Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6d421425-2daf-3ca3-a13e-e80e85758b82.roa
File:                     6d421425-2daf-3ca3-a13e-e80e85758b82.roa (raw, json)
Hash identifier:          6Dg6Fx59EZ5tMf0mhGXgClk86LhzIqckmuCpePfFo7k=
Subject key identifier:   FF:1A:2A:F8:88:84:38:FA:97:55:B0:DF:13:FC:27:47:40:FD:B6:F5
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584929E3CA2D1D8C699F13745E00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6d421425-2daf-3ca3-a13e-e80e85758b82.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     13768
IP address blocks:        64.34.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:ca:2d:1d:8c:69:9f:13:74:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=bed893e1-f816-40be-b0ad-e5d5d2384fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cf:77:d4:5a:07:13:d5:61:0d:e0:b8:65:ea:
                    38:4f:dc:b8:44:95:1d:b4:0a:41:cf:a7:28:99:a3:
                    be:e8:2d:e4:ca:1d:88:8c:3b:96:76:6f:be:9f:d4:
                    16:ef:7e:e8:62:87:4c:d1:48:c2:b9:7a:0a:be:37:
                    7e:a7:64:f4:3b:94:d8:db:b4:ee:bf:8d:1d:01:b3:
                    25:22:48:bf:56:28:67:91:44:4a:0e:5c:78:e3:90:
                    12:89:8b:41:af:7a:8e:34:02:5f:c5:95:09:45:7d:
                    a2:fb:41:14:b6:be:67:81:e0:5d:5a:68:fb:3b:f2:
                    5f:37:09:f4:64:31:fe:9e:c8:57:45:ac:9b:a6:6b:
                    ae:eb:6b:56:a4:b8:de:6d:10:c1:e8:4c:78:cb:d2:
                    ab:a2:5c:2b:63:f8:88:60:48:66:ec:f9:db:29:0e:
                    d5:fe:29:f4:cc:f6:ec:64:17:65:a3:d0:41:25:a4:
                    3a:47:85:6a:cb:8b:90:32:91:96:a1:3b:5b:6d:13:
                    9a:ac:51:bd:6a:ea:58:72:69:19:20:20:d1:10:b4:
                    18:b3:2a:1c:f7:43:ea:e2:ae:40:9d:cf:8b:5a:67:
                    77:17:35:96:06:a9:1a:6a:a5:86:e3:51:f1:03:7e:
                    ba:0f:a6:b4:f0:7e:ae:ec:11:03:80:db:14:0b:19:
                    cb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:2A:F8:88:84:38:FA:97:55:B0:DF:13:FC:27:47:40:FD:B6:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6d421425-2daf-3ca3-a13e-e80e85758b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d0:bb:6f:80:24:fc:d2:10:49:57:bc:2f:90:68:03:f3:90:
         34:0a:35:e1:72:a0:95:7c:4e:6c:d6:2d:ec:80:35:12:12:4f:
         45:0c:f0:e2:0b:28:20:fe:80:a3:fd:69:13:5d:50:c9:1b:93:
         d9:51:87:26:be:6b:16:e1:db:3d:44:9b:f3:ba:6f:9f:76:8f:
         7e:e4:ff:f3:54:e1:44:6e:ed:3d:53:29:6a:c1:4f:08:8a:90:
         2d:02:fa:b6:a6:45:f0:fa:4b:eb:ac:94:1a:d5:dc:1e:58:3f:
         50:ef:5f:71:80:0c:18:01:28:84:51:4f:f2:f6:73:1c:c1:88:
         b4:21:2d:ff:e1:b1:54:e4:80:00:c2:38:ac:68:64:57:d6:42:
         5f:80:56:b0:89:48:cb:1d:9c:f2:fa:19:4e:0e:90:32:e8:b6:
         58:97:90:6d:e0:e9:9b:27:37:44:42:9c:22:40:75:16:b0:63:
         af:0a:f3:40:47:fe:48:9d:fa:f6:6b:ac:41:43:2d:42:a5:95:
         f5:b5:38:e4:ca:d0:2e:f0:3a:46:28:6c:cb:dc:d9:d1:ee:e7:
         9b:d0:2f:7b:45:2e:3e:6b:f9:67:97:cf:c8:8c:6a:73:73:db:
         20:cd:f1:ec:8b:aa:08:92:ac:4a:2f:56:01:72:4b:ff:a1:9f:
         c4:72:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:24 2025 by rpki-client