Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8996dad6-7ce1-3a35-8d75-51a7259238b7.roa
File:                     8996dad6-7ce1-3a35-8d75-51a7259238b7.roa (raw, json)
Hash identifier:          xVKR8vKMA0eFxBAdSMrJ8MQSebWS2AryHuC1LstS6xk=
Subject key identifier:   36:30:DB:05:95:00:B0:FF:84:F2:D7:BC:F4:0A:28:A2:1B:FB:99:C1
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F432858494CC950D09DCC266BC3EA1B80
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8996dad6-7ce1-3a35-8d75-51a7259238b7.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     48842
IP address blocks:        173.199.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:50:d0:9d:cc:26:6b:c3:ea:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=65af344b-6216-4865-a6c4-eb090e6915be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:0c:39:ba:69:43:fa:54:a7:1f:4d:67:d9:
                    c1:8a:1c:c1:67:c1:ee:a9:9e:2f:49:29:98:41:6a:
                    39:cc:c6:f9:14:4f:ab:2e:7b:dd:27:c6:51:91:ca:
                    32:1d:bb:7d:c5:a7:de:4d:c3:38:65:23:72:55:48:
                    99:f4:d0:a0:16:56:0d:d7:2a:16:d1:7e:f8:1a:d8:
                    a4:78:29:96:c8:3c:af:4a:3e:70:2c:38:f9:f6:32:
                    32:8f:6b:bf:ea:e1:be:5e:bb:93:15:5e:1b:bc:10:
                    f8:90:42:de:68:2d:2f:94:d6:ef:c2:c7:1a:ea:94:
                    a0:e1:01:a1:bf:03:a6:65:d3:c9:8f:f4:85:dd:f8:
                    23:d2:4f:9c:7d:c3:f4:b6:d3:81:84:1b:b2:81:15:
                    7e:33:68:e6:da:7f:42:08:8a:d6:e2:e7:a7:da:19:
                    54:6c:dd:ac:a9:9a:53:7b:0e:10:0a:7c:94:03:02:
                    94:56:45:e9:48:e4:fc:fc:41:b7:dc:95:6e:79:48:
                    c5:d6:c9:f3:94:8b:d0:42:86:08:d9:31:f2:7a:95:
                    89:7c:a8:7b:88:a5:67:e3:5e:0e:70:0d:7d:c6:b3:
                    10:9f:75:51:95:b5:ca:ae:3d:08:36:8d:1a:ad:2e:
                    db:42:f4:84:e0:4d:db:65:d0:5c:e8:e5:c8:ef:55:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:30:DB:05:95:00:B0:FF:84:F2:D7:BC:F4:0A:28:A2:1B:FB:99:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8996dad6-7ce1-3a35-8d75-51a7259238b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:06:93:aa:2c:ac:b3:58:88:86:3b:b2:fe:e3:5c:55:38:4d:
         1d:8e:f9:f8:d3:99:ea:b6:f5:2d:c9:e5:64:69:c5:36:05:ee:
         94:e3:c3:ad:85:10:fb:38:c4:27:b2:39:89:41:76:99:6f:6f:
         ae:56:e2:5c:da:22:a9:b4:64:52:48:e5:3d:7a:e5:39:13:ab:
         ad:48:86:1f:33:3f:65:ea:5e:5f:d1:18:21:49:fe:77:51:a7:
         d9:bd:f9:ed:5a:45:4d:89:4e:59:00:65:59:dc:6a:c2:20:b8:
         cf:14:52:63:48:40:2a:57:9a:6e:dd:fa:f9:b3:29:65:b6:05:
         11:b9:da:a2:61:58:06:08:c9:25:54:5c:39:ae:1f:5c:c3:2c:
         f0:75:8c:df:7c:38:9f:8e:7b:27:8f:6f:c1:28:27:d4:67:35:
         a0:f2:dd:2d:23:c9:00:44:92:06:b7:44:43:12:84:e5:c3:4a:
         af:74:27:65:56:3d:08:04:37:7f:52:9a:8d:6c:80:cc:b2:33:
         8d:60:1b:89:86:a2:ec:75:86:d3:b5:19:3e:ca:50:33:92:ec:
         19:5a:4f:2d:65:14:d6:b0:4d:bb:94:07:b4:f2:ed:00:3b:4d:
         a5:5b:9e:95:71:c1:3f:10:5c:2b:e4:ff:ab:54:62:75:57:60:
         19:0a:4d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:08 2025 by rpki-client