Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3d4c8873-0b9b-31ef-92d2-2dd82ebb5be9.roa
File:                     3d4c8873-0b9b-31ef-92d2-2dd82ebb5be9.roa (raw, json)
Hash identifier:          /rKx7QrqrbtK/p54Um/zTGeDOkYW6CXSF1YLdevvCZE=
Subject key identifier:   CC:94:DE:0C:B2:28:5A:EE:2E:01:0E:FB:66:A8:6B:64:A4:AE:11:0A
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285848F4F6A3ADB18BD9E676B60DC0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3d4c8873-0b9b-31ef-92d2-2dd82ebb5be9.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     2648
IP address blocks:        192.64.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:a3:ad:b1:8b:d9:e6:76:b6:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=8d780696-0850-4c17-9faa-2e5dad52570f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5f:d7:e1:96:03:31:e1:9c:e4:60:d1:66:e3:
                    3c:3e:c3:98:b4:a1:36:56:98:08:82:f9:61:b0:9a:
                    e0:6f:4f:c3:54:4b:49:3a:ee:6e:1d:49:c8:ea:bc:
                    72:38:9d:f0:8d:23:02:97:a5:bf:8e:05:3d:fe:f8:
                    aa:ca:1a:b9:6d:68:6d:a5:09:39:26:09:73:a3:5c:
                    54:ac:aa:88:78:50:94:d7:a5:d5:0d:8a:19:f0:91:
                    0f:5d:f5:6f:14:ec:cd:85:ef:0e:f1:0a:d0:bb:e5:
                    8b:d7:3a:d9:ec:68:65:65:72:06:13:db:c4:c9:27:
                    09:28:f1:a6:9d:7a:42:3e:9f:6a:76:36:bc:57:4f:
                    5e:24:9f:8b:19:38:1c:8d:01:5a:83:98:6b:9b:86:
                    a2:c7:ff:f4:c0:c7:0b:1f:e3:31:86:80:6b:c2:44:
                    de:54:fd:b4:b4:2a:9e:b5:5e:35:fb:6c:9e:fb:bd:
                    d3:14:b8:a0:86:b9:2a:e6:7d:77:f8:f7:5d:dd:50:
                    32:1c:e3:26:3b:0f:9f:40:90:55:d2:4b:6c:ab:d8:
                    34:e2:5e:a2:73:b8:a9:b4:95:61:68:45:1f:d0:a8:
                    28:d2:9c:94:92:15:ff:4a:44:c5:9d:2e:16:27:05:
                    23:84:0e:5b:be:93:b6:45:72:dc:e2:b5:39:de:ec:
                    2d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:94:DE:0C:B2:28:5A:EE:2E:01:0E:FB:66:A8:6B:64:A4:AE:11:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3d4c8873-0b9b-31ef-92d2-2dd82ebb5be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:05:88:dc:74:7e:70:7e:40:b3:f7:d0:f3:f3:41:11:da:55:
         d8:fb:97:31:43:67:43:f8:bf:2f:84:f7:a1:d3:2f:67:07:1e:
         fc:b2:2a:fd:f8:b3:9e:d9:23:17:d9:ef:be:57:8b:60:09:a3:
         01:e0:3b:90:d9:6f:ed:de:59:54:d1:84:34:6e:b7:1b:62:af:
         2e:04:91:77:f4:08:33:08:55:bd:4f:54:d9:91:39:f9:a4:fe:
         e2:c8:e8:1e:06:b7:04:d2:65:c0:24:fe:1d:cf:05:21:4f:7a:
         1d:96:5a:73:3f:06:a7:db:54:ba:ba:66:b0:9a:7c:ce:e0:ff:
         77:f1:a4:38:9e:08:c4:f4:6e:24:a9:a8:b0:48:28:5b:e3:8d:
         cb:39:85:c6:1f:80:5b:6b:8d:2b:e2:f3:c3:77:4e:5f:c0:46:
         90:79:d4:5e:16:a0:d6:36:a8:ec:c4:52:40:fb:8e:cf:a9:39:
         f5:a5:55:14:3c:e7:76:09:fb:0f:47:c3:85:6d:b9:2d:29:98:
         7c:ef:bc:a4:dc:75:5a:38:3e:be:23:8f:88:f1:cb:d9:e9:ba:
         47:59:a3:9f:14:ea:33:40:6d:39:a0:7f:f0:32:bc:58:5f:55:
         24:ab:9b:33:d0:6d:52:51:48:0f:ef:95:3e:e3:59:3b:b6:0e:
         df:d9:97:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:06 2025 by rpki-client