Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/283e027a-7757-3aef-9f17-6e04886e9001.roa
File:                     283e027a-7757-3aef-9f17-6e04886e9001.roa (raw, json)
Hash identifier:          tq1uTsIFr3hgp9xMvrNDHbGCq0to8v7k1zf8KRFcphk=
Subject key identifier:   62:C7:20:3A:06:B3:F0:63:61:B0:15:1F:15:3D:65:26:F4:00:F7:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848EF61503F43453C37D9296FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/283e027a-7757-3aef-9f17-6e04886e9001.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        64.6.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:50:3f:43:45:3c:37:d9:29:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=18dfba5d-b14e-441e-b32d-3fb84184e0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:2c:6f:e6:2b:5f:73:bb:77:50:b2:d0:fe:
                    0a:a4:bf:5f:85:33:8b:b8:01:64:9f:bf:71:78:b3:
                    11:3d:74:0a:0e:58:dc:b3:bc:08:12:9a:49:4f:43:
                    58:97:5f:9d:04:12:c9:10:2b:98:e0:99:de:e5:b6:
                    30:b5:c8:8f:95:7b:60:dd:0d:30:07:25:0c:4e:d9:
                    be:44:a2:d8:ff:3e:16:d8:6d:55:6f:0d:9c:d5:10:
                    ef:79:a7:c1:ae:ad:bd:ea:e4:53:69:e6:a7:dd:ed:
                    2f:79:bc:c5:1a:c7:95:dc:92:5d:6a:ef:48:65:89:
                    ab:8e:3c:c5:66:b4:f0:fe:ee:2c:fd:63:94:0f:45:
                    70:02:e1:16:9f:cb:ca:01:e1:ce:e2:f7:84:56:aa:
                    2f:ec:dd:f3:b8:03:53:ce:11:be:9c:0c:87:11:04:
                    e9:26:98:32:bf:07:c0:bc:29:56:a9:a5:42:b8:6e:
                    58:8c:51:0c:c5:f5:f6:da:d7:df:6b:0f:36:f7:03:
                    fb:89:9f:77:9c:9a:71:2e:b1:24:fc:1f:fb:51:0b:
                    70:a9:9a:92:58:3a:a4:20:30:43:d8:bc:dd:ce:0b:
                    ca:4d:98:07:de:a3:a8:43:62:21:86:32:b1:64:79:
                    67:23:57:a8:f7:9e:5a:14:7a:13:3f:96:a8:0e:3e:
                    06:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C7:20:3A:06:B3:F0:63:61:B0:15:1F:15:3D:65:26:F4:00:F7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/283e027a-7757-3aef-9f17-6e04886e9001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a0:14:50:60:73:06:fb:df:ed:c5:e7:29:38:e8:72:45:0b:
         c6:8d:d5:fe:2e:d1:0d:f5:d0:42:ee:f5:ce:6f:22:81:d3:cd:
         db:1d:98:3e:ba:61:cf:52:eb:35:e7:07:3f:f9:44:c8:55:f3:
         34:8e:17:9d:53:37:46:9d:21:e3:58:92:af:44:a3:f8:9e:be:
         f4:b9:5a:97:78:09:44:28:0b:cd:24:2e:37:9b:93:69:5f:b5:
         ab:98:88:33:ff:d1:67:04:bd:0b:02:fc:75:3f:71:a8:fd:79:
         f3:24:f2:e7:bb:cb:03:84:85:5f:e0:a6:83:6a:00:a2:a2:1b:
         9e:53:39:63:84:56:2c:41:3a:59:e4:bc:28:60:12:20:60:c2:
         e0:e4:13:61:67:33:39:b3:68:48:a9:9b:f4:a7:e8:5f:eb:00:
         30:c3:08:cb:13:df:66:5e:ea:9d:4c:37:b3:c6:df:be:ca:2f:
         42:d1:2b:d0:2c:6e:91:4c:d0:84:37:f9:49:49:dd:89:4b:9d:
         7a:52:3a:61:7e:cf:e0:a6:a9:58:f5:1e:ce:09:46:6b:dd:0a:
         9d:c1:56:d5:82:d6:ea:87:8c:77:4f:e2:59:ad:08:3a:58:c2:
         da:e2:54:64:cb:16:d8:df:eb:a9:b5:a7:c5:60:57:f4:e0:60:
         ed:ac:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:20 2025 by rpki-client