Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/e7ed24c8-02a5-38b2-9e5a-470cbe65d92d.roa
File:                     e7ed24c8-02a5-38b2-9e5a-470cbe65d92d.roa (raw, json)
Hash identifier:          uFe4LZEjURRNiE/HH1LaELdW0kjcJG5k5dPgUdkkYQ4=
Subject key identifier:   27:52:61:58:A1:B8:95:AB:F2:4E:64:EB:F7:25:75:64:A2:88:45:B5
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858492CB22D48A09935CB1DC8E780
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/e7ed24c8-02a5-38b2-9e5a-470cbe65d92d.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     48678
IP address blocks:        64.64.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:2d:48:a0:99:35:cb:1d:c8:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=c04e9fdf-daf7-4dce-8c3a-d8716e80a313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:f1:c0:54:c9:b8:d2:af:0b:57:37:94:ad:
                    9b:78:73:83:92:d9:d8:e7:60:87:60:4d:11:b9:55:
                    62:ff:8b:53:3a:34:21:b6:46:c0:85:9e:dd:90:31:
                    71:89:d0:08:4a:07:da:0e:62:0b:b4:72:dd:88:91:
                    6f:0a:e7:4e:59:9a:36:da:e3:4b:5b:12:35:37:5d:
                    f0:9a:90:e0:97:b5:11:ed:e1:c0:77:1d:02:13:d3:
                    5d:3d:b3:e3:88:1a:6f:89:f7:b4:e2:20:ad:f2:f5:
                    f6:f2:2e:d0:e1:48:28:30:00:a1:de:04:84:f7:f8:
                    f4:e1:18:db:be:42:45:1f:f7:94:12:ca:f3:94:fd:
                    1b:08:12:01:89:ef:66:a0:5d:de:e8:39:f1:1f:1d:
                    99:09:51:02:7c:9e:43:21:1f:a3:67:b7:d8:8c:84:
                    ee:8a:16:97:35:62:e6:d3:76:36:96:5d:70:96:45:
                    66:cf:a6:38:ce:3c:e0:90:4c:0f:73:9a:10:3d:3c:
                    0d:0b:c4:4a:b8:93:35:d8:fa:6a:85:42:f4:91:cc:
                    14:53:1e:4a:5e:0b:6f:c7:9d:29:1d:e0:9c:29:0f:
                    0a:c3:3b:ab:72:22:61:dd:cb:19:d4:98:fe:38:77:
                    c0:19:ca:ea:ee:25:7e:ab:bb:68:4c:80:82:0e:59:
                    3c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:61:58:A1:B8:95:AB:F2:4E:64:EB:F7:25:75:64:A2:88:45:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/e7ed24c8-02a5-38b2-9e5a-470cbe65d92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1e:36:72:c6:3e:bd:1f:43:37:3b:6d:4a:d8:ef:10:9d:2f:
         05:83:70:9c:79:d1:0a:8e:d6:62:d7:7c:73:cb:55:e8:25:44:
         0c:b5:f0:09:7f:1c:6e:b4:b7:bc:ad:b8:fa:f9:07:17:25:79:
         fa:5f:56:64:38:e8:5a:70:3c:f9:04:ef:51:33:1f:2f:ef:66:
         5f:ac:cf:42:d9:86:24:bc:d2:56:81:ef:f6:f6:0b:38:37:21:
         20:33:89:27:c6:0f:24:86:9c:44:35:14:28:74:b9:60:1a:2c:
         e7:31:ee:9a:9b:3c:3e:5e:cb:e2:aa:73:26:f6:4c:db:3b:01:
         11:1d:ad:e4:7f:68:98:3a:6e:18:3d:4b:6d:07:86:34:94:45:
         da:29:30:55:bd:ee:e0:40:64:fd:ad:de:b5:19:77:e5:6b:54:
         60:df:19:bf:62:85:e8:43:ca:2e:71:c8:1f:e0:06:6e:49:7e:
         30:5a:ca:58:59:05:32:e6:95:6f:64:f1:16:a2:eb:79:8e:a5:
         2c:b1:81:82:95:4a:87:c4:8e:09:fd:87:50:87:e9:57:17:c3:
         44:1a:53:28:8b:a8:92:f0:12:79:13:28:db:f6:ef:22:e3:3b:
         c7:20:93:c9:a5:44:e5:4d:cb:67:64:cd:55:d5:38:a8:19:b1:
         92:06:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:31:20 2025 by rpki-client