Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36486884-d2cb-36db-8e35-20cc21d19cf3.roa
File:                     36486884-d2cb-36db-8e35-20cc21d19cf3.roa (raw, json)
Hash identifier:          Cm/mcAiCZTbIqu7MhTx0v8emrEoHVIDD9l6PNHA5tfE=
Subject key identifier:   5E:4A:FE:1E:1D:C5:FD:3B:57:9A:FD:10:30:27:2E:8B:9B:1A:5B:AD
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285848B1F62D2B72EC290D369709C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36486884-d2cb-36db-8e35-20cc21d19cf3.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     33548
IP address blocks:        64.194.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:2d:2b:72:ec:29:0d:36:97:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=0aec5f97-4892-4a99-b982-04971d38f8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:4f:79:f9:5d:bb:ce:95:f5:34:72:17:ef:
                    1f:7d:66:25:39:85:e2:4c:eb:f7:9b:34:c0:f5:a8:
                    a6:0f:39:40:f2:c8:2e:a5:36:81:ea:59:9a:83:e2:
                    cf:d1:52:b8:7a:a4:09:e3:e3:52:89:42:18:41:e2:
                    ca:d1:e8:7f:62:b8:6f:89:ad:01:b9:92:91:a7:d8:
                    e3:dd:2e:55:d6:15:aa:8f:d1:64:bf:bc:71:ac:83:
                    d7:60:08:d1:e6:60:a3:c6:db:d0:b7:7e:2d:d3:a2:
                    ed:e5:f2:40:c3:4f:6e:54:89:cc:4b:0d:15:8b:02:
                    56:18:53:a0:dc:14:f1:02:e0:b2:05:4e:fd:fc:45:
                    aa:69:07:0e:32:27:7d:43:c7:d2:77:6a:c5:55:7d:
                    15:e4:31:4c:86:0c:7d:e9:05:0f:fb:ac:b0:b7:4c:
                    73:74:2a:6a:2f:9c:43:01:23:33:c9:dd:29:d4:7a:
                    3d:f3:bc:17:80:ad:69:1a:a7:f5:d2:77:5a:e3:c3:
                    da:48:48:6b:27:1a:bf:7b:51:2e:27:f4:01:a4:ef:
                    52:42:ee:5d:38:e4:f9:f7:06:ef:8b:69:24:a3:2b:
                    28:f1:a8:3c:13:2d:b2:ef:2f:a8:c3:a0:85:94:a7:
                    db:ec:a8:54:e2:e7:eb:f9:1c:0c:ae:7e:5c:fd:59:
                    f0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4A:FE:1E:1D:C5:FD:3B:57:9A:FD:10:30:27:2E:8B:9B:1A:5B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36486884-d2cb-36db-8e35-20cc21d19cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.194.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:17:1a:30:c3:56:e5:81:a6:da:3d:aa:cb:0b:4d:75:69:a1:
         d2:a0:30:0c:c8:00:e3:21:2f:91:9a:56:19:69:c5:85:7c:46:
         b6:22:06:4b:e0:8d:9c:28:7e:81:bc:8a:a5:6e:6f:69:eb:91:
         3d:fc:cf:71:d7:1b:e9:51:06:d2:7d:ff:a0:2d:86:68:9a:71:
         5b:ef:2c:9a:5d:24:b7:38:fe:f0:24:4f:84:ac:b6:c4:8d:9a:
         b8:7a:48:6e:f4:2f:0b:d8:24:67:e4:04:d3:19:06:ec:0e:fd:
         69:74:59:b1:2e:a2:7b:93:76:be:ce:75:ed:8b:c9:80:13:e7:
         32:c3:07:72:87:59:41:be:33:f6:a9:bd:80:57:a8:d2:7c:71:
         5b:cb:b5:2f:ee:3c:54:46:dc:07:f2:96:0d:d6:75:4d:24:8d:
         17:aa:60:dd:4a:d0:8b:c1:eb:7c:7e:4d:ac:8e:fd:43:b0:d8:
         a2:32:0e:df:d2:e1:9f:a9:eb:40:bc:d1:fa:67:64:04:17:ce:
         9d:8a:da:59:a3:ae:ae:9c:ed:8f:d7:6e:34:50:f3:00:42:fd:
         aa:f7:64:70:94:e4:fd:08:87:e3:dc:db:e7:05:26:b2:8e:ed:
         01:f7:85:86:ba:41:eb:b2:85:17:2e:0c:67:5a:bf:9f:6f:43:
         5e:17:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:24 2025 by rpki-client