Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa
File:                     32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa (raw, json)
Hash identifier:          24tWVMWRmd4xCEDD7Ti1xdPSWqY7MuAiSFQoQ0/zGOE=
Subject key identifier:   FF:A4:BD:2C:01:DE:7B:B5:33:33:01:74:BF:6E:DA:F4:00:B8:50:05
Certificate issuer:       /CN=79af2149-f711-4230-b22d-36786f0219ac
Certificate serial:       010D0C9F43285849287E619EC0B2E59BE50AE800
Authority key identifier: 57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     398182
IP address blocks:        64.186.10.0/24 maxlen: 24
                          198.135.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:61:9e:c0:b2:e5:9b:e5:0a:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79af2149-f711-4230-b22d-36786f0219ac
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=be02a47a-b453-48ca-9280-b4c3b58d6681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:07:7e:6c:72:5a:01:7a:b2:cb:1c:5c:c3:
                    ca:eb:05:f5:5b:55:12:54:32:28:b5:e0:3a:fc:6a:
                    fd:2a:0f:5b:f6:2a:f0:01:6c:f1:a6:6b:80:1c:69:
                    68:55:21:9f:0b:fc:3c:5f:1a:27:86:d1:d2:0e:1a:
                    51:3f:68:58:30:2e:79:61:f3:00:fc:0a:12:6b:72:
                    b2:74:13:b4:ff:cc:15:3a:4c:07:03:7b:4f:a2:0d:
                    ef:5b:5a:c9:02:f6:b0:18:2c:d6:53:3b:82:98:97:
                    7d:a9:9c:15:e0:f8:b3:68:ec:3f:e0:c5:f6:e7:11:
                    b6:29:af:78:f5:3a:00:15:b6:77:25:14:82:75:e1:
                    61:a3:bd:f7:48:45:e6:e2:88:fa:46:cd:cf:7f:39:
                    cc:44:f9:9a:ca:d0:46:4c:34:5a:66:c6:b1:6f:90:
                    0b:fe:ef:bd:09:3b:08:66:c2:e9:21:ef:ed:6e:b0:
                    99:08:fe:99:31:da:a5:61:7a:cb:43:24:15:50:72:
                    8d:ee:36:62:43:2d:50:f6:d9:1a:be:ba:b1:e9:e5:
                    cb:13:02:e0:14:cc:93:86:71:10:dd:a6:6c:60:7c:
                    64:1c:6f:ad:b6:6f:f5:b2:48:49:0d:f7:ac:f8:f8:
                    eb:cb:9a:0c:1f:d0:0c:48:02:b0:09:4e:7e:dc:07:
                    a7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A4:BD:2C:01:DE:7B:B5:33:33:01:74:BF:6E:DA:F4:00:B8:50:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl

            X509v3 Authority Key Identifier:
                keyid:57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.10.0/24
                  198.135.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:67:1a:6e:d6:15:14:f8:69:81:8d:b9:78:bc:a9:e7:75:ab:
         b6:d2:f5:28:4c:4b:6b:db:27:73:23:0e:c1:1a:3c:99:b2:2f:
         5f:15:0b:2d:ff:a1:bb:7c:a6:54:c9:c7:6d:b0:ba:82:92:2c:
         06:af:27:02:87:79:41:c0:87:91:e9:fa:ad:86:50:49:e3:92:
         04:86:0e:4b:b6:bb:1c:55:bb:84:45:b0:8a:29:d1:8a:6e:e6:
         27:0f:02:0d:69:a1:e1:02:58:0a:37:e3:af:9f:0c:55:eb:71:
         50:c9:e9:ba:2e:b8:1f:75:63:88:ef:ca:fc:c0:a0:02:e3:56:
         e0:4f:c7:20:74:73:97:de:18:59:35:5a:33:05:35:05:fc:d9:
         8a:67:f9:79:ec:a6:12:35:b9:6f:4e:63:56:75:42:e6:af:eb:
         70:6e:7f:df:3c:f1:d9:ea:db:c3:66:2c:ec:f8:c9:a9:0a:5b:
         09:eb:0d:64:f5:d9:f2:40:6e:dd:38:50:2a:71:d4:59:75:de:
         a6:1c:5a:8f:2a:ac:dc:14:a4:30:ab:75:4c:70:f2:32:4d:69:
         55:42:4b:0d:94:c1:01:a2:df:b6:41:c0:04:7c:c1:9e:91:18:
         03:30:22:d8:3a:ae:dd:c9:4f:17:55:15:3f:ba:41:d1:48:44:
         56:72:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:25 2025 by rpki-client