Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/123c5070-8afe-3cce-958a-2fef7f4b310c.roa
File:                     123c5070-8afe-3cce-958a-2fef7f4b310c.roa (raw, json)
Hash identifier:          Z03ss2DAeV/HgzGXlQCIgS3SbbKid4GLrn/+PhndtmU=
Subject key identifier:   6C:3B:9E:66:9B:C3:33:F1:F7:96:C3:80:0C:B3:BB:62:97:61:F4:EE
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F43285849674EEE170C96EB036A412000
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/123c5070-8afe-3cce-958a-2fef7f4b310c.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     32133
IP address blocks:        64.98.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:ee:17:0c:96:eb:03:6a:41:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=6277997d-3aa0-4c2e-a7e6-9ff93a7837e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:57:01:bf:c9:a3:2e:97:be:93:2e:50:2f:
                    90:ca:16:1d:fb:e1:29:c6:de:f0:0f:14:23:20:b3:
                    16:76:87:82:5f:72:2e:a4:47:b0:b9:47:f6:bf:1d:
                    d3:e5:a3:24:ac:20:2b:a0:c3:05:d5:ab:3c:84:a5:
                    e9:e0:25:77:b5:2a:d3:6d:2c:d8:25:05:dc:c4:ac:
                    67:24:65:4d:48:2f:10:95:fa:75:fe:c3:e0:ca:2d:
                    1a:ef:4e:a0:19:a0:00:1b:4a:81:06:a8:c7:f4:0e:
                    23:c9:1e:3c:c7:3b:df:29:d1:af:52:9e:88:e9:98:
                    d6:e6:f8:88:e0:46:9c:c4:38:3a:af:d5:52:bf:bd:
                    10:a9:e5:d7:3b:9c:d7:74:d1:5e:86:d7:8e:a3:83:
                    02:ea:d7:d5:75:d9:82:f2:61:49:ea:e2:ee:6c:a4:
                    f0:61:f6:14:99:42:fd:67:bd:e0:fb:78:28:b0:7b:
                    49:70:ee:da:43:30:2a:7f:48:54:81:92:2e:19:ac:
                    36:e1:d7:86:6b:7e:b8:e6:e5:d3:05:25:3c:b7:83:
                    43:0e:62:2e:00:b3:1e:cc:68:c5:ac:c7:8f:6c:25:
                    bf:0b:81:9e:9e:d4:d2:93:be:4e:ca:0b:df:95:6d:
                    39:cd:31:f5:eb:8d:f7:a8:5d:aa:e5:c1:63:eb:0e:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3B:9E:66:9B:C3:33:F1:F7:96:C3:80:0C:B3:BB:62:97:61:F4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/123c5070-8afe-3cce-958a-2fef7f4b310c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:ba:de:5d:d2:58:0d:a8:68:79:de:60:92:ac:e6:78:07:
         1d:d2:fc:d6:c1:66:dc:96:76:5e:32:9d:5b:37:c6:23:f8:bc:
         8f:ef:99:b9:e7:e1:a1:65:49:88:de:70:fa:5b:38:fd:e4:dc:
         d4:af:82:0c:d4:a2:94:44:cc:9c:b1:ce:8a:2d:7d:c0:f1:c1:
         f5:31:2d:07:da:d8:61:9b:68:30:37:06:59:04:eb:11:97:4f:
         da:cb:a9:b1:ec:cd:fe:7d:cd:93:a0:b7:67:78:f7:ac:30:c0:
         cd:f7:f1:b3:92:74:70:67:1e:56:d9:f8:7a:79:0a:28:7e:03:
         61:2f:95:ff:3a:22:0c:8a:62:ef:06:50:4b:cd:df:7b:53:15:
         74:f5:b5:b7:23:4c:ed:44:24:3f:5a:55:59:54:2f:4b:a1:06:
         f9:77:0e:65:9e:68:70:56:4d:49:51:bb:95:56:8c:7d:b2:69:
         9f:d4:be:b7:de:71:c0:17:ca:c6:0e:55:d9:75:85:b8:e6:0d:
         59:90:15:ab:6c:40:7e:d5:dd:12:45:91:f0:37:57:5e:6f:ad:
         06:fc:3e:c6:0d:3d:8d:28:25:b0:35:eb:8e:ee:14:99:34:96:
         08:ba:bf:29:30:fd:dc:5c:2f:65:cf:b6:f5:0f:e4:b5:28:73:
         ec:a7:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:11:20 2025 by rpki-client