Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa
File:                     8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa (raw, json)
Hash identifier:          Sh4U5Pau6UmtLugkZrllxWp5D+Elpu+4dZtZHp4UvCA=
Subject key identifier:   FD:46:F1:EC:D2:F0:52:E7:F5:7C:31:0E:9A:F5:A2:E9:C3:4E:33:91
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584949FE8DC2DC88C952B03BDB20
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     13414
IP address blocks:        64.63.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:8d:c2:dc:88:c9:52:b0:3b:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=e026e967-b726-434f-b477-a6714b7871eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fa:f0:41:77:7a:93:b2:71:2b:d5:0e:6a:e5:
                    64:8d:2c:59:c0:10:c2:f3:8f:73:8a:09:bc:ae:7d:
                    e0:87:4e:d2:93:45:cf:b8:8a:08:e5:2a:34:bb:1f:
                    ea:48:11:63:d9:9f:80:6a:80:61:7b:af:f0:f7:2c:
                    38:4d:65:71:b7:1f:1e:b4:c5:66:fc:af:dc:69:c1:
                    fd:84:e2:57:2f:e7:cf:8f:24:af:87:0c:fb:35:31:
                    d6:9b:84:7b:e9:70:9c:8f:6b:b6:83:10:9f:c0:68:
                    1b:af:4f:ec:76:30:c3:e4:8c:bc:a8:04:38:c5:36:
                    ed:13:1d:f5:ec:29:d3:98:df:9b:1b:77:11:84:9f:
                    57:1b:a7:d5:71:b6:65:d4:36:a7:c8:1d:fb:db:92:
                    aa:d5:84:f5:a4:d6:43:bf:f0:80:1e:b3:a0:df:7e:
                    aa:59:b6:ad:4c:5b:36:0e:74:70:10:db:de:2c:fd:
                    a5:20:9d:db:57:73:94:2d:39:fc:81:46:a0:d0:14:
                    c5:91:a5:95:a3:85:99:da:05:fd:81:e1:fb:84:bf:
                    1c:8f:80:4d:8a:ca:b1:05:d8:8b:fa:31:55:6c:be:
                    a0:4c:3e:47:d3:d0:77:25:2b:67:fd:53:3c:53:d2:
                    b8:85:ae:ff:0d:6b:7c:c9:10:bc:28:6c:d1:32:d6:
                    ea:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:46:F1:EC:D2:F0:52:E7:F5:7C:31:0E:9A:F5:A2:E9:C3:4E:33:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8d6a95de-8e8e-3a12-af10-5b6e13ed87db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a2:9e:6f:06:5b:93:bc:57:1e:4c:d0:cb:48:e3:c0:cd:a6:
         26:21:f0:91:fa:c3:96:cc:5f:5a:99:ef:b4:9d:a6:2f:42:8a:
         04:61:8b:10:74:08:5a:88:94:41:0e:41:76:94:ac:0f:4e:ed:
         d8:70:30:ce:62:c6:e0:a0:3a:8b:f6:53:ee:44:44:9a:0a:21:
         ad:3a:46:57:cd:d3:35:da:ca:68:45:27:62:6a:b8:97:35:4b:
         de:a3:b5:b5:f1:7c:81:91:d0:fd:f1:17:65:c4:82:11:3b:4e:
         42:44:24:30:76:b9:f8:f9:e0:b0:ee:aa:fb:04:95:be:65:f0:
         d4:b3:b3:5e:3f:1e:31:0d:0c:24:a1:66:f3:f6:cc:7a:d3:50:
         32:94:f0:97:ac:17:ef:1c:02:16:ec:fc:f4:0d:ad:15:80:a8:
         44:af:21:8b:17:11:c0:63:c2:6e:6d:f3:37:4a:e3:cb:0c:63:
         19:a5:21:56:69:48:8d:ca:ef:da:23:30:03:a5:07:6f:00:81:
         e7:8d:3a:f6:1a:99:17:b4:38:9c:b6:a0:82:1d:5f:0d:bd:da:
         b4:54:2d:b3:a2:ef:f7:4d:88:cb:e5:7f:29:c2:9a:a1:fa:cd:
         0f:b4:43:91:dc:14:ba:e6:e3:5f:bb:98:80:2d:31:13:e7:a2:
         6c:0f:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:16 2025 by rpki-client