Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa
File:                     cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa (raw, json)
Hash identifier:          HBb2+GA1JIF6DtP+awFoYSZLuUiJgBxH3t3MvIwdakQ=
Subject key identifier:   81:6E:16:91:D3:C1:42:E3:84:21:83:E6:95:42:A1:B5:34:38:28:21
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F432858488DAB4C0F1AD00798A4EDA480
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        64.95.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:4c:0f:1a:d0:07:98:a4:ed:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=b6d37de6-a9a2-4dd8-83d3-b32fba760387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:53:7b:29:24:2e:85:89:13:ac:cf:19:a1:70:
                    80:9b:7f:d1:67:9f:b1:ac:e2:76:8c:86:d7:8a:78:
                    16:47:87:77:f2:1d:e6:5e:7d:b1:92:2a:77:c7:13:
                    56:68:52:68:00:3a:c1:6c:e0:bd:b7:4e:1e:88:09:
                    e2:8d:3a:3d:53:09:f3:de:13:fc:6e:3a:a8:66:f0:
                    2a:4d:a3:0f:3e:62:49:cb:3f:d0:7d:c2:1e:59:38:
                    f4:82:5c:17:43:62:56:8c:e2:3b:56:da:45:6c:f0:
                    80:60:fc:54:9b:06:51:9f:16:ae:5a:16:e8:b4:a7:
                    c3:78:f1:92:9e:f8:fb:19:2d:df:b9:07:d1:45:98:
                    ec:17:f7:24:03:fc:27:e1:87:f7:54:7e:f0:c7:a9:
                    1b:a1:ac:97:af:60:58:6b:01:1e:db:68:c0:36:f1:
                    27:d9:18:4a:49:87:bd:98:6f:fa:28:ca:4c:8a:23:
                    b5:9c:13:4a:08:68:99:fc:6e:15:96:d2:71:50:d9:
                    93:eb:0a:88:f5:29:69:42:76:e9:f2:86:e8:d6:1c:
                    42:d9:7d:b7:69:4c:2b:99:c2:ca:a2:4d:52:64:12:
                    ee:09:b7:14:f1:20:48:ac:b3:d5:63:9c:a3:17:a1:
                    a4:78:db:9b:4b:e5:e7:d5:f9:73:6a:be:26:61:7c:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6E:16:91:D3:C1:42:E3:84:21:83:E6:95:42:A1:B5:34:38:28:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/cba884a3-9e62-3f3b-91c7-48c3a9a5d175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:45:0e:5a:26:e3:ae:81:53:55:e4:cf:f4:01:51:14:83:c9:
         4a:61:e8:03:e3:d1:7f:e3:5f:0d:ce:bd:16:f0:ff:c2:40:01:
         2e:0b:ee:78:43:79:ee:21:87:c6:a0:df:c9:32:9c:44:71:9b:
         fe:7d:ca:31:4b:18:4a:e6:4d:bc:ea:99:46:c0:e9:cb:d3:fc:
         52:4d:66:ec:0c:1c:9e:25:18:15:53:7e:b8:04:c8:dc:03:f1:
         7d:03:13:24:3e:81:9f:ea:27:96:f9:3f:58:d5:90:45:e4:93:
         84:55:db:c6:03:cf:27:5f:21:7c:ac:40:98:ce:5c:38:e6:c7:
         b7:26:f8:e0:ee:1e:eb:a2:16:38:35:f4:f8:fb:b9:f7:d9:ed:
         8f:7c:3d:9b:f0:52:af:6c:b3:63:0d:29:f7:83:ad:67:ef:be:
         cd:9a:4e:6d:ab:b7:54:b6:3e:61:b9:36:33:04:66:cf:2a:61:
         8c:6a:1c:63:a4:d0:3d:25:73:eb:53:c2:d8:28:54:56:69:a2:
         29:c7:bb:f5:a9:c9:0e:95:32:a2:4e:99:a9:95:00:79:25:cb:
         68:d0:63:89:06:c2:54:9c:28:ec:fb:2a:f9:c8:9b:8c:4c:a4:
         07:c1:f5:16:07:e9:ec:88:89:b7:16:36:b0:6e:16:d9:98:b4:
         00:4d:f1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:43 2025 by rpki-client