Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/07af3803-4603-394e-91de-73689d9c1f0a.roa
File:                     07af3803-4603-394e-91de-73689d9c1f0a.roa (raw, json)
Hash identifier:          ESiiNuHSMPVCVE3gJV6o+hWjPWBb6tizoqR2WOP9FZw=
Subject key identifier:   E5:A6:92:3A:31:DA:D6:E0:80:DA:09:AB:26:4A:E2:CE:72:DF:C1:05
Certificate issuer:       /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial:       010D0C9F43285848A6CB6A38AD7C2BA2AA2E3000
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/07af3803-4603-394e-91de-73689d9c1f0a.roa
Signing time:             Fri 24 Jan 2025 14:00:52 +0000
ROA not before:           Fri 24 Jan 2025 14:00:52 +0000
ROA not after:            Thu 24 Apr 2025 13:00:52 +0000
asID:                     20091
IP address blocks:        65.254.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a6:cb:6a:38:ad:7c:2b:a2:aa:2e:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
        Validity
            Not Before: Jan 24 14:00:52 2025 GMT
            Not After : Apr 24 13:00:52 2025 GMT
        Subject: CN=42f9e5e9-87f0-4319-9ed5-53dabdf78630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:50:f4:40:07:43:44:a8:a9:9e:92:36:38:a0:
                    21:7c:b8:56:6b:0d:27:ed:61:50:d1:7b:c8:c6:69:
                    90:6e:99:0a:2f:23:5b:26:72:b6:21:12:f6:56:43:
                    69:ce:4b:9e:db:4e:55:93:99:43:63:e5:0a:a2:96:
                    28:05:c7:e6:47:61:6c:20:53:0d:9e:40:6b:f9:56:
                    bb:b3:37:a8:8b:21:21:0a:fe:4d:08:df:81:c5:f2:
                    83:34:01:35:4a:42:b1:28:85:1b:4e:76:d5:c8:aa:
                    07:0c:a4:b2:db:c2:26:8d:03:d8:9f:f7:c1:e6:39:
                    25:75:41:94:08:1c:f0:a5:c4:fd:13:d9:02:9f:28:
                    ab:16:91:31:92:49:44:89:43:8f:df:d8:cd:c3:6d:
                    4b:9e:18:a8:ba:10:11:ea:1a:20:8b:7c:98:d0:41:
                    89:f6:ee:48:96:49:28:f5:6f:03:5a:a4:03:16:5d:
                    a6:4f:c4:dc:49:33:4f:a4:4a:0f:89:82:aa:5a:8a:
                    f6:6b:cf:4b:f4:4a:17:af:2b:94:e7:f6:f8:4d:14:
                    29:6f:03:01:87:5b:35:1b:28:a9:3e:7b:8c:cd:5d:
                    e3:dd:e4:d2:53:5e:70:52:91:8f:12:92:83:94:a5:
                    06:a6:05:39:70:a1:5b:e4:07:fe:d2:90:d5:cf:20:
                    26:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A6:92:3A:31:DA:D6:E0:80:DA:09:AB:26:4A:E2:CE:72:DF:C1:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/07af3803-4603-394e-91de-73689d9c1f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ac:2e:74:f1:d7:56:7e:dd:aa:63:ee:88:10:5c:33:13:e5:
         48:2b:be:da:77:8b:fe:c0:ac:e1:58:da:4f:57:f6:b4:1d:4d:
         5c:2c:75:15:90:38:1d:e7:8b:b5:87:51:06:0a:4a:a2:0e:5b:
         83:b8:9d:1d:0d:5d:29:ec:29:da:fc:5e:15:67:7a:d0:b3:ef:
         e1:4e:d6:0f:66:d5:ae:ba:0f:d7:39:62:92:3b:96:ad:c4:23:
         8c:f0:93:55:72:ab:67:9a:37:93:e0:56:02:f9:c4:13:2a:72:
         3f:89:81:26:a2:ab:74:51:ee:cd:18:d7:a0:b1:38:98:f4:5b:
         cb:58:d6:ac:9a:7a:e6:cd:5e:11:0b:02:3c:bc:e5:8b:b5:00:
         e9:38:f2:03:b4:d5:fb:4b:84:1d:a4:bd:10:a9:16:6b:62:ff:
         45:41:8e:13:e4:8f:c4:75:c5:83:64:b0:95:41:61:ae:d2:d2:
         52:aa:8b:4a:ca:08:4e:f5:e5:17:f8:4d:99:51:41:00:1b:b4:
         f0:53:2c:98:6a:fe:25:4f:b7:a8:66:b1:aa:01:d3:c7:c4:79:
         2b:e5:c8:c6:a5:57:ee:3d:d5:71:70:01:03:9d:a2:23:b9:7c:
         fd:45:11:e1:16:66:3b:78:69:a3:b3:03:16:13:7b:a7:03:99:
         1c:a3:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:10 2025 by rpki-client