Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa
File:                     9150111f-8e0d-3fbe-b669-7e5d4f757864.roa (raw, json)
Hash identifier:          QxmpQd5TJDr8DN4bhdhEfNIkYoKji28OFgyJmsbkYCs=
Subject key identifier:   47:AA:DE:F0:AE:E3:DD:A6:F6:0D:F4:C9:5B:4B:A8:56:D5:93:2B:DC
Certificate issuer:       /CN=9e06ce3b-4bb5-4594-bb6a-2ee5b342370c
Certificate serial:       010D0C9F4328584965E979ECDF1A10B4793180C0
Authority key identifier: 6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     397140
IP address blocks:        64.32.43.0/24 maxlen: 24
                          198.8.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:79:ec:df:1a:10:b4:79:31:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e06ce3b-4bb5-4594-bb6a-2ee5b342370c
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=ea3e7307-cacb-4d49-96b9-7c6c47dd1e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:ee:f0:41:b6:19:ba:7c:8c:92:40:ca:4a:
                    8f:a8:4b:4e:c5:b0:3d:5d:8e:ae:37:e0:f2:22:cf:
                    cf:c6:58:59:9e:ae:37:d1:d4:fe:17:b7:41:1f:05:
                    e6:3a:5a:c1:9b:f0:11:3c:e5:38:57:1f:e9:41:aa:
                    33:cf:9d:d6:0c:42:74:ed:be:b4:8c:09:03:2b:47:
                    22:46:77:65:0e:60:77:02:a3:ba:72:31:f4:80:f4:
                    08:2d:cf:78:7a:38:38:d5:b8:2a:57:48:bc:4d:66:
                    61:7a:db:ba:99:a7:17:5b:99:05:18:e3:4b:88:24:
                    27:db:08:d5:b5:a4:3d:5a:6b:02:42:fe:a5:05:57:
                    13:74:8e:00:47:20:cf:24:31:40:8b:4e:80:5f:70:
                    36:a1:07:44:9e:08:6f:36:de:34:34:1c:6e:c2:f2:
                    c3:f4:ad:de:d6:99:d0:c5:4e:13:f3:a3:ab:a3:d4:
                    e7:5a:96:29:b5:cd:82:d1:90:8f:09:a7:ca:0e:fd:
                    fe:8e:86:f7:a7:10:e8:09:ac:99:a0:b5:d3:78:79:
                    e5:21:e2:7b:0e:46:b6:60:12:fc:a0:a9:db:5e:64:
                    fc:1e:24:d9:fc:6d:d7:f6:b0:ac:56:27:a1:59:aa:
                    7b:dc:02:6c:97:a4:e7:85:a8:ff:a5:7b:73:7f:1c:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AA:DE:F0:AE:E3:DD:A6:F6:0D:F4:C9:5B:4B:A8:56:D5:93:2B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9150111f-8e0d-3fbe-b669-7e5d4f757864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.43.0/24
                  198.8.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:42:37:e1:cc:a9:f9:3c:1a:02:bc:11:39:bc:cf:62:f2:86:
         73:02:ab:48:1e:48:cb:0a:cd:f9:9e:11:3b:a7:71:f0:6f:d3:
         2b:1d:d2:83:99:7d:63:ff:d5:44:6f:35:ce:2e:66:59:ac:81:
         86:3e:1e:77:5c:a9:c7:61:6b:fc:5e:3b:b8:6c:17:7b:72:63:
         74:58:28:7d:15:0e:fb:34:51:df:2d:66:65:88:46:d9:74:dd:
         51:76:ea:2c:1e:ca:f2:3f:f6:8e:cc:a8:e5:5c:0b:a9:53:75:
         01:c7:3a:54:35:42:d4:32:d1:35:80:da:df:ec:bb:5f:c0:ff:
         a2:c1:1a:f2:21:05:8a:b7:04:79:1f:6e:8d:06:a8:cc:06:8c:
         20:fa:b9:e0:39:99:95:6a:24:d1:36:46:03:e5:d4:60:be:53:
         55:e1:fb:e1:6c:75:a4:bc:38:48:08:fe:0d:03:3a:c1:cf:97:
         05:3d:92:4d:3e:59:0d:5b:35:40:01:84:9b:51:d4:74:d6:08:
         82:e2:23:23:f1:b9:02:7b:07:f6:e0:2d:32:de:99:b5:c3:ef:
         16:04:5c:a6:9d:50:4d:df:99:9c:2b:41:66:bd:71:48:b0:83:
         35:10:e7:5c:50:7b:99:5a:19:41:3e:a8:c2:18:61:23:41:11:
         28:04:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:23 2025 by rpki-client