Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
File:                     0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa (raw, json)
Hash identifier:          eAvpJ6y7ysCsECwSATfh4tHzC7UaCFu0o/19vdnyOqc=
Subject key identifier:   37:B7:BD:9B:2E:6F:D1:2B:94:DC:B6:90:6A:80:5B:03:86:57:BC:BA
Certificate issuer:       /CN=ee451155-06f0-4e35-9b53-96104a44c5e1
Certificate serial:       010D0C9F432858490B4C1B4CF3DF6AAB7A4381C0
Authority key identifier: 28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     55002
IP address blocks:        64.112.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:1b:4c:f3:df:6a:ab:7a:43:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee451155-06f0-4e35-9b53-96104a44c5e1
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=67fb2853-89d4-4c00-8fa1-83faf809bd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:69:04:ba:26:1f:89:1d:77:c6:51:d8:9c:
                    e6:f2:0f:3f:3a:83:6a:a8:96:de:c1:6b:48:1f:9f:
                    3c:a1:5b:6c:a4:2a:6b:e8:2e:20:91:90:d2:b8:fb:
                    e0:ca:29:bb:6d:52:71:a6:1a:db:d0:d9:87:e4:a1:
                    78:05:7a:18:2e:7d:6f:d9:f9:b4:74:ff:f2:51:dc:
                    42:9b:8c:71:18:86:3d:07:a4:f6:9a:73:35:68:20:
                    e3:43:e8:5f:be:9d:4d:73:3d:a2:7e:60:da:2c:de:
                    d5:2d:6d:73:75:40:1f:79:2e:7b:4a:e9:0b:7b:ce:
                    fb:9d:04:d2:1a:97:5e:4c:0c:ef:ba:db:78:42:50:
                    ac:6a:50:70:e6:93:d7:5f:f7:f4:c1:1d:a2:b6:1f:
                    58:57:bb:8a:72:ae:4e:ee:4a:1d:8c:89:90:8e:d4:
                    a9:2a:9b:f4:44:45:90:94:b1:46:36:7e:24:7b:93:
                    21:4e:c1:32:98:e3:36:61:d1:b9:69:23:77:28:99:
                    fb:ef:84:dd:93:8f:84:c8:2e:bb:b9:6a:3f:07:97:
                    bc:39:0f:f2:e8:e7:a1:a1:49:b6:c9:e5:b1:01:33:
                    23:62:8f:d6:02:b4:df:34:0c:70:13:fe:ea:b5:96:
                    e6:f5:bd:8e:2e:c9:77:4e:96:0a:c5:22:4a:e5:20:
                    33:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B7:BD:9B:2E:6F:D1:2B:94:DC:B6:90:6A:80:5B:03:86:57:BC:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl

            X509v3 Authority Key Identifier:
                keyid:28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:39:37:d4:e3:fb:e7:ff:f5:61:ec:65:1a:16:41:dc:87:94:
         e6:1e:5b:33:51:b8:5b:15:e3:2b:87:c3:a0:68:86:6d:28:1c:
         74:1c:43:b6:6f:5f:f4:f6:6e:73:13:61:56:98:d6:f8:40:a3:
         33:10:f4:bf:8c:17:df:7b:83:20:4a:92:99:1c:a5:f9:e4:66:
         21:9b:8f:2c:d9:f0:5c:d1:d2:66:77:4d:42:ec:b5:f5:43:aa:
         61:c0:d4:43:0a:22:14:68:05:df:e2:0f:47:73:43:cd:b5:d4:
         cd:80:f5:2a:c9:40:85:4a:08:86:b7:cd:9a:97:d8:53:c7:1c:
         1b:9a:6f:e3:e3:7a:0e:c6:f2:eb:5e:d3:86:d8:65:3b:7d:b6:
         07:0a:3b:2d:4a:b9:8a:fb:df:c7:d7:55:06:b2:a7:85:c8:00:
         13:ea:7c:3c:59:45:22:fe:fb:95:ea:24:4d:61:6c:46:0b:a7:
         d4:e3:8d:72:5e:4b:02:fa:ce:23:46:2b:b6:c5:79:33:e6:a1:
         c2:9e:f8:be:2d:22:1c:eb:f0:a4:e3:6f:ae:c2:80:3a:9a:49:
         82:82:bb:a5:ea:af:e3:4f:50:e9:de:0a:61:7f:de:37:7d:68:
         51:95:27:30:b5:4f:ac:4c:2a:42:d1:e8:31:15:f1:9e:e4:3f:
         8f:08:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:45:21 2025 by rpki-client