Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa
File:                     3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa (raw, json)
Hash identifier:          87KYl/yXD78QKZ74HRbeLK1dax9tOmlUfwn3OgQreF4=
Subject key identifier:   F1:32:04:DA:AA:B3:81:C9:68:69:68:DA:81:45:11:02:BA:D4:80:BF
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F43285848ADC61E322E3199103B8E0800
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     21840
IP address blocks:        65.87.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:1e:32:2e:31:99:10:3b:8e:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=6ce25516-ae72-4cc0-a446-c9cb58a0be40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:60:ed:2f:82:e5:c6:72:c4:70:5e:d0:7f:
                    b9:98:65:3b:d9:61:71:ea:85:ff:17:4c:21:12:0b:
                    f1:0d:2f:9e:7c:20:41:61:a3:63:d1:c0:d1:0f:8d:
                    eb:74:14:df:59:07:27:4a:b1:34:94:60:7b:e7:8c:
                    f6:d1:d9:ea:90:c0:18:e4:55:1b:b0:86:7a:ea:27:
                    32:49:58:5f:2a:37:57:63:2e:5f:30:1a:f0:93:ae:
                    fe:ce:e9:14:73:6e:b1:9d:14:00:c8:ef:b2:ff:29:
                    97:a6:29:2f:dc:47:7d:21:2d:03:ef:d2:e8:5c:10:
                    f3:99:7a:8a:ee:28:9e:39:fb:e8:b1:ef:94:e3:25:
                    d4:be:7c:52:5c:88:5a:e2:23:69:d1:0f:82:06:2d:
                    ad:79:11:d5:fe:98:d0:e7:fc:c6:a8:36:aa:ff:4b:
                    26:95:93:5e:7f:5f:35:ba:d3:ee:06:ba:82:45:42:
                    8a:c7:f1:25:53:a2:3c:60:3a:9b:80:2d:e7:30:ec:
                    5d:f3:4f:6e:6a:ab:3d:7a:06:a0:ff:c6:3d:92:56:
                    89:03:04:8c:6c:51:1a:10:42:0f:28:e7:9c:8c:f6:
                    6e:7f:2a:25:79:2d:59:14:77:f6:88:26:e9:e5:22:
                    bb:7c:96:d3:85:71:f7:b1:7e:af:2b:95:31:b2:52:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:32:04:DA:AA:B3:81:C9:68:69:68:DA:81:45:11:02:BA:D4:80:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:02:1b:ac:ae:6e:cd:ad:79:77:72:58:f4:0a:64:da:24:a4:
         6c:07:d3:54:66:97:d5:f6:16:3e:77:5d:6b:60:a3:05:20:1e:
         1b:7d:57:28:ce:2e:33:e5:5b:0f:73:7f:1c:dc:f0:59:00:16:
         db:6c:24:56:8d:e4:19:d0:4d:f8:eb:39:0f:b7:d1:2e:70:16:
         e8:37:8c:52:74:0d:30:38:35:bd:4b:ed:db:4f:ff:de:36:be:
         79:f7:79:ee:57:66:66:57:fb:0e:33:00:25:f6:fe:c0:74:49:
         28:cd:21:06:18:4b:17:45:9b:5c:ad:6f:96:6e:40:84:2f:89:
         35:14:f4:4b:cc:11:7f:19:5e:66:bf:53:4d:c3:f7:13:c3:e5:
         01:cb:f3:c7:25:77:11:30:1e:33:86:45:e4:91:f2:6e:a6:08:
         9c:62:55:80:92:05:40:c6:13:f4:63:f5:a4:f6:86:92:3a:c1:
         f0:cd:68:e8:47:35:9e:9d:77:36:e7:f3:9d:db:ce:70:4e:8a:
         76:27:de:20:9b:3e:03:5e:01:61:89:11:4e:6f:3b:b1:86:33:
         60:8a:a7:8f:58:da:20:ae:9a:ff:c6:1f:42:3a:c5:5b:07:ca:
         ec:35:86:44:89:e2:2b:00:97:fc:47:52:c1:4d:cb:71:3d:13:
         61:ce:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:20 2025 by rpki-client