Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8afbbc83-e173-3450-815d-79f923367029.roa
File:                     8afbbc83-e173-3450-815d-79f923367029.roa (raw, json)
Hash identifier:          D+fv+lHBJrVxAJ3oVdRkKtx+w4jinWRfsClLSNtHTNg=
Subject key identifier:   A3:D1:69:80:A3:63:47:0D:EA:49:1C:59:33:0D:89:4A:ED:AC:6C:79
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134273B57376A0F495515C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8afbbc83-e173-3450-815d-79f923367029.roa
Signing time:             Sun 09 Mar 2025 10:20:35 +0000
ROA not before:           Sun 09 Mar 2025 10:20:35 +0000
ROA not after:            Sat 07 Jun 2025 10:20:35 +0000
asID:                     577
IP address blocks:        64.230.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:27:3b:57:37:6a:0f:49:55:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:35 2025 GMT
            Not After : Jun  7 10:20:35 2025 GMT
        Subject: CN=9841ac20-07b1-4acf-ae6b-51c58252e50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:51:0f:91:ab:ea:46:8d:eb:91:08:6b:9d:
                    61:dd:84:10:31:69:38:8b:b2:06:1c:ae:c8:3c:9c:
                    5b:1c:66:31:0b:41:10:67:9a:6c:16:1d:cc:16:6c:
                    62:eb:c4:19:18:62:81:74:54:e7:03:c6:50:dc:f1:
                    83:65:eb:5b:63:cf:9b:42:2a:f4:a4:79:e7:ec:b2:
                    99:35:14:38:c3:42:dd:72:b0:b0:1e:a7:8b:c2:8d:
                    d1:d4:f3:95:ed:3d:85:8d:ff:78:cf:d0:b3:3d:c2:
                    58:0f:96:ac:5a:e3:59:6c:78:29:ac:cd:cf:01:ab:
                    a0:06:e2:97:ed:c1:59:17:d4:b3:c4:0d:ea:df:e8:
                    fc:01:9b:eb:c5:ff:99:64:3d:52:07:3b:cf:ea:b5:
                    70:e3:00:4b:5b:af:62:b1:a4:eb:62:0b:18:fe:4c:
                    b5:a1:06:a0:f3:01:11:34:6d:88:ec:04:e7:ee:e0:
                    a2:cb:32:b7:3a:83:04:c1:fc:de:a5:f8:f4:39:d1:
                    4e:f3:f8:5f:b8:82:7a:8f:be:d1:8f:e9:62:d1:a5:
                    5a:61:55:fa:6e:68:64:01:8c:88:51:21:85:8f:17:
                    ca:de:91:12:4a:ba:c9:31:61:cd:fb:cb:64:de:89:
                    f4:95:14:3e:21:b2:86:8f:0b:49:79:0c:a5:0e:ce:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D1:69:80:A3:63:47:0D:EA:49:1C:59:33:0D:89:4A:ED:AC:6C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8afbbc83-e173-3450-815d-79f923367029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.230.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:44:bc:3c:46:81:6d:ae:ae:ec:07:8c:45:05:e8:f9:8c:1f:
         05:36:6c:a9:be:21:60:2b:27:0f:90:b2:0a:f4:b2:a5:aa:17:
         31:d8:01:83:a9:07:e6:8d:da:94:16:c3:b8:50:e0:d4:a5:59:
         e9:6d:49:ce:32:ea:34:ae:17:47:6b:56:3c:80:6d:e8:3f:13:
         ad:26:38:a9:22:90:2c:d1:26:7e:8c:64:3d:c1:76:b8:10:c3:
         a8:1b:5f:9f:bb:14:bc:21:95:df:bb:fd:f1:fb:9e:c2:6e:c7:
         32:f9:2f:a9:87:a8:52:72:62:bd:55:04:fe:fb:17:b5:a3:4f:
         84:90:63:7e:21:0d:df:90:a4:d4:36:5d:b6:aa:3b:a8:11:72:
         76:89:69:79:88:41:14:69:e9:a4:e3:56:f2:60:02:9d:1b:ba:
         e9:5f:9c:af:72:09:19:b0:57:5f:3e:ad:40:c5:d0:ad:bc:2d:
         2e:e1:47:6b:6e:1b:d6:7f:c6:03:00:a4:09:07:2b:bf:a0:df:
         b8:19:f2:3f:c8:e1:af:35:37:e4:04:a6:45:fe:73:82:cc:02:
         38:60:da:58:0f:14:42:55:dd:49:f5:e8:44:d4:b8:b7:2c:45:
         c4:68:8f:82:79:49:e3:95:25:db:a7:53:ed:32:53:24:f8:53:
         89:d6:69:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:54 2025 by rpki-client