Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/754e8e50-2a01-3876-942b-02e9373e22fc.roa
File:                     754e8e50-2a01-3876-942b-02e9373e22fc.roa (raw, json)
Hash identifier:          f+bYDLYRxFLsk5FyiNpz0u8OjgM6VCC+DoaNVuNTMmU=
Subject key identifier:   9C:78:F4:9B:6C:F7:15:80:D3:E7:49:F9:0A:0C:EC:C2:F3:EE:B8:95
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F432858484AAAE3AA777137ABE13105C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/754e8e50-2a01-3876-942b-02e9373e22fc.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     13768
IP address blocks:        64.34.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:e3:aa:77:71:37:ab:e1:31:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=a2b79705-186c-4710-adb2-ebc212a399dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:05:58:34:60:95:99:63:aa:ae:e4:18:57:e2:
                    8d:5d:83:cc:4c:08:96:9e:a1:92:1c:fd:51:b6:3d:
                    8a:02:d2:b8:80:4c:62:31:45:87:88:83:74:15:ae:
                    df:29:f4:33:e2:15:da:9b:1c:b2:cd:7a:7b:a7:50:
                    fc:9f:e5:50:3c:c7:78:d3:1c:af:43:86:c1:ee:78:
                    5f:95:70:99:db:21:5d:35:bd:b5:5c:4c:49:8e:c9:
                    44:c6:94:64:81:2b:fd:73:05:3f:a9:a1:c4:69:ac:
                    9b:0f:4a:75:1d:56:6e:a5:45:0f:ae:fe:18:e4:f7:
                    27:af:e6:3b:06:0b:e8:72:87:b1:b8:78:9f:70:d1:
                    e0:5d:c4:ff:1c:7b:08:f2:a0:56:cd:95:7a:0c:fb:
                    9f:90:31:67:8e:19:4c:43:d1:1d:0e:39:4e:c8:33:
                    e9:0a:cf:fd:38:e1:cc:3c:07:3c:cd:8b:54:fb:58:
                    61:46:2b:03:b2:14:df:c3:f0:ed:30:6e:d8:c5:26:
                    1c:7d:c1:11:93:bb:10:98:86:bb:3d:14:09:cc:de:
                    74:81:04:65:f0:96:f3:43:3c:a1:56:dc:43:8c:97:
                    1f:5e:ff:5c:d2:7c:e9:1e:39:40:31:b5:08:a1:d3:
                    12:7b:0f:81:59:82:98:e6:9b:9a:01:cc:ed:f6:41:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:78:F4:9B:6C:F7:15:80:D3:E7:49:F9:0A:0C:EC:C2:F3:EE:B8:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/754e8e50-2a01-3876-942b-02e9373e22fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2c:49:27:d3:7f:ca:6d:c0:e3:20:c3:3c:e5:af:de:bf:26:
         ed:6e:85:02:3e:dd:c8:e4:46:eb:3c:69:04:55:77:2c:58:a7:
         cc:eb:01:04:f6:c5:a9:a8:9c:9f:83:cb:9c:7e:35:f9:17:1c:
         ab:08:52:5a:d8:12:04:b5:61:4f:6a:06:82:bc:c0:df:8e:26:
         81:18:ae:9d:5d:47:2b:e0:65:a2:b4:6d:4b:46:ba:1b:66:84:
         a0:db:5c:ab:ba:10:66:07:76:5a:de:a3:f4:3b:77:e8:a2:d9:
         e5:94:a8:0a:1a:24:4c:87:54:dd:5e:c9:aa:f1:72:e7:2c:cc:
         36:20:41:77:88:24:6b:f1:a1:88:d2:9e:f5:da:23:8f:51:31:
         b6:6b:78:44:b3:27:bf:71:04:85:fa:cc:de:f8:cb:03:5a:ea:
         e2:b0:13:9c:a8:17:d8:42:f8:2d:5a:4c:1c:76:32:c2:f5:ee:
         95:1f:41:35:e5:cd:64:ca:aa:94:fd:26:17:b5:bf:4c:f6:d0:
         1d:db:a2:58:63:86:ea:97:db:50:cf:61:e9:74:ab:06:93:a1:
         a9:eb:49:a4:e8:f9:cc:c3:b4:0b:ab:1d:b5:78:62:b3:66:04:
         47:f3:71:30:c7:6e:c1:3b:7a:f2:27:19:89:9a:e0:64:46:4b:
         04:89:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:20 2025 by rpki-client