Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa
File:                     f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa (raw, json)
Hash identifier:          Uo8nirm4W0LU14tPLMi9y+DZzcH0owbrhkFmsRVyXAI=
Subject key identifier:   C2:C1:31:83:8C:10:61:B8:06:5E:35:C2:1B:C6:7A:44:37:8B:00:25
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F432858496A199A6E30F9552441A570C0
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     62831
IP address blocks:        64.96.0.0/17 maxlen: 24
                          2620:57:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:9a:6e:30:f9:55:24:41:a5:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=a06f34d8-9bec-4a3d-9521-5dbd0df5bcd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3f:bc:6c:0c:ea:18:8c:2d:40:45:bc:a9:00:
                    10:47:0c:ca:d0:b4:fb:34:97:d3:f9:34:66:a1:d0:
                    50:9e:a1:b0:a0:8e:f8:71:fe:7f:d9:01:dd:82:96:
                    2d:91:02:c2:7e:75:f8:be:34:d5:83:26:15:76:b0:
                    80:38:1a:3d:c3:b9:d7:b7:50:19:39:32:bd:86:12:
                    72:17:fc:cb:01:b3:a2:4f:a0:5b:a3:6f:2a:1f:0b:
                    21:a4:f4:2e:9c:ba:3a:36:07:47:a2:9e:c5:a2:ad:
                    06:ff:f5:dc:ad:a5:43:9e:06:d4:75:33:e4:b2:cd:
                    47:4e:d7:29:36:d9:ca:37:89:35:26:a6:77:bf:5d:
                    c5:bc:82:cc:1c:08:8f:40:e6:38:c6:9d:71:b4:02:
                    7b:06:73:8d:ca:fe:68:fa:ad:5b:51:a4:d4:a6:db:
                    fd:48:2b:b0:f9:77:bc:10:5a:9a:5f:13:9b:7c:c3:
                    17:82:e0:da:2f:e7:7c:11:fe:7a:e5:dc:78:10:a5:
                    15:67:8a:2f:d7:5f:f7:51:ba:4b:ca:07:a4:51:9b:
                    f5:53:1c:64:6f:49:1a:eb:e3:fa:32:d2:87:3d:d5:
                    d6:46:af:43:fb:59:cf:cb:bd:58:c8:37:24:1a:73:
                    e4:c3:4b:0e:43:4c:9b:d9:39:70:c9:2c:d6:be:c4:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C1:31:83:8C:10:61:B8:06:5E:35:C2:1B:C6:7A:44:37:8B:00:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/f97d150f-cf40-308f-bef0-2e9c3857a0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.96.0.0/17
                IPv6:
                  2620:57:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5f:d3:45:39:c9:f9:bf:e1:81:6d:35:7d:d0:9a:48:cd:1f:
         24:d6:a2:18:e6:c3:25:1c:8d:68:2e:1b:c2:a0:01:15:58:a6:
         79:65:76:47:08:fa:ad:57:ed:2f:2c:8a:74:c7:de:0a:8c:96:
         2d:8b:67:30:20:92:8a:80:a0:08:8a:13:cc:43:bf:b1:e4:cb:
         05:12:99:5e:af:7c:e5:af:99:e6:bf:b3:f9:76:af:65:7b:9e:
         80:e8:7d:cf:53:11:25:be:6f:da:24:62:32:ea:f0:81:02:6f:
         26:89:f3:0d:2b:3a:67:88:eb:6b:41:e2:65:c2:73:6f:c4:44:
         76:eb:0f:17:7c:e1:eb:be:75:de:a7:78:5a:ba:4b:78:eb:53:
         37:87:50:1a:3e:c9:ce:86:a5:e1:0c:66:3d:0f:b2:98:cc:36:
         e8:90:61:78:1a:83:c5:9f:73:90:22:bf:b8:d4:6c:c3:f0:c0:
         a9:22:e7:fc:e7:bb:8d:20:1a:be:fc:60:9f:c8:87:de:e6:4a:
         a4:89:18:f9:d7:27:3a:e2:86:f0:d7:15:ef:f4:57:9f:cd:a7:
         c3:bd:09:42:e9:b4:7f:b6:16:49:8e:e2:e8:d6:68:4d:73:17:
         f6:5b:7c:54:56:b8:ce:05:8d:d1:9c:41:88:3a:36:33:bf:0e:
         ed:39:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:23 2025 by rpki-client