Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa
File:                     0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa (raw, json)
Hash identifier:          8Tyul3Mj18CvFHbZGAUA4SC33IfUIK0u0g/4vjhAGwY=
Subject key identifier:   1E:8A:E5:58:B5:9C:31:29:DC:AD:D0:A0:77:0D:5C:44:10:EE:0F:4D
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F432858484D75905DC5D8323CFC8B78B0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     13768
IP address blocks:        64.34.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:90:5d:c5:d8:32:3c:fc:8b:78:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=69a132a3-eed0-4335-b1c5-77f4fc2e3280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:c3:eb:42:57:39:d2:9d:b2:40:9a:64:21:
                    20:c9:06:f1:d0:5b:43:fa:55:ee:bd:c2:ae:b9:44:
                    8e:6c:6d:36:b0:be:97:48:c0:75:89:14:48:a5:85:
                    cd:23:c2:eb:ae:3b:da:72:e7:1b:cc:db:d1:44:c9:
                    88:31:b2:09:48:76:34:f6:a7:fd:0e:78:57:4d:a9:
                    e4:8c:30:2b:b1:eb:62:79:0a:1d:5e:55:0c:3c:99:
                    79:f6:b6:a5:21:5f:f8:6d:eb:c6:27:28:52:f6:03:
                    b5:d5:53:56:38:89:57:c4:15:27:36:c3:ed:92:2e:
                    9c:9b:f6:7f:d8:d9:07:89:2b:7a:11:92:50:ee:06:
                    57:45:97:1d:d6:d7:68:9f:58:72:1c:4d:97:f1:9b:
                    3a:06:bc:f7:d6:b8:f0:d0:6a:e7:d1:04:10:c4:64:
                    6c:e3:78:30:50:73:c1:73:fa:ce:04:19:61:24:07:
                    75:90:6c:58:54:c3:d9:19:47:9f:73:7c:af:c0:65:
                    8a:45:cc:ed:86:db:92:03:c3:3f:10:7c:93:e4:4a:
                    dc:4f:d7:0a:ba:27:94:d4:1e:a1:f1:a7:28:41:56:
                    85:4f:2e:87:20:ff:b7:25:e2:81:56:44:cb:90:59:
                    4b:7a:77:9e:93:88:cb:9b:32:f5:94:61:94:80:ae:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8A:E5:58:B5:9C:31:29:DC:AD:D0:A0:77:0D:5C:44:10:EE:0F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/0a937c6f-24b6-3c6a-9f0f-3a16a439b5a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:ff:41:24:ab:fc:b5:5f:4a:74:60:65:c3:af:62:7e:4b:
         98:14:7e:fe:72:67:87:ff:d8:a0:4c:89:6e:97:22:33:67:e5:
         41:3a:9c:4d:d5:13:53:f5:9f:9e:14:66:7c:c8:2b:c2:b7:72:
         ed:c8:d6:76:f1:d1:22:0d:e1:56:9e:d6:31:90:6d:0e:70:7a:
         99:c3:72:fd:16:6a:16:63:70:fa:d8:09:90:c9:a0:ab:82:43:
         12:4e:aa:8f:95:b6:9e:42:b8:29:a9:41:d1:97:fa:aa:b2:ac:
         75:92:9a:44:c6:7b:3e:fe:e1:81:19:22:f1:1f:58:40:e5:dd:
         36:8e:6e:0a:49:95:d9:85:2c:b9:60:a9:51:82:f2:71:21:e0:
         73:f6:6a:c8:ae:a1:8a:7b:38:f0:b2:1f:7c:00:3f:3b:a0:34:
         bb:6c:4f:12:b2:58:8c:f7:c8:3e:5a:d7:5d:35:19:4d:0b:eb:
         6b:d7:1a:de:89:ae:79:17:24:2b:39:65:91:b0:1a:5d:79:ca:
         d0:07:2a:4d:d6:6e:3e:eb:95:a7:41:0f:d7:3a:65:88:de:ac:
         ad:d0:35:19:d5:dd:63:ad:84:df:6d:b2:f1:d8:b2:3f:fb:34:
         86:14:a4:d0:4c:24:e1:ec:f0:17:d0:f1:d8:01:2c:fd:61:0f:
         74:27:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:07 2025 by rpki-client