Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1f42ae78-0f4f-336b-aec1-8db97ea0d781.roa
File:                     1f42ae78-0f4f-336b-aec1-8db97ea0d781.roa (raw, json)
Hash identifier:          iTtUf6VSzLQEV9FTwzowUErNBcaxQdjvU6coeMJ/gg0=
Subject key identifier:   C8:3A:AD:C2:79:0C:45:B8:89:7F:9B:2E:43:C2:EE:DF:43:3E:6C:D6
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584949FEB43770E407E97BCC3CC0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1f42ae78-0f4f-336b-aec1-8db97ea0d781.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     398101
IP address blocks:        64.202.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b4:37:70:e4:07:e9:7b:cc:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=3a0c04db-272b-4e67-8b84-336d34f61630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:66:5e:aa:1a:37:e1:6b:9a:c2:8b:25:71:
                    d3:c0:31:43:30:3f:33:fe:bc:59:9d:7d:98:1b:32:
                    f7:ad:26:8f:2f:2b:3b:b7:5d:98:aa:6b:63:36:1f:
                    fc:e2:d8:94:d4:16:b8:ff:43:e7:d3:b1:c0:99:b9:
                    bd:98:3a:f9:fb:2d:1c:96:6f:85:e0:52:e9:93:31:
                    ff:7f:2f:f1:72:5b:f6:ca:bf:06:e5:33:7a:f9:6c:
                    a8:1a:59:d4:41:8e:bb:c3:5b:11:2e:6a:4e:64:1c:
                    11:a2:80:f3:b6:f0:87:1b:ce:c7:cf:a7:af:ff:1e:
                    dc:1b:f1:c3:24:4b:43:28:c2:df:a7:bb:ee:d8:67:
                    5f:25:19:81:08:c7:bb:67:d1:ba:a7:4e:f1:6f:ec:
                    0a:f3:47:8c:32:68:01:33:e8:bf:6c:95:5e:1d:9b:
                    c7:66:56:be:61:74:14:ba:51:03:1f:ed:12:be:4b:
                    7e:aa:c0:31:51:b9:e2:d8:56:c2:8c:b3:a9:9b:07:
                    50:2b:5c:7c:7d:53:08:81:bf:ea:66:56:00:55:21:
                    79:e7:fc:84:2d:2e:11:7e:09:0e:b3:a7:53:44:ef:
                    c9:4f:f5:e2:a1:42:0b:9c:10:03:43:01:b8:a8:dd:
                    55:8d:8e:c9:00:af:1f:10:0a:09:2d:d0:f5:d0:97:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:AD:C2:79:0C:45:B8:89:7F:9B:2E:43:C2:EE:DF:43:3E:6C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1f42ae78-0f4f-336b-aec1-8db97ea0d781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:62:74:2f:9d:d9:53:06:9c:76:3d:97:14:0b:e6:13:0d:b4:
         30:8a:29:47:5a:4d:49:24:ac:ba:70:10:01:08:f1:4c:a2:02:
         a4:e8:2b:21:d4:db:b5:33:39:06:04:e5:75:be:39:0e:75:f5:
         12:ce:7d:3b:10:5a:c3:91:a5:2c:2f:ff:b6:40:af:0f:bb:77:
         43:05:44:1a:69:64:f6:8e:6e:9f:4e:96:ef:33:ec:24:8f:c8:
         d9:54:a8:6a:f1:be:4d:b4:77:31:03:05:eb:4b:2d:62:7c:42:
         f1:67:8e:9a:46:1e:81:e5:e1:72:99:17:1d:07:53:10:e7:e2:
         05:87:db:e3:5d:19:f4:61:da:03:8f:08:b8:22:06:a8:7e:f2:
         8c:71:e6:37:8a:48:ca:56:20:d9:9d:67:49:d0:d1:77:ff:1a:
         3a:53:23:d1:62:9c:ca:57:0c:2a:34:fb:4a:b2:3e:ee:ac:f9:
         59:ec:98:ed:5c:24:3b:06:3d:b7:79:1b:a7:f6:45:ee:00:74:
         0e:33:f9:37:89:e0:fb:f2:3b:98:c5:d6:96:94:17:e3:77:a1:
         c2:fd:4a:f0:e0:5e:42:c0:ee:b6:89:47:7b:45:9f:cb:c7:1d:
         70:e8:11:c1:0e:b2:54:c8:b4:68:14:6b:16:c7:f8:c8:72:4c:
         ff:26:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:26 2025 by rpki-client