Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ea5a2c00-9921-30a7-9f68-189974168bf4.roa
File:                     ea5a2c00-9921-30a7-9f68-189974168bf4.roa (raw, json)
Hash identifier:          6vcBd1ODdNDCXDY+cGYfrMkIComaG4kAH4yZvCGaNnM=
Subject key identifier:   46:BF:65:6C:10:FE:0F:33:E9:5A:34:8E:84:DF:28:EE:38:E7:7B:DA
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584976A993BCDA1E9714667AAF00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ea5a2c00-9921-30a7-9f68-189974168bf4.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     13768
IP address blocks:        64.226.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:93:bc:da:1e:97:14:66:7a:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=d0932721-6b30-44cb-a3b9-dc3c6a338ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:c5:10:ef:2e:c2:75:48:cd:47:79:5c:41:
                    f6:56:c2:e8:ab:e1:16:3a:a6:66:8e:01:51:d4:9b:
                    cb:a1:58:0e:27:73:21:b4:7e:21:65:76:05:ac:8d:
                    9a:5c:14:e4:c5:56:81:59:85:d3:f6:33:8d:f0:4d:
                    1e:99:b9:84:02:69:56:46:02:7e:44:fc:76:dd:25:
                    31:81:19:ae:4e:62:8a:2a:5e:9a:45:24:60:fc:cc:
                    27:57:10:a8:3f:62:ae:3b:bb:1b:7f:10:d6:28:64:
                    4e:9d:bb:0b:4d:23:bf:80:05:22:4a:b2:ab:2b:b6:
                    4f:9d:85:4e:49:be:bd:4d:b1:0e:db:bf:c4:4a:0c:
                    66:3a:67:45:55:2c:cc:0e:91:66:b9:ef:8d:ce:04:
                    b9:0e:cf:60:e4:23:36:ea:fa:dd:d8:e9:8b:4c:0a:
                    5d:70:68:69:57:2e:3e:68:df:a9:92:4d:53:dd:6d:
                    47:73:91:93:f8:79:ff:83:18:9b:ad:94:d8:5f:7a:
                    f1:7a:8b:b7:e1:1f:d2:5d:9e:2e:4a:27:77:2b:dd:
                    fb:d6:66:07:f9:44:e6:bf:19:84:ec:51:96:ce:d6:
                    4b:fe:99:f5:ea:ca:f4:44:0c:13:eb:58:f3:e0:f0:
                    8a:de:de:7f:63:08:60:3c:c0:21:4f:f8:0a:40:bb:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BF:65:6C:10:FE:0F:33:E9:5A:34:8E:84:DF:28:EE:38:E7:7B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ea5a2c00-9921-30a7-9f68-189974168bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:96:94:1c:70:e8:1f:01:01:54:e0:63:2e:e0:cf:5b:ea:be:
         79:14:d2:dd:f2:2c:44:5f:97:0a:29:fe:cc:81:1a:a1:f6:1d:
         c3:b8:97:75:d4:c2:e5:a7:76:8a:d8:58:d8:e5:34:93:70:2a:
         67:a1:bd:c9:44:6c:36:ea:ce:72:35:0f:94:ea:cc:0f:c7:0d:
         71:e6:04:c5:76:b9:0c:ed:30:a8:45:fe:9c:5d:78:c0:51:c1:
         04:e7:ae:ec:d7:42:de:d8:f0:e1:df:03:11:42:5a:8e:2a:dc:
         f5:60:a9:a0:61:f6:ac:58:9e:76:86:36:bb:4a:cd:92:c8:fd:
         37:97:8b:1b:16:4d:34:b4:0b:9d:b7:27:b7:42:c8:57:ee:67:
         41:22:d9:c6:58:64:ce:0e:9c:a7:4e:2b:6d:a5:74:fc:74:cf:
         ec:15:15:f7:e5:7d:5b:d0:90:9d:f8:57:1f:75:38:f8:56:32:
         e5:ac:ef:2a:12:67:b7:95:5f:be:18:f2:5f:ac:f8:34:6a:fd:
         77:a7:a9:1e:f9:bd:c9:1e:b2:56:06:c7:5d:eb:56:f2:12:4a:
         c5:03:5d:91:16:1f:b7:a7:0b:96:42:3e:9f:38:7c:db:21:34:
         ce:7f:e9:e0:26:7f:81:b3:e7:e0:3a:3d:8f:62:11:08:dc:50:
         61:68:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:01:19 2025 by rpki-client