Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/dd98ffee-596d-3a16-b208-1c5e7235f7ff.roa
File:                     dd98ffee-596d-3a16-b208-1c5e7235f7ff.roa (raw, json)
Hash identifier:          QKp7gJqr+7mORtutWYVv6X6dCN1yZzQ0eKzb1oXpBlI=
Subject key identifier:   E4:B3:71:3D:20:BC:3F:55:73:75:16:D2:1F:A9:E2:F1:A5:7E:0C:EF
Certificate issuer:       /CN=5bfdb746-47de-4f0f-9534-ecf378b217e4
Certificate serial:       010D0C9F43285848B35B69A683C3762036E2A600
Authority key identifier: 80:C4:75:C3:F7:E4:55:62:89:B2:19:B2:F6:C0:E8:1E:30:08:AA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/dd98ffee-596d-3a16-b208-1c5e7235f7ff.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        64.13.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:69:a6:83:c3:76:20:36:e2:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bfdb746-47de-4f0f-9534-ecf378b217e4
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=5699ac42-8c95-49b6-b43c-5243dcab015b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:c2:2a:cb:91:58:ac:47:4d:9e:c3:b3:3c:
                    85:d4:f9:1a:26:9f:be:e0:67:c5:5f:61:bb:0c:e8:
                    fe:81:03:9e:0f:0b:57:3c:a1:97:19:ff:0f:60:a6:
                    f6:cb:d8:87:0e:8a:8e:bc:9c:01:e9:36:1b:bd:f4:
                    87:8b:31:ac:1b:ec:70:f2:9a:2a:c2:01:63:6a:f7:
                    d6:0b:31:dd:ea:33:45:5c:b3:eb:bd:6a:ed:d8:df:
                    08:9c:9b:48:f1:9e:0c:68:cd:af:20:26:1a:b2:4a:
                    08:6d:fc:95:55:be:0c:b2:cd:cf:23:1b:a8:50:30:
                    f3:e9:74:ff:84:ea:c2:63:0d:6a:a3:ce:b0:13:fe:
                    e7:f9:47:83:f1:ab:ce:bc:40:52:49:2f:5b:ee:57:
                    38:c5:ca:ee:47:7f:66:18:b8:8b:80:62:d1:83:b2:
                    1f:9c:7e:26:77:1b:92:fa:ac:70:1b:56:fe:b9:f8:
                    22:10:4f:59:18:af:8a:96:03:9e:bc:59:57:9c:6e:
                    66:82:64:30:98:07:35:0c:a1:fd:68:41:13:03:6f:
                    7c:99:b9:9b:ce:55:dd:d9:41:40:11:5a:e4:2e:1a:
                    0a:09:65:aa:45:79:59:b0:f1:17:06:45:88:9a:ef:
                    c0:f8:3e:67:41:cb:dd:9b:a7:fb:2d:b3:9b:af:89:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B3:71:3D:20:BC:3F:55:73:75:16:D2:1F:A9:E2:F1:A5:7E:0C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/dd98ffee-596d-3a16-b208-1c5e7235f7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.crl

            X509v3 Authority Key Identifier:
                keyid:80:C4:75:C3:F7:E4:55:62:89:B2:19:B2:F6:C0:E8:1E:30:08:AA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f9:45:15:ec:04:d9:3d:4a:65:99:5a:2a:17:cf:25:dd:ad:
         34:05:33:06:e7:3c:8b:d8:b8:4d:1b:f6:21:5a:b3:e8:a7:10:
         c1:a8:b4:77:0f:46:aa:e7:73:83:58:50:c7:24:54:82:2a:9d:
         6e:d2:56:4d:fc:4b:db:86:b2:95:48:9f:30:2c:29:bc:f7:ac:
         d1:5c:4b:5f:85:cd:a1:b6:a0:c7:d7:a4:0f:9b:d7:ee:65:15:
         a5:21:59:0b:5f:a7:e2:82:4c:ca:60:6d:c4:d4:a8:8a:98:02:
         79:d0:11:16:db:6a:1f:ee:10:20:7f:c2:6c:36:7f:fc:a1:ed:
         9f:ec:c5:ac:84:b4:03:4e:20:cf:32:91:22:2d:45:03:32:04:
         b5:07:c0:9a:7d:d7:f3:53:90:76:95:08:65:a8:fa:fa:9d:9c:
         23:15:32:56:8c:e4:77:e1:84:9d:a1:25:aa:6f:a3:db:84:57:
         88:be:fe:7b:88:d6:73:27:22:75:5a:b7:dc:bf:58:5d:74:d3:
         1c:a5:55:9e:38:4e:91:b9:03:11:c2:e4:9f:8b:43:53:7e:32:
         e4:35:1b:11:2a:6e:c4:ff:c8:67:af:8c:93:8c:12:45:b6:d3:
         18:19:cb:47:27:1e:94:6b:1d:64:70:dd:36:09:1c:25:00:5f:
         07:53:ee:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:42 2025 by rpki-client