Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b618ed-0eec-3a23-b955-d0d848d3a089.roa
File:                     a9b618ed-0eec-3a23-b955-d0d848d3a089.roa (raw, json)
Hash identifier:          T7PHxbhMrG4dgSxDz4ITnJNIdPeD7cySDqJqVyXsgjA=
Subject key identifier:   1D:C8:EC:5C:61:A0:26:E2:BF:CE:73:B4:43:6B:39:8B:70:E6:96:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C4D87ADBF58929FDBDE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b618ed-0eec-3a23-b955-d0d848d3a089.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        75.64.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:4d:87:ad:bf:58:92:9f:db:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=dfcc8fca-ed4e-47fc-a498-7a86eda6c2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:64:22:38:97:38:1e:95:7c:02:9e:c8:17:9e:
                    1e:c2:7e:d1:09:a5:f2:6a:e3:50:5f:df:c8:e2:ed:
                    37:d1:0f:a9:04:6c:e4:9d:32:e6:a6:8f:19:85:f2:
                    11:1f:10:ad:f1:a8:66:0b:39:3a:53:c7:ca:de:45:
                    ed:21:3a:b1:5d:da:4b:e4:70:c9:af:cb:0f:ae:3e:
                    b8:06:2c:71:d4:f9:31:ec:39:26:6e:83:89:28:b4:
                    d7:54:98:08:25:a8:fb:1d:9a:3c:b2:f8:ca:3d:10:
                    8c:fb:80:a0:a1:42:c4:47:54:28:76:a1:da:c9:d7:
                    ca:25:4b:e8:56:08:77:95:cf:a8:3f:40:46:62:82:
                    a8:ea:dc:6d:1b:ee:48:96:7a:30:82:70:72:bb:85:
                    35:37:fa:db:c9:b1:3d:32:e3:73:2f:dc:5a:8d:68:
                    74:4f:1e:1c:77:d5:17:e3:9a:12:c6:bd:0e:34:1b:
                    20:f4:47:b4:d2:2e:43:e7:ce:17:6c:bd:45:db:3f:
                    6e:f3:2e:28:8a:44:e8:e3:aa:9b:0b:e5:c2:9f:6f:
                    0c:5e:36:4e:5f:db:e1:7d:ed:d2:a9:be:b0:83:c4:
                    65:1f:0c:0c:3f:73:e7:d9:92:b9:d5:f4:b2:c7:db:
                    c3:ee:ab:29:ca:86:b6:82:f9:34:e0:3c:96:51:90:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C8:EC:5C:61:A0:26:E2:BF:CE:73:B4:43:6B:39:8B:70:E6:96:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b618ed-0eec-3a23-b955-d0d848d3a089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.64.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f6:cc:dc:8b:94:66:1c:c8:85:2a:ff:60:c1:15:94:cc:af:
         10:ca:f5:2d:45:98:b5:0f:29:b9:6e:ee:e8:b5:fc:1e:4f:94:
         e6:c4:18:c6:a3:ee:e2:4f:8f:02:c7:9f:62:22:10:dc:f1:7b:
         83:c9:7f:6c:d9:33:f4:48:d2:1d:4c:48:7c:9d:de:22:c9:49:
         d5:35:54:23:ed:f7:cc:b3:cf:e8:35:5b:d2:da:b9:a9:53:cd:
         11:cc:c8:64:30:20:42:94:ff:b0:7a:9e:62:ef:63:cb:c0:20:
         f9:0b:42:68:dc:6e:f3:78:28:30:83:3a:51:a8:cb:92:a9:34:
         df:2c:66:0b:00:2c:ee:12:71:29:2a:a5:a2:92:09:7a:c7:82:
         c8:af:d6:d2:2a:14:09:3f:41:c1:75:ca:eb:9e:a8:86:42:e2:
         67:ee:17:a6:1e:1d:ab:ad:8c:ab:58:41:c6:2f:dd:4b:07:ed:
         08:dd:bf:88:10:da:05:bd:4c:5b:3f:60:cd:3e:6c:31:79:24:
         38:ca:10:a1:73:96:3e:fe:17:91:ea:d0:ae:29:85:5b:59:94:
         97:0c:81:e6:5e:5d:6d:bf:21:5e:47:45:0b:77:41:fc:be:06:
         a0:19:ad:b2:a0:6b:8c:c9:cd:30:64:15:9d:65:0c:cb:8a:1c:
         00:87:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:54:11 2025 by rpki-client