Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/e8ceae11-a761-3049-87db-c3f09fd9d5a7.roa
File:                     e8ceae11-a761-3049-87db-c3f09fd9d5a7.roa (raw, json)
Hash identifier:          ly4lNrFg9PIQtL824NpHDeLaEx7QHJxoV03Hu4qsp3E=
Subject key identifier:   48:A3:C5:22:EC:AF:44:0D:F5:37:18:41:F5:5E:8E:E8:0C:CF:8C:A1
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F432858491246AE254EC5CE4B84C14080
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/e8ceae11-a761-3049-87db-c3f09fd9d5a7.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     20454
IP address blocks:        64.38.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ae:25:4e:c5:ce:4b:84:c1:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=a75c48eb-1af0-48e3-a28d-6046936e99d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:69:e0:79:af:5a:93:f0:dd:b8:6e:c9:10:
                    ce:9e:89:22:d8:6f:b6:63:ab:15:a3:d5:1f:67:a0:
                    d4:9d:a4:02:52:11:d7:18:e3:e6:40:45:17:36:86:
                    b8:b8:49:6c:34:16:8a:df:3a:4f:2d:22:16:12:7e:
                    3d:80:1e:da:e9:b8:bf:ad:bb:52:18:5c:3f:94:d2:
                    0f:6a:75:e3:36:58:3b:af:22:69:f6:0c:52:f5:26:
                    bc:d9:cd:ff:1e:8d:58:fd:34:0c:31:78:ef:a5:23:
                    b7:73:69:ee:01:17:54:90:fa:78:81:bf:dc:a1:f9:
                    ca:8b:c2:63:88:98:c6:02:e7:60:cf:06:f2:ac:16:
                    d2:13:ae:97:c7:17:68:d9:82:9d:90:9e:d4:21:85:
                    90:72:71:43:27:31:9e:20:8a:f8:ee:49:91:68:ad:
                    2f:58:4f:6a:b9:8e:74:d7:72:fe:39:9d:04:5d:42:
                    a4:48:ca:2a:be:55:f8:1d:00:80:69:b6:34:09:1a:
                    54:1b:45:ba:be:ce:56:e6:2f:52:0e:88:69:f8:d0:
                    0a:68:63:79:8e:70:57:87:98:d8:c5:0f:56:c0:79:
                    22:d2:68:cd:f2:57:39:af:7e:f7:99:09:6d:3f:2b:
                    24:56:6c:42:07:02:2a:fd:f2:24:36:15:13:2f:2a:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:C5:22:EC:AF:44:0D:F5:37:18:41:F5:5E:8E:E8:0C:CF:8C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/e8ceae11-a761-3049-87db-c3f09fd9d5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c5:a0:de:17:b9:1f:2a:37:5f:85:70:a7:87:fa:c3:65:16:
         74:44:81:7e:e8:44:31:a7:37:e0:27:90:22:bd:2a:84:d7:d7:
         83:77:ec:48:7c:bf:03:ef:a2:1f:b4:77:72:36:35:7e:f0:1c:
         b8:d4:76:3a:6f:83:c4:d9:19:25:5a:5f:e7:c0:30:54:54:93:
         52:72:6e:5c:0e:7c:5a:02:1d:0d:98:60:e8:92:c3:f1:24:9f:
         5e:9d:7d:88:d7:1d:8e:3a:e0:38:d6:f8:09:09:9e:26:92:57:
         75:35:e3:db:20:f1:24:1e:bf:1a:ba:36:7c:10:f1:fa:e6:76:
         7b:b8:d6:3f:bc:54:ba:bd:ab:7e:88:2d:6e:af:30:32:54:71:
         fe:60:92:33:e9:7e:a2:1e:f9:d8:46:ee:1c:01:9c:49:fb:d0:
         da:fb:12:cc:94:73:6f:d4:6f:82:7d:0e:19:a9:74:88:25:1d:
         c2:e8:75:0a:a0:71:96:1c:aa:e7:14:8b:ef:74:44:41:90:f1:
         b0:0b:bc:ad:1f:7c:05:8e:2c:b4:3e:3c:82:a4:ba:ca:7a:16:
         ba:e7:02:1d:51:fb:8b:ae:7c:8f:fb:e0:a1:93:4d:fc:03:86:
         d8:ef:70:ab:b4:bb:d4:7b:68:17:4e:3a:d4:c9:c3:21:0b:b1:
         ee:3f:ef:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:10 2025 by rpki-client