Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/f3571422-bfd8-331f-9639-140fe4daa371.roa
File:                     f3571422-bfd8-331f-9639-140fe4daa371.roa (raw, json)
Hash identifier:          zue5cQPPpZ2oSA7qG/wssM/puIhsOAzrsCOIYGUT/yU=
Subject key identifier:   6E:8E:61:9E:C1:13:84:2A:9C:35:D1:9C:EB:62:7B:09:5D:AB:06:15
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F432858487CEB352AA8CB7960CEF18A40
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/f3571422-bfd8-331f-9639-140fe4daa371.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        64.95.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:35:2a:a8:cb:79:60:ce:f1:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=00d19bc8-a1b1-43ec-80d2-970e9f45b0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2d:90:05:5e:d2:fb:d6:6b:2a:0b:5b:26:a9:
                    1a:10:1f:10:21:35:e4:41:3e:a4:39:5d:a1:fc:e7:
                    3d:44:fd:1f:f1:ec:67:00:37:e0:d6:fb:23:43:77:
                    8a:11:cd:5a:c2:a2:18:68:48:48:63:1c:19:e3:3b:
                    7b:07:ac:8b:f4:fc:cd:df:90:d2:45:95:11:67:98:
                    87:1d:98:12:b1:02:61:e5:7b:48:02:c7:9b:e7:fc:
                    ba:e1:e8:de:75:59:9c:89:83:0c:c3:72:f6:84:64:
                    e0:60:a2:58:9e:f5:6a:e7:b3:91:56:38:bf:75:f5:
                    c4:51:be:ff:cd:d8:8d:b5:ec:08:b0:fe:a0:c7:d7:
                    ac:ed:25:4e:3d:b3:7d:e1:5b:81:24:cf:2e:0e:49:
                    df:b4:b6:5a:2e:56:0e:41:78:8d:48:17:e9:fb:b6:
                    93:8e:1d:29:db:36:dd:88:bf:d2:c9:59:9e:90:00:
                    5b:ae:70:3e:7b:e7:fe:a3:e7:15:85:e6:c5:99:35:
                    7e:23:bc:fd:80:3e:03:40:25:99:69:8c:01:71:02:
                    18:bc:a1:dc:c9:4d:df:2a:db:46:1a:3e:15:90:25:
                    53:4a:f5:83:f4:71:bf:76:61:52:fb:1c:a2:51:9c:
                    b0:6b:29:4a:09:1e:2c:6f:ba:34:19:f4:9f:46:d6:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8E:61:9E:C1:13:84:2A:9C:35:D1:9C:EB:62:7B:09:5D:AB:06:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/f3571422-bfd8-331f-9639-140fe4daa371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:cc:e1:dc:91:b8:98:49:eb:b8:c7:c0:5f:b9:89:e9:a6:bb:
         68:8d:c5:a7:59:9a:33:e8:e9:b6:a2:45:ec:20:c8:ad:5a:78:
         07:53:95:a3:1d:3a:1c:c5:56:fd:e1:69:ed:c2:17:00:71:d9:
         2f:e4:40:6d:62:3d:d7:e8:86:3c:fc:0e:b8:9e:23:4a:d4:ab:
         17:be:c3:c8:72:53:d8:37:f8:18:6b:b3:e2:19:ee:78:d9:3f:
         cb:6f:48:34:8a:61:8d:91:3b:bd:f9:7c:15:cd:4f:bc:a6:2c:
         5e:8f:23:f6:f2:d3:4b:1e:f1:da:46:1a:33:e2:89:90:18:e4:
         9c:d3:ab:f4:6c:0e:24:b5:42:32:f2:57:0c:47:cc:1b:da:33:
         20:90:52:d4:e8:cb:d6:24:61:b4:3e:49:05:cc:8b:74:c1:89:
         75:5f:e2:e0:28:0c:46:76:2d:90:e2:2c:bf:c5:cf:7c:e1:08:
         1d:8b:b8:bb:ca:e6:a5:d8:89:bb:d5:33:b8:8b:5f:62:dd:6f:
         00:43:29:42:11:bf:77:4f:aa:fc:2f:48:b9:26:e6:5d:7b:da:
         ec:49:ee:51:f7:58:af:b9:6f:f1:28:fc:45:65:7b:4f:ba:87:
         d9:05:a9:38:de:45:dd:4b:74:f5:04:00:93:3c:5f:79:95:64:
         e3:d0:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:33 2025 by rpki-client