Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6123d21e-a367-369f-88e9-efbc6383f726.roa
File:                     6123d21e-a367-369f-88e9-efbc6383f726.roa (raw, json)
Hash identifier:          rEsxNifu0979LZPJM5C3bMBBJPuB2N4hQHgWWilqgQY=
Subject key identifier:   22:CE:CC:9B:B8:BA:C1:EF:62:F1:E6:65:90:B4:E0:41:B7:FD:58:8B
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584894A5EDEE2687BDD9C637E760
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6123d21e-a367-369f-88e9-efbc6383f726.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     64286
IP address blocks:        64.64.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:ed:ee:26:87:bd:d9:c6:37:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=4049bba3-7e67-4a25-82be-761b50aa0405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:49:0e:c9:89:a5:d6:38:08:e3:cb:89:0f:
                    41:75:d2:27:68:22:36:52:8a:37:36:6b:33:e7:68:
                    bf:eb:22:e5:6c:91:b5:0d:5e:f5:14:2a:77:61:9e:
                    8c:38:6d:57:db:4b:ea:46:b4:2d:5c:14:0f:64:43:
                    6c:fe:7e:4d:34:45:d3:1e:93:49:09:69:b7:0b:51:
                    52:39:f7:a0:7d:e0:10:e8:d7:a2:02:6c:2a:19:f5:
                    2b:17:b5:62:07:20:e4:67:ea:02:a7:9f:d7:ab:8b:
                    2f:04:00:b8:a6:b2:c3:55:e5:40:5f:86:bb:5d:4e:
                    f3:01:2b:89:67:87:d9:ce:d7:12:23:fa:b4:63:7f:
                    48:1f:91:ea:f6:02:ff:02:47:60:fc:43:a7:ee:b9:
                    53:1b:11:9c:87:4b:af:c6:98:e7:19:3e:ee:5e:f9:
                    65:54:49:39:4f:07:33:e0:b9:34:1b:c1:a5:41:f8:
                    12:1e:10:fb:21:3d:fe:6b:98:1d:5b:a8:dc:9f:30:
                    94:ac:32:87:8b:f7:09:03:33:c8:54:14:03:57:b4:
                    07:0e:eb:de:ad:72:5a:25:02:fa:5d:01:0d:6a:00:
                    32:96:43:5a:50:1d:55:ae:2f:f9:6b:bc:d1:fa:b9:
                    1e:b3:f0:b4:d7:62:9a:7f:72:c6:a4:34:e3:b9:79:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:CC:9B:B8:BA:C1:EF:62:F1:E6:65:90:B4:E0:41:B7:FD:58:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6123d21e-a367-369f-88e9-efbc6383f726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:86:cc:02:3f:ae:b5:48:14:37:ff:fa:a5:93:59:3c:bf:aa:
         e8:a1:91:c3:15:21:9f:06:a6:12:77:95:9c:33:29:e7:02:2f:
         98:0d:09:d3:68:04:9b:a3:10:27:0f:24:a4:78:ff:32:ca:b5:
         4e:ed:e0:35:ee:eb:39:47:59:22:42:e9:34:f1:ca:46:f5:2a:
         1a:98:8a:50:f8:07:98:48:3a:de:ce:11:dd:81:40:79:b5:67:
         a5:43:e2:0a:4f:88:61:7f:6a:34:44:34:78:29:29:9f:ec:9f:
         27:eb:ad:a8:21:15:c0:c5:45:43:fe:a9:ce:54:cc:50:46:5f:
         51:c8:19:a1:52:be:16:e9:ea:46:f8:7e:bf:df:9e:76:de:a7:
         3e:a0:7b:7b:da:47:b4:44:0b:54:fb:7d:2a:d3:45:7f:f2:11:
         93:f6:89:74:4a:fb:c9:5c:d9:a7:ce:91:f1:9f:23:d3:cc:7a:
         4d:3e:2f:75:89:af:99:4a:91:bb:47:2a:0e:f7:91:14:f4:8a:
         88:a3:9f:8b:de:09:ed:b2:ae:69:eb:eb:12:8d:54:4c:e1:f3:
         25:12:49:63:f4:64:d7:59:7a:7f:6c:61:3c:61:ce:63:b4:9d:
         e8:ea:10:55:da:5c:bc:0c:28:75:8a:c0:9c:bb:e3:11:77:89:
         5b:25:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:33 2025 by rpki-client