Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/d05fa414-96e2-30e1-b6f3-b33c65db9743.roa
File:                     d05fa414-96e2-30e1-b6f3-b33c65db9743.roa (raw, json)
Hash identifier:          fhs05k8LyX6e1N38R5wNVfinLPElmx8A1+se89yKyZA=
Subject key identifier:   AF:B3:67:1A:B4:07:E2:D5:3C:04:21:65:6C:EB:28:96:D1:A8:2C:8B
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F432858486D905BBBC7A8D971FBB40C40
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/d05fa414-96e2-30e1-b6f3-b33c65db9743.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     20473
IP address blocks:        64.176.0.0/15 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:5b:bb:c7:a8:d9:71:fb:b4:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=299b2b10-403c-4cb5-8696-817eed6f9b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:a1:72:f6:e1:8b:34:ca:43:6d:6b:a5:9a:
                    a2:3d:54:de:99:cb:24:10:64:cf:63:86:6e:f5:69:
                    00:36:7a:40:de:b2:c7:10:34:9b:82:ed:3c:f8:da:
                    51:7c:a8:e7:3d:2d:cb:b9:bf:cf:73:69:4f:36:37:
                    91:b2:ee:34:7c:b2:48:df:99:4f:83:d2:e5:0e:0b:
                    22:69:87:dc:2a:b1:bd:05:d9:7b:23:ba:de:dd:36:
                    9f:fe:35:d1:fa:6d:d8:4a:90:89:81:dd:0d:cb:75:
                    4e:58:36:96:19:bc:35:a8:9e:02:05:ee:72:39:a5:
                    98:69:1e:25:a5:d8:79:19:20:39:02:55:c2:5b:a9:
                    22:cd:12:87:32:27:2b:e5:5c:45:cf:00:7a:ae:f3:
                    d1:1b:e0:9b:08:f7:48:58:da:24:0b:5e:8a:df:c8:
                    72:ae:52:88:b8:6d:e9:04:ce:6e:db:88:85:d1:99:
                    2c:3d:00:0d:c3:fa:07:60:de:93:e8:36:24:03:e7:
                    79:2e:1f:c8:a9:e7:47:a3:a7:b4:36:ba:31:e7:b1:
                    9a:d8:54:b2:ea:35:ff:ab:15:24:80:13:dc:b7:2f:
                    7e:b3:e9:d6:3c:a1:e7:04:3a:67:d5:e6:8d:8d:f9:
                    59:67:d6:e2:34:23:31:81:b2:a1:2a:14:67:d2:8d:
                    da:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B3:67:1A:B4:07:E2:D5:3C:04:21:65:6C:EB:28:96:D1:A8:2C:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/d05fa414-96e2-30e1-b6f3-b33c65db9743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.176.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:25:73:3c:46:ca:69:d6:89:ea:89:5f:b7:c9:60:5b:8a:b6:
         33:43:a0:db:95:51:8a:4a:dd:fd:d5:76:e8:ea:bb:25:94:5d:
         1a:32:a2:97:5a:4d:f0:9d:7f:77:34:26:9a:ea:76:be:dc:8e:
         c4:f9:d8:89:b8:03:25:5c:f8:49:59:5d:f0:ab:a5:c8:23:bf:
         64:8e:95:f3:3f:3e:b3:21:39:71:81:82:f7:f1:8c:3e:e0:b9:
         00:62:51:d2:72:48:27:97:48:69:03:a4:62:06:97:c7:fa:2f:
         d2:56:20:1c:69:6e:5f:2c:4b:63:6f:0b:18:56:93:c5:4e:47:
         13:42:2a:88:f5:aa:1d:7a:dc:4d:31:a8:62:10:3a:3a:d6:32:
         a8:d7:d5:90:03:77:57:cc:4a:c5:d1:00:d8:f6:a9:b1:09:03:
         83:4c:16:f2:84:ad:2f:eb:da:5a:fa:d8:d9:7f:ee:fa:10:bf:
         c5:1a:5a:f7:96:c1:fd:8b:56:0b:d2:58:06:e0:1e:8c:e0:3f:
         f4:83:47:ea:a1:3f:b8:c5:4d:3c:61:95:af:15:44:79:95:34:
         44:ae:78:00:8a:42:85:03:d1:84:5f:fd:fd:0c:e0:cf:f8:4a:
         32:d3:72:e4:fe:f1:db:8c:73:01:04:ce:62:a1:40:8d:37:75:
         1a:5f:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:41 2025 by rpki-client