Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa
File:                     8789b761-bc71-3c11-b18a-efee96fb1b2f.roa (raw, json)
Hash identifier:          ulp5d1d0yclaOYq3gcZ9+S2Kaz0sVxzkkFFTupQWHdA=
Subject key identifier:   E1:FB:7A:D4:01:B8:42:C4:3D:D6:73:73:39:BB:7C:33:AF:54:A5:6C
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584929E3CF9FF00427839F77E000
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     54643
IP address blocks:        64.34.70.0/24 maxlen: 24
                          64.34.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:cf:9f:f0:04:27:83:9f:77:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=86c1281f-7e36-4f0b-a183-9fa20d3c776d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:72:be:eb:69:6a:50:70:62:bd:56:2d:ce:
                    84:a6:de:b0:21:e0:df:6d:d5:4e:8d:5f:7b:fa:0c:
                    ae:5a:ce:06:18:9d:a7:0d:29:9f:13:f9:d1:0f:ae:
                    4a:83:0a:fe:08:c6:9b:c7:59:74:12:2c:db:c3:0d:
                    03:5c:51:0b:a9:45:35:cd:aa:13:8d:99:6b:f9:ee:
                    bc:89:68:36:57:be:62:fb:61:f7:49:7b:72:cf:0f:
                    9b:db:0b:03:24:9b:53:28:33:da:96:63:d7:cf:9d:
                    b6:72:38:6e:43:b7:0f:c1:7e:a1:00:24:0c:00:56:
                    7a:9c:5c:61:a0:fa:3d:77:e8:d9:a4:b3:19:8d:e8:
                    12:7e:a2:13:99:0a:b2:8a:ea:4d:5c:94:00:92:8f:
                    6f:a9:9f:ef:50:57:a2:1b:4b:ec:a6:be:83:26:46:
                    98:88:9c:7c:8a:05:40:ab:67:8b:18:44:b3:e0:d0:
                    97:fc:f4:e0:58:12:92:04:98:a4:b1:ea:a7:a7:ec:
                    2d:9a:f3:67:e2:50:d1:15:e9:fb:7f:53:dd:c5:a6:
                    4f:42:9f:9b:54:aa:ed:03:3c:97:0b:01:b0:5e:b4:
                    ec:b3:5f:9e:bc:37:6e:71:5c:5a:0d:35:13:b1:e4:
                    f4:9c:e1:69:04:b5:70:25:b2:a9:a7:b6:d5:c0:cc:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FB:7A:D4:01:B8:42:C4:3D:D6:73:73:39:BB:7C:33:AF:54:A5:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.70.0/24
                  64.34.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e6:94:9a:a5:b8:f7:89:63:7c:64:f1:3d:f1:20:5c:00:fa:
         a4:90:90:d1:08:3b:60:fa:0a:93:97:87:32:fd:0d:aa:8b:b3:
         c3:34:2d:46:e1:0c:5e:16:04:81:67:38:ac:8c:ce:94:af:ad:
         79:0f:d5:fa:49:a6:e9:00:49:d2:da:a8:57:cb:94:5c:52:b4:
         82:05:e2:69:ca:ec:69:9c:dc:81:4c:12:70:66:ea:94:a2:81:
         da:96:57:ae:ba:d2:25:5b:b0:cc:5c:9e:60:4a:6c:ab:6f:ac:
         49:63:e2:fb:e1:3e:8b:6e:c6:9e:ca:e0:7b:f5:ec:61:a7:be:
         b6:8e:b0:4b:99:eb:ed:fe:4e:cc:98:be:f7:2d:6e:47:87:9b:
         7d:04:0d:0d:51:15:5d:47:f8:a5:17:b7:2e:24:27:08:ce:49:
         d9:4c:4d:67:73:8c:29:d7:b4:a3:d6:bd:ad:a2:24:52:71:df:
         9f:6b:dc:54:a1:3f:35:c4:fa:1e:a5:93:44:a7:d5:14:e6:ae:
         1a:6c:95:26:4b:cc:d3:a4:bf:73:7f:1d:f3:0e:25:b4:55:6d:
         89:d1:1f:19:ec:2b:31:80:09:27:2d:b5:3c:c1:07:a5:67:25:
         75:22:e0:17:26:da:34:4a:5d:fe:02:a2:52:24:35:e4:89:52:
         08:68:a9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:34:13 2025 by rpki-client