Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/4571e95a-de62-38cd-b7f3-2899cf91497b.roa
File:                     4571e95a-de62-38cd-b7f3-2899cf91497b.roa (raw, json)
Hash identifier:          jSZzoPJQskG4OeK2eL785Y23KAzuHFIktaV3UxNRpeY=
Subject key identifier:   BA:8B:88:E3:7C:1E:73:DA:2B:4B:74:95:0E:4A:DF:68:76:04:22:A1
Certificate issuer:       /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial:       010D0C9F4328584930DE69DA036A9E7B7F4D4600
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/4571e95a-de62-38cd-b7f3-2899cf91497b.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     16686
IP address blocks:        64.68.192.0/20 maxlen: 24
                          64.68.192.0/24 maxlen: 24
                          64.68.193.0/24 maxlen: 24
                          64.68.194.0/24 maxlen: 24
                          64.68.195.0/24 maxlen: 24
                          64.68.196.0/24 maxlen: 24
                          64.68.197.0/24 maxlen: 24
                          64.68.198.0/24 maxlen: 24
                          64.68.199.0/24 maxlen: 24
                          64.68.200.0/24 maxlen: 24
                          64.68.201.0/24 maxlen: 24
                          64.68.202.0/24 maxlen: 24
                          64.68.203.0/24 maxlen: 24
                          64.68.204.0/24 maxlen: 24
                          64.68.205.0/24 maxlen: 24
                          64.68.206.0/24 maxlen: 24
                          64.68.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:69:da:03:6a:9e:7b:7f:4d:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=576c619e-5638-441a-bf8a-080ac03891e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:2b:38:4b:36:7d:63:fc:f1:bb:81:d0:7b:
                    fd:39:68:c6:49:03:a6:14:8d:63:3e:99:7c:75:41:
                    9b:de:d2:6b:6b:6a:2f:54:0d:8c:e8:63:02:6b:50:
                    b6:dc:b4:07:f7:90:20:c1:e1:ae:d2:9f:bd:a2:8e:
                    5f:34:3b:4e:38:23:33:a7:a6:3e:39:e3:e7:0b:f3:
                    cb:8d:80:23:f7:39:26:62:b2:15:65:77:a3:7c:5f:
                    69:71:72:5a:fa:17:74:f0:e9:a7:8c:b5:ba:34:4a:
                    9c:79:44:e7:69:50:1f:5a:bf:be:31:cb:18:60:5a:
                    66:05:ea:64:42:14:c8:89:38:bd:ff:8d:11:26:bb:
                    52:20:b9:62:ba:f1:96:c4:8e:3c:08:c4:df:4e:63:
                    3f:23:b0:dc:01:66:85:e8:e7:64:8c:ec:e6:84:1b:
                    06:b5:b9:f7:54:ad:83:04:49:8b:5a:b1:4d:c3:fb:
                    43:03:10:58:e5:10:b0:b2:c1:8d:c2:34:4d:4b:95:
                    07:b7:1a:05:70:33:b2:2c:86:55:cb:7b:2d:2e:13:
                    b5:f7:9a:4b:8e:93:7c:73:8d:b5:2c:e2:ad:c6:b6:
                    99:8c:6b:02:da:30:46:de:89:b5:2d:79:71:da:df:
                    9f:50:af:0f:37:f4:77:38:2f:c2:4c:50:77:07:c3:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8B:88:E3:7C:1E:73:DA:2B:4B:74:95:0E:4A:DF:68:76:04:22:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/4571e95a-de62-38cd-b7f3-2899cf91497b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl

            X509v3 Authority Key Identifier:
                keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:13:f5:27:b9:0a:70:98:f7:85:50:b4:35:d8:b5:7b:4f:f3:
         79:69:83:2b:47:a8:25:2f:4e:80:80:2b:6c:10:33:89:c8:af:
         90:7f:84:f4:8a:79:27:e6:36:cc:8d:9a:c0:6d:02:55:bb:22:
         df:4d:75:74:0d:94:8f:fa:00:3c:49:11:a9:2b:9a:2b:a8:d3:
         7f:c7:a0:63:2e:98:e5:6d:b4:a3:89:03:5b:00:61:43:95:c5:
         7b:56:09:26:e0:8e:46:21:97:0a:c1:cb:ca:a4:87:79:58:4a:
         1c:26:c3:92:61:28:78:b9:a1:12:45:0d:ab:5a:5e:39:97:ff:
         81:bd:14:e2:a6:1b:06:a4:0d:5e:4f:e4:f1:45:a1:63:5b:d1:
         56:5b:b6:92:45:25:51:96:68:e1:aa:8b:fc:6f:da:a1:db:3e:
         ad:ba:b9:39:97:89:c2:e4:45:d7:d8:21:9d:ca:45:50:f2:f1:
         97:b2:f7:e0:21:10:d8:28:3e:53:27:a4:55:63:51:b9:de:58:
         46:67:9d:d2:d6:02:bb:61:70:fa:08:9e:a6:b0:b1:f2:74:c2:
         8f:9c:7f:23:81:63:18:1c:e1:ab:fb:66:8f:cc:bd:80:4f:90:
         17:c5:43:2e:79:fd:30:22:30:ae:77:e0:2f:16:e2:d3:52:ed:
         85:cb:4b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:21:29 2025 by rpki-client