Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/e064a954-bb6b-3801-b67c-53a3ce99c4a1.roa
File:                     e064a954-bb6b-3801-b67c-53a3ce99c4a1.roa (raw, json)
Hash identifier:          IG2Kuam6lot2W6wb6LH0gnYI99otuO9YK728fk21C4o=
Subject key identifier:   E9:66:EF:1D:A2:96:5A:BA:30:7F:8E:DF:F4:8E:2C:39:61:88:99:56
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F432858495ABEC76DB147E00DD7DAEB00
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/e064a954-bb6b-3801-b67c-53a3ce99c4a1.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     46457
IP address blocks:        164.116.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c7:6d:b1:47:e0:0d:d7:da:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=b88b5a3f-2ca7-4a17-99f8-9ebfc178b019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:ac:23:3e:d6:79:a1:db:22:80:90:f8:13:
                    5e:ce:f7:22:d4:f8:ae:32:aa:52:a7:6f:bc:af:b4:
                    93:d0:5a:35:d7:95:bb:21:31:d0:a2:f5:06:d1:0c:
                    53:99:a1:83:92:69:e9:98:46:0f:aa:e3:84:77:46:
                    36:9a:25:08:50:e5:ab:c2:d4:3f:cd:b1:e2:3d:f0:
                    a0:c4:bf:20:15:89:c0:1d:59:75:d6:b8:7a:9e:f8:
                    b9:b1:88:7c:62:db:8d:a7:0a:6c:a7:6b:7f:a3:97:
                    5e:d5:28:74:5a:92:c8:5d:2c:0b:50:dc:c8:2d:59:
                    7c:3c:d7:19:c0:19:e0:60:e8:c5:a5:c1:ef:c6:fb:
                    3a:34:a4:76:2b:fb:bf:77:72:94:66:f5:84:64:3f:
                    3d:59:cc:e4:ec:52:1a:14:0a:88:56:34:0a:af:18:
                    fd:00:98:b2:60:30:d4:fd:a1:28:19:a2:4d:16:8d:
                    3d:38:ab:9a:5d:df:48:65:b1:48:ce:58:0a:d9:09:
                    08:96:47:a9:0d:c3:ad:97:17:4e:f8:69:ad:d9:b8:
                    5a:de:53:22:68:1a:cd:79:7a:f0:75:b1:41:fb:99:
                    6d:5d:6a:da:dd:f1:07:76:33:d9:c3:ea:e9:41:e9:
                    3b:1a:34:af:50:93:2d:8f:20:84:28:26:89:ed:48:
                    2e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:66:EF:1D:A2:96:5A:BA:30:7F:8E:DF:F4:8E:2C:39:61:88:99:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/e064a954-bb6b-3801-b67c-53a3ce99c4a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1a:a7:c3:32:ff:3c:b0:f0:b0:bb:53:83:6b:4b:58:fd:d0:
         ff:6f:53:f2:1b:dd:06:27:fa:63:91:7c:f9:7f:be:43:88:a4:
         85:db:2f:4a:5c:00:6b:6c:e7:56:ab:19:1a:9e:5f:63:1b:c0:
         87:f6:7b:ea:d7:e0:8b:04:ae:b5:7f:38:2f:1a:46:b7:30:c7:
         72:41:94:fe:69:e7:b8:5a:4d:d2:61:e3:01:40:08:3f:d5:f4:
         eb:ac:0e:65:de:c4:bc:93:f8:6f:eb:30:95:f8:74:ba:6e:21:
         2c:0d:85:73:9d:b7:df:7f:c0:ba:f9:f6:1c:8e:5a:eb:5f:25:
         a6:b7:f8:81:57:a9:81:53:e5:44:c2:9d:88:37:af:4a:41:82:
         27:7d:b7:68:1b:83:98:67:5d:1e:09:b6:29:35:3d:f3:de:6e:
         b8:85:eb:7f:aa:dc:ac:29:81:38:da:53:1f:7b:01:af:f9:16:
         d0:23:eb:f7:d2:ca:5a:2b:1e:8a:94:4b:f6:18:ab:14:dd:6e:
         b8:f5:72:9d:5a:bc:58:d5:cf:8d:4b:3b:23:3e:55:77:6f:b4:
         1f:e8:79:fc:ae:73:51:4b:95:09:37:9b:f3:e9:91:a0:85:b5:
         d6:86:64:8b:f0:14:43:3d:33:ed:5f:bc:c3:57:a8:18:fc:ef:
         e2:10:2a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:52:58 2025 by rpki-client