:56 2025 by rpki-client