Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3bc19f11-5e48-3eb8-b0ba-61a881700277.roa
File:                     3bc19f11-5e48-3eb8-b0ba-61a881700277.roa (raw, json)
Hash identifier:          TlVday7QQmWtq6pcE7mJojQBKvD2nLP8tk+ZRnlqm1g=
Subject key identifier:   32:1B:68:A7:BC:1F:0E:C5:B0:48:1B:BB:92:18:37:88:32:B0:A1:CB
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F432858489FD099E5867C1ABA04FDEDC0
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3bc19f11-5e48-3eb8-b0ba-61a881700277.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     11325
IP address blocks:        64.79.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:99:e5:86:7c:1a:ba:04:fd:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=d7f1b3ca-deba-449c-904c-9270ff171a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:76:5b:42:e9:a4:55:c9:be:d8:51:18:45:46:
                    12:7f:3b:45:30:8a:48:9f:80:42:c1:21:21:14:a2:
                    18:e1:1f:cd:6e:16:ab:aa:c6:1e:f4:96:bf:f7:a8:
                    f3:a1:bf:ef:7f:5f:02:71:d1:b8:e7:d6:0d:fe:26:
                    5b:f2:01:66:2e:75:b7:9f:6f:83:88:a4:56:80:cb:
                    46:e6:7b:91:ef:a0:2d:08:24:51:c8:32:7c:ab:42:
                    e5:b5:86:58:e8:78:64:7e:45:33:29:72:95:95:ce:
                    5d:fd:e9:86:6e:31:d9:1b:93:65:86:9b:5b:f7:54:
                    66:b1:32:cb:d4:99:16:5a:ba:bb:8b:a9:36:f8:fc:
                    2d:41:a3:c8:ac:f0:8a:a2:a4:3a:ae:f7:45:31:e5:
                    8b:26:60:b6:20:d2:53:b1:35:df:92:2f:34:cc:f9:
                    17:e7:30:a1:eb:43:e9:ee:9a:9e:43:6c:36:de:c3:
                    a2:22:65:17:5f:e3:83:99:77:da:34:14:81:51:34:
                    9a:1f:a8:bc:0c:03:27:9e:60:35:8f:8a:1c:b3:1b:
                    68:4c:ef:89:6c:8c:a4:61:ff:70:22:f8:b8:5d:8a:
                    14:bc:ba:71:3d:1e:e1:33:d4:36:c0:3a:e5:d0:fe:
                    f1:f4:8e:5d:cb:e0:ca:39:05:39:60:3a:d7:7b:d7:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1B:68:A7:BC:1F:0E:C5:B0:48:1B:BB:92:18:37:88:32:B0:A1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3bc19f11-5e48-3eb8-b0ba-61a881700277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a3:e6:21:66:99:57:46:1e:d1:f7:c8:71:c5:e0:76:c4:4a:
         e5:a5:b5:39:62:e6:00:b4:4f:e0:bd:01:68:f6:43:c2:f5:2c:
         af:f3:ee:a5:e3:fe:97:b9:bc:6d:ff:a8:6f:42:ab:78:fe:09:
         14:65:4e:0b:62:39:fd:51:3d:ec:c3:01:20:4d:d2:bd:bc:2a:
         7d:86:16:fe:9c:bb:b7:6f:2c:13:10:bf:ae:ae:61:c3:22:5f:
         97:76:db:e8:e0:6b:b8:7a:87:06:9c:a5:cf:ca:74:14:4b:7a:
         00:b7:79:07:4d:d7:d6:e8:f3:3f:d5:ee:59:04:7a:ea:2e:d4:
         89:50:a6:d4:2d:7e:64:e5:fe:71:c1:8a:5b:a9:ec:64:56:b6:
         29:2b:1f:93:02:2d:d8:5c:54:b2:c8:63:4b:91:aa:63:b7:d2:
         4c:5a:2d:aa:3f:68:a9:f2:38:8a:5f:c1:73:e9:92:fa:63:f1:
         bc:4c:39:7d:14:ea:19:a9:19:1c:4d:51:88:6b:a7:d3:11:94:
         bb:5c:d8:68:e8:89:44:6e:73:7e:59:78:76:0b:fd:8a:17:be:
         e2:49:d5:f1:87:8f:5f:e2:a8:45:87:5b:6e:4d:45:2e:c0:2c:
         0a:22:d9:fe:aa:cb:42:13:5f:10:81:e5:df:5a:2c:6f:83:f4:
         11:18:79:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:55:38 2025 by rpki-client