Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ff075efb-4093-37f2-aab6-f7a7a214d5c7.roa
File:                     ff075efb-4093-37f2-aab6-f7a7a214d5c7.roa (raw, json)
Hash identifier:          +dIcYIMK0aT1hyqGgTl7q5WjUMgCLirtYiKQSgn0LiE=
Subject key identifier:   B4:2C:19:31:60:83:F7:FA:1D:9D:58:B4:2D:10:20:70:E7:21:15:27
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858492E13C652036095267B8286C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ff075efb-4093-37f2-aab6-f7a7a214d5c7.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     64286
IP address blocks:        64.64.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c6:52:03:60:95:26:7b:82:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=a51e6f4f-b653-402e-af4b-49e491ea0b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:7f:9d:5a:a3:92:08:40:03:ea:81:f7:d6:
                    41:af:30:22:6b:24:a0:ac:80:cd:a4:05:3d:7d:74:
                    5a:36:90:63:11:79:e4:e6:da:00:48:5d:ff:12:f4:
                    17:6c:b7:1e:90:33:df:72:8e:2d:a4:4d:3f:e2:f5:
                    f8:73:dc:a3:46:10:c7:1a:c2:e6:ae:32:57:07:3e:
                    cd:43:ff:b9:38:2b:2d:a8:f6:82:63:65:47:46:02:
                    70:3d:de:2a:a9:ae:11:d7:3b:94:1f:25:78:c6:d0:
                    49:be:42:ec:5a:fa:81:a9:e2:96:6e:a3:91:80:a4:
                    e8:2a:d7:0f:6f:60:5c:4f:6a:d2:43:b0:6e:79:0f:
                    5e:ff:e3:91:9e:f1:19:29:5b:11:94:3a:8a:ab:ef:
                    0c:4b:20:a1:ed:8f:03:49:23:d9:3b:29:2a:19:80:
                    22:a9:ee:7b:23:c1:53:e9:e4:9f:4a:e6:56:9b:b5:
                    5d:75:81:1e:b1:18:9b:5f:26:60:b9:a3:05:31:6c:
                    9c:67:fb:a5:89:db:31:f4:5a:a3:42:c2:e4:68:9d:
                    53:12:9d:91:a7:10:78:3f:04:8e:6b:f2:b0:45:75:
                    01:c5:50:0e:c5:a4:16:0c:72:db:94:f1:a2:1b:85:
                    d2:a3:95:fb:53:f7:47:9e:ce:f1:54:3e:39:68:41:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2C:19:31:60:83:F7:FA:1D:9D:58:B4:2D:10:20:70:E7:21:15:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ff075efb-4093-37f2-aab6-f7a7a214d5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:5c:27:aa:d8:d5:4a:55:32:39:7f:f4:ee:75:7d:d7:b8:
         20:66:fc:aa:00:7a:a2:46:c9:a0:e3:c7:d8:f9:55:94:c6:12:
         95:ea:5d:94:bd:0c:2b:27:86:ec:ea:37:2d:ec:26:eb:57:13:
         c6:31:cb:27:13:32:c5:7c:3a:67:bb:74:e3:13:fa:c4:da:18:
         47:36:25:41:8c:9f:57:4b:92:d8:4f:65:a1:1f:fb:fe:1a:dc:
         b8:b5:e5:93:5b:13:e9:58:38:a3:52:9e:45:20:3e:5b:dc:36:
         34:14:09:1e:64:7b:82:90:88:20:f6:9a:20:07:02:05:2c:a8:
         4c:98:62:e5:70:97:24:79:af:22:a6:0e:47:31:92:35:6d:15:
         01:ac:1d:72:66:cd:12:5a:ee:93:83:2b:a1:fe:e4:a1:29:2f:
         e4:ea:ea:68:8b:f1:d8:c2:e8:0c:19:08:82:e3:2c:c7:08:d7:
         91:5f:a7:d6:5f:7f:86:5e:07:6c:88:46:70:b9:41:89:fb:7a:
         0d:e8:f0:ca:3a:d0:3c:5d:13:8c:f4:05:94:58:fe:05:22:75:
         07:05:2d:97:24:94:63:47:7c:a3:08:bc:6e:0b:9d:24:e2:ba:
         37:50:6b:80:ad:27:0d:01:3f:52:e2:7a:80:11:d2:f6:74:0a:
         bd:94:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:06 2025 by rpki-client