Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/578746b4-8a0d-33f0-8df9-e36b90b59b93.roa
File:                     578746b4-8a0d-33f0-8df9-e36b90b59b93.roa (raw, json)
Hash identifier:          WMiu7GPKWrhpUbLp5FEbQDCZOpZXwWYznZfQY5yJtrk=
Subject key identifier:   A1:07:47:3A:97:9D:F0:B6:7F:F6:5E:98:B0:03:1C:9F:EC:ED:08:28
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584834557E9B4BC7054A7F1D0280
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/578746b4-8a0d-33f0-8df9-e36b90b59b93.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        64.99.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:7e:9b:4b:c7:05:4a:7f:1d:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=a4f3f2e8-ddda-4daa-b747-707e33adee5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:cf:99:c2:1e:31:46:f7:4d:9f:bc:e8:49:
                    2d:34:f6:15:25:28:6f:ff:e5:8f:18:58:ab:d0:9d:
                    43:2f:bf:07:4f:1b:33:39:1e:c2:1b:ad:48:7c:13:
                    cc:90:8b:ca:e9:ba:cf:5e:d3:bf:b8:7d:e0:eb:73:
                    99:72:23:28:b3:23:ef:31:e9:57:65:77:01:dc:58:
                    24:9b:70:ca:4e:2a:ce:6b:a4:58:17:e1:9e:97:ee:
                    43:cc:fa:01:4a:c8:78:ef:8f:ab:55:4b:87:60:fe:
                    98:40:4c:fa:e2:27:be:14:82:35:b5:40:d5:a5:e9:
                    be:10:a9:bb:a6:aa:e4:1c:de:07:51:e9:5d:59:8b:
                    3c:22:18:9d:c1:f5:6d:3d:74:d2:03:04:09:82:ed:
                    95:5e:24:3b:2f:ee:e3:8e:a2:61:24:37:d1:a6:2f:
                    60:eb:79:6d:af:c6:f3:96:73:13:c6:c8:e4:e8:35:
                    3c:b6:a7:af:e9:57:1b:5d:98:88:a7:0e:65:53:28:
                    d0:47:c6:34:a0:58:5d:de:1c:17:99:09:87:15:36:
                    5b:71:9f:fc:75:e8:cb:aa:05:19:be:b6:71:25:c7:
                    a1:32:34:87:43:48:35:b7:21:4e:95:ff:8b:db:00:
                    34:4e:e6:6c:6d:e2:ee:24:a6:af:bc:6c:d7:28:80:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:07:47:3A:97:9D:F0:B6:7F:F6:5E:98:B0:03:1C:9F:EC:ED:08:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/578746b4-8a0d-33f0-8df9-e36b90b59b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1a:08:3d:03:61:2f:d7:8b:bd:50:02:fb:5c:b6:e8:8b:78:
         45:e8:7e:2a:7d:8f:cc:de:b6:b1:7e:50:91:9a:3f:69:d8:b4:
         d6:41:11:97:11:2e:b5:68:d8:d6:54:44:31:ad:b9:23:db:e3:
         f7:b7:6c:92:b9:77:1f:f5:e7:78:96:0c:9a:1e:14:ff:fe:a5:
         cf:c2:d4:6d:6a:9c:f2:6f:e9:2f:33:f8:51:c1:64:83:dd:31:
         8a:e5:3a:a4:8d:57:77:74:b1:34:41:dc:47:94:7e:e9:6e:b3:
         f1:09:01:86:ea:ad:97:fb:c2:75:84:d0:16:3b:c1:bb:30:b1:
         dd:03:56:4a:88:0d:a2:90:06:ad:7f:82:df:04:61:fd:fb:bc:
         16:9b:f4:70:ac:7a:60:3a:32:c5:20:b7:f9:7b:c7:e8:88:68:
         05:4f:4d:46:36:37:17:50:35:ca:c6:54:70:12:00:12:4e:e0:
         e1:d0:3e:80:15:32:54:9d:0d:c5:af:be:65:24:9b:1f:3a:9f:
         ee:a4:42:95:ed:c7:2a:e2:87:b6:6c:e8:9d:88:8f:60:71:6a:
         7b:b6:55:5a:30:12:aa:05:db:5c:3c:9a:57:69:13:a2:7e:1d:
         5a:19:4c:fb:e0:ce:67:b1:80:4a:97:4f:35:ee:ad:a6:2d:6c:
         d2:4b:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:34 2025 by rpki-client