Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/97476721-9327-3375-b808-56cd84523564.roa
File:                     97476721-9327-3375-b808-56cd84523564.roa (raw, json)
Hash identifier:          QESe1HbBC0tu34PxWHQv55Rfxc7yU3MFUOebKHsWQbQ=
Subject key identifier:   EE:AA:EF:34:73:7B:8E:E7:59:5B:FC:19:C7:15:44:E8:29:32:5C:09
Certificate issuer:       /CN=f8838580-1598-45e5-8353-b551ae78b110
Certificate serial:       010D0C9F43285848F9269D6BDC33A82A326ECE80
Authority key identifier: DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/97476721-9327-3375-b808-56cd84523564.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        64.190.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:9d:6b:dc:33:a8:2a:32:6e:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8838580-1598-45e5-8353-b551ae78b110
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=8a56ac69-7dad-4f6e-ae64-613642a21387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:f6:6a:f8:c6:5b:16:74:3f:0c:9e:28:3d:
                    19:7a:4b:15:32:79:a5:be:6c:43:b4:44:76:6b:68:
                    b9:ff:e9:37:07:2b:3b:8f:fe:05:1b:84:be:99:4e:
                    04:81:a5:0f:dd:b8:16:69:8a:23:9f:20:57:34:b4:
                    7a:2c:3f:11:e6:00:6b:58:2a:01:5c:e2:05:5d:1a:
                    a3:f9:ba:5d:ae:4c:24:46:f5:63:b5:0d:24:8f:c3:
                    67:df:b8:92:d6:67:ab:a3:e4:fe:ed:ef:c9:b3:83:
                    ec:04:c6:68:1e:00:2e:47:8b:a1:3d:f7:25:c3:8d:
                    34:cf:4d:7d:d2:d5:2d:59:a2:af:81:5a:27:8e:46:
                    af:01:c8:1d:95:a9:c3:94:f6:34:41:15:e7:ce:9d:
                    2f:40:3b:fa:6e:12:2c:68:77:d6:05:ce:c9:cb:66:
                    48:61:79:e3:7d:e1:49:ed:6c:8f:9b:91:1a:db:51:
                    1e:95:9e:84:9d:e6:06:c6:b1:1a:61:b1:b1:64:b2:
                    22:9c:35:7f:3b:ed:6b:98:57:cf:e7:ae:c9:fb:b1:
                    ed:32:e4:06:f1:68:80:00:ff:3c:8d:1f:8d:b2:68:
                    0f:40:d9:d4:4f:42:9a:0d:83:69:d4:d8:74:38:97:
                    84:c7:e2:eb:a1:cc:f3:30:c9:5d:7e:e4:e4:85:1a:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AA:EF:34:73:7B:8E:E7:59:5B:FC:19:C7:15:44:E8:29:32:5C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/97476721-9327-3375-b808-56cd84523564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl

            X509v3 Authority Key Identifier:
                keyid:DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:15:59:0a:4c:25:a5:bf:90:94:c7:23:cb:4c:2f:51:9c:44:
         2c:43:2e:91:37:60:2c:25:2f:58:07:d4:41:7c:7a:b1:35:9e:
         3e:11:4f:1f:5d:86:fb:c9:0e:30:cc:0f:1a:0d:a2:da:00:0d:
         bf:ff:a3:a1:4c:cc:d4:c7:c4:7f:e9:34:f7:64:00:da:03:78:
         97:c6:f3:e2:f6:d7:f4:6f:a1:e1:2e:2f:93:89:10:74:dd:48:
         9c:67:0b:34:1b:eb:68:ca:f3:1b:03:17:1a:0e:bb:67:9b:7e:
         a6:0c:05:7a:69:32:db:b2:1e:5e:2d:81:fe:cb:d5:95:a5:5a:
         17:7e:14:ad:4f:48:3f:29:56:d9:51:8f:58:fb:4c:7c:f2:9c:
         87:04:29:34:34:8f:bd:2e:41:53:8f:39:b7:7a:44:48:84:47:
         b9:4f:77:ff:a9:b2:2f:4b:96:63:88:55:09:c7:35:77:da:ea:
         6d:06:c6:97:74:11:81:b9:88:43:b4:d7:2f:21:be:08:2f:6c:
         c5:6e:8e:dc:ed:34:60:dc:d6:34:64:71:de:b0:0a:f3:68:2a:
         af:cc:7e:a0:9d:09:3d:d7:7f:51:b0:d7:96:a3:21:a1:ef:ee:
         ae:89:a7:ae:87:b5:fd:01:0b:12:39:fd:1f:91:46:a1:28:8f:
         63:fe:aa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:34:10 2025 by rpki-client