Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6df39660-6581-3bb2-9a25-c98fcf6bd0c0.roa
File:                     6df39660-6581-3bb2-9a25-c98fcf6bd0c0.roa (raw, json)
Hash identifier:          w54ZinzGzZbXFs0hc80fW7et8l3fnjMlLbAcArZoPK8=
Subject key identifier:   BA:17:AD:C4:7A:60:84:3B:BF:F2:D7:4E:D4:6B:C1:63:76:EA:C5:01
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858489BA0B0136FA4A323AB9CF280
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6df39660-6581-3bb2-9a25-c98fcf6bd0c0.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     262287
IP address blocks:        64.64.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b0:13:6f:a4:a3:23:ab:9c:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=03cfa7c5-39d1-4a6b-aeba-07d4aa985a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:cf:2a:55:1a:e0:95:8e:d6:52:37:56:c1:
                    30:26:99:59:45:9d:4f:fd:a8:d2:7d:d4:d5:5b:b8:
                    6f:d0:33:13:6b:66:22:d8:27:e8:50:4a:3d:27:71:
                    f0:39:a6:f5:89:eb:b2:6c:6b:a9:8e:75:1d:5f:d2:
                    8b:15:e8:31:fa:23:12:4f:02:6b:22:63:0e:88:08:
                    99:63:db:43:53:92:d8:03:00:af:63:97:51:c7:f0:
                    45:f4:ab:a4:fc:b5:e0:82:d3:62:a7:01:3e:68:bf:
                    23:5f:ed:97:88:28:49:01:e9:6e:f9:c0:5b:71:e5:
                    22:9d:15:ac:bb:c4:cf:b9:96:f6:81:8d:30:a8:59:
                    4a:df:e7:20:a6:a2:f2:41:57:db:14:36:a4:33:0c:
                    93:bb:b0:af:df:15:b2:be:29:74:95:82:3a:5b:20:
                    2d:bf:fa:33:22:ef:d8:4c:b3:fe:b0:33:8e:a5:c8:
                    4e:3f:58:5d:23:99:90:99:ac:73:c0:92:e6:a0:91:
                    87:6b:fb:05:5c:3f:ed:be:68:d2:60:68:4f:4f:f9:
                    b2:3c:0e:61:44:7c:cb:5b:dc:dc:31:d5:e2:0f:38:
                    c1:bf:c8:69:d4:10:73:97:b8:39:e4:8b:b7:fe:b4:
                    05:d6:f5:14:a7:b7:88:50:97:bd:1b:74:c5:22:80:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:17:AD:C4:7A:60:84:3B:BF:F2:D7:4E:D4:6B:C1:63:76:EA:C5:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6df39660-6581-3bb2-9a25-c98fcf6bd0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ba:b7:2c:4e:1b:81:5b:b1:1b:62:e0:76:08:a5:59:09:c0:
         02:a2:53:8e:a6:1a:35:37:83:9b:f3:c2:1b:2f:b7:fd:25:59:
         c9:0b:20:85:25:8b:80:5b:7c:94:9b:b5:af:6f:37:39:82:fe:
         fb:5a:73:f5:fa:51:b4:04:bb:b8:9b:0d:ad:86:74:87:02:5c:
         43:dd:02:ed:36:9c:f1:ab:2a:3a:c9:ca:1a:e2:e0:2e:b2:00:
         10:17:22:87:26:5f:2a:3e:20:a6:8a:c7:22:1a:74:e3:12:0f:
         96:34:75:6b:de:9a:3d:06:cc:92:91:0f:87:3d:51:38:8e:69:
         00:e6:69:dd:ab:f1:65:9e:d8:e9:d3:e8:34:a3:3f:3c:66:5d:
         78:08:4f:12:f5:17:4b:a7:d4:88:a3:a2:4a:3a:03:c0:96:63:
         16:00:bf:a7:e8:36:e7:55:bd:a6:dd:27:7b:b2:87:3b:cd:d3:
         25:7e:35:23:06:a7:9a:92:3e:9c:b7:d7:60:9e:ff:15:8b:27:
         e8:f6:7e:b0:a7:b8:42:4d:a3:42:b2:bd:22:60:c2:ca:b6:50:
         7a:ec:f9:78:ac:4e:e0:91:a3:b1:0f:1c:4f:e7:17:88:02:e2:
         ac:af:36:1d:0a:96:7d:5f:8a:62:b9:23:22:90:29:6e:e2:06:
         0c:83:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:40 2025 by rpki-client