Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/02d4a276-da1e-38dd-8c6d-9f57f0550d7e.roa
File:                     02d4a276-da1e-38dd-8c6d-9f57f0550d7e.roa (raw, json)
Hash identifier:          67H0g2T0UCTjHkwGAYESWGH/cGqVYxr9CKPaXjHIZwo=
Subject key identifier:   81:20:F9:7B:34:EC:AF:23:1D:3C:CF:6B:CE:42:B2:6F:B9:E3:D5:35
Certificate issuer:       /CN=08e3f98b-676d-49af-91dd-964a1e63df3b
Certificate serial:       010D0C9F432858484C1019492A850CFB6C61CD00
Authority key identifier: FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/02d4a276-da1e-38dd-8c6d-9f57f0550d7e.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     8075
IP address blocks:        64.112.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:19:49:2a:85:0c:fb:6c:61:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e3f98b-676d-49af-91dd-964a1e63df3b
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=e8132f95-6115-4578-88a5-41ef6605e893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:4f:0a:ae:fc:47:27:a3:fb:47:09:7f:a4:
                    85:da:be:23:bb:a8:66:3a:64:40:7c:03:b6:6d:57:
                    03:45:ba:10:00:89:48:ca:bb:d4:3b:39:76:85:91:
                    15:6f:39:38:8b:4e:df:06:14:2b:f2:ff:1f:92:26:
                    64:6c:8f:10:58:8d:46:49:66:a9:e1:86:d2:f7:13:
                    99:c5:82:9b:96:d4:ec:11:6e:04:22:68:9c:1f:7a:
                    41:c7:cb:b8:5b:86:f8:95:3b:14:b3:e4:96:3f:f9:
                    ef:96:94:46:dd:42:69:a3:fe:85:db:44:6a:6a:d3:
                    8e:5b:e0:2f:d2:c7:92:6f:2b:dc:f2:35:2f:51:8a:
                    97:50:fc:4d:fc:24:78:35:5a:4b:21:ac:cc:71:d7:
                    d7:f9:fa:e9:3f:bc:dc:e7:8e:70:07:58:58:7c:b0:
                    89:8a:02:71:1b:1b:48:d0:36:bc:ff:ac:ab:19:41:
                    87:a4:7e:2e:4f:4e:ac:76:2e:64:60:ec:1f:0a:f3:
                    a5:9a:24:92:7f:5e:be:31:a4:32:9c:ff:cf:1b:8f:
                    69:41:48:97:6e:0a:9a:16:a4:58:c2:70:a4:2f:fe:
                    db:de:5c:b1:78:34:28:cc:98:25:fd:a3:5e:ca:45:
                    d2:51:f2:15:dd:aa:0c:f6:bf:79:d3:46:b0:b0:08:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:20:F9:7B:34:EC:AF:23:1D:3C:CF:6B:CE:42:B2:6F:B9:E3:D5:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/02d4a276-da1e-38dd-8c6d-9f57f0550d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:b5:c7:d2:2f:d3:84:75:73:7e:22:e9:48:91:33:6e:2b:
         b3:b8:7d:61:55:db:fe:79:fa:fd:9c:f7:3f:90:6f:d1:83:1d:
         c5:a8:2b:cc:6f:da:84:79:7c:e4:75:48:07:0c:37:6f:ab:80:
         12:d4:65:20:a2:ad:c2:df:72:f7:aa:98:4e:65:64:fe:ca:84:
         e1:47:76:0e:bf:19:00:67:02:16:d4:e0:f7:c4:fd:b5:67:99:
         36:bd:0a:c6:a9:04:af:16:c2:dd:5b:c8:86:d3:4d:72:8e:1a:
         f2:b1:a5:10:38:31:cd:11:8e:a2:9b:68:c3:95:f5:f9:aa:6e:
         9e:93:22:dc:52:b8:4d:65:a6:40:89:21:97:64:c1:30:11:7f:
         b4:25:10:1d:d2:e1:09:5a:33:9b:32:0a:6a:6e:e1:b8:32:70:
         4f:db:94:e5:7e:a1:bf:71:59:76:a9:3c:27:c8:b3:07:b5:54:
         4f:55:53:97:df:89:12:2e:5d:c6:57:a2:96:a6:ff:55:fd:5b:
         87:ad:40:42:f9:c0:01:37:ff:8e:b4:f5:07:d5:16:ea:4d:eb:
         b8:a5:49:70:5e:16:02:af:44:18:e0:ed:4f:b7:64:3a:ed:63:
         01:e6:51:a9:f6:86:b9:98:7b:8a:f1:d2:01:d6:ac:ea:4c:c6:
         2b:93:42:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:34 2025 by rpki-client