Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa
File:                     f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa (raw, json)
Hash identifier:          Z7sBBeKeiZkkAPn4KrO6nW69hiA1s3MMKwYdg7MKrHA=
Subject key identifier:   5C:89:DA:69:2D:39:35:AE:BE:71:E2:09:21:20:B8:24:7C:1F:45:AE
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F432858492CB21EB895E34C926880CC00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     25645
IP address blocks:        64.92.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:1e:b8:95:e3:4c:92:68:80:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=3e2f1d9b-595b-480d-892d-60db5c1c3d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:fc:48:9f:83:be:97:b1:c7:6a:b8:90:63:
                    81:7c:4b:0a:ae:22:56:9e:7b:f7:21:41:ac:4d:38:
                    23:57:ac:03:10:33:db:88:cc:c8:cf:c0:5b:0e:cc:
                    14:b1:5b:54:a6:a4:5e:29:36:b4:60:e4:0b:aa:20:
                    6a:a9:53:47:10:e9:f9:af:03:f3:65:41:ef:8a:0b:
                    a2:86:54:a4:d0:84:35:30:b3:71:46:81:2d:81:39:
                    03:03:08:d1:3f:9c:1c:20:93:01:64:9b:28:a3:e3:
                    57:d3:6b:2e:b9:d8:c9:03:cb:57:fa:82:e5:86:0f:
                    43:6b:cc:2b:f7:d2:c3:9c:5b:39:43:1a:17:b2:0d:
                    9a:d5:b2:cf:da:88:ec:3f:77:65:48:29:ec:c6:3f:
                    76:07:55:64:aa:99:aa:e8:86:e6:44:81:41:f2:72:
                    9c:93:65:bd:d3:32:39:f8:63:36:90:3d:15:15:19:
                    be:bc:92:7f:bf:c8:88:4d:4b:04:b1:a0:c4:59:2d:
                    30:07:50:d8:f1:8a:c6:06:15:78:5a:7b:a5:ce:6e:
                    43:9f:fe:7c:ff:4d:bf:1e:47:bd:e7:63:2b:10:14:
                    01:a6:83:a4:ea:ae:cc:ab:41:15:61:67:18:6e:17:
                    ec:20:24:b8:fa:f1:89:a8:ea:87:43:5e:dc:6b:83:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:89:DA:69:2D:39:35:AE:BE:71:E2:09:21:20:B8:24:7C:1F:45:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f664ce0b-e9c7-3431-b0e0-d728a81e0177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e3:4c:27:6b:86:5a:62:0a:da:0a:fb:32:43:2e:ea:c2:e0:
         1d:a7:6f:61:a1:bd:09:39:3d:93:96:c2:8f:3d:47:dd:af:a8:
         07:64:bd:84:32:d2:89:1b:f1:a1:8b:e3:02:6e:2e:99:aa:50:
         fc:36:e2:2a:be:d5:6b:79:60:e0:d3:5a:8c:70:c6:10:12:36:
         15:f2:db:6a:61:14:b5:ce:6b:29:4c:3a:60:88:69:58:d4:3d:
         93:5d:57:18:50:00:87:20:f8:13:86:b1:05:1c:90:da:a1:e6:
         ce:86:12:4f:62:5b:b9:51:70:a9:fc:8b:27:6c:f1:0c:09:7a:
         a4:ed:c3:7c:90:8d:78:c9:74:e5:1b:21:9c:b0:fa:28:99:8e:
         d6:f8:32:59:18:94:7b:8d:43:59:3c:b2:8b:22:59:3d:01:8f:
         5d:c5:8a:eb:a1:53:3a:53:55:db:bd:0e:bb:32:ea:49:3f:bb:
         ae:e0:2b:f4:a2:97:85:a7:0e:4f:ae:7e:77:32:ab:c8:78:03:
         df:2b:a2:85:81:74:16:fd:9c:07:7c:b1:30:b1:36:03:9d:0c:
         8f:b7:1b:06:8a:9e:f2:0b:fa:d6:79:9d:6b:43:77:02:b5:49:
         f4:c4:9e:50:d5:43:21:a6:85:ef:30:4b:ba:97:03:2f:07:26:
         31:ec:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:04 2025 by rpki-client