Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/f279cc96-80dd-35e6-9557-660f0a24c19f.roa
File:                     f279cc96-80dd-35e6-9557-660f0a24c19f.roa (raw, json)
Hash identifier:          9w+JNYuLDg3cVuV/lPHVstrZuSa4Di+adV3bc2mSFn8=
Subject key identifier:   F3:4F:DD:6A:40:C6:A9:38:61:E7:53:D5:C2:3E:C5:10:E8:0F:C2:DF
Certificate issuer:       /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial:       010D0C9F43285849FCAA85B54C2FDFF8BCD42D80
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/f279cc96-80dd-35e6-9557-660f0a24c19f.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        64.42.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:85:b5:4c:2f:df:f8:bc:d4:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=d6a79deb-f47f-4f4f-9fc0-ba5aa6619618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a7:3c:d8:38:e7:12:20:82:b7:0a:62:d0:85:
                    e1:0d:b1:ba:34:98:08:80:7c:0c:f1:05:56:54:64:
                    a5:b4:41:3e:83:a9:b6:66:55:80:a6:a8:9e:c2:f3:
                    34:d8:fa:41:56:52:a6:de:9c:73:f1:a8:84:7a:9a:
                    86:86:e4:f1:13:b6:47:b1:35:53:db:5c:b2:7a:1f:
                    0f:86:f5:33:9e:1b:af:ed:e8:2b:9f:f8:e6:47:dd:
                    e7:08:ee:48:f1:02:87:2c:e8:eb:ea:c2:ff:63:8f:
                    b0:85:b6:2f:63:ff:1f:bc:2d:95:c7:dd:ca:83:56:
                    98:05:5d:cf:65:c9:50:09:b4:31:24:e2:a9:3f:51:
                    38:51:ba:4f:14:5c:49:33:c9:e3:a1:92:b6:cd:ba:
                    f9:92:55:1c:2f:ce:4b:01:ff:54:e9:9c:4a:8a:f4:
                    cd:67:06:9f:c3:ad:25:cd:f5:59:60:73:bc:af:14:
                    48:23:ef:72:b5:12:d5:f7:ad:d3:53:08:2d:9b:7f:
                    68:ac:4b:2f:a9:c9:29:8e:ef:ba:c4:72:1f:13:8c:
                    09:1f:31:18:0a:35:90:d6:5a:41:19:31:48:fc:8e:
                    ca:ba:29:b0:d9:87:d8:0d:26:75:1e:7c:57:c3:dc:
                    66:03:62:46:ed:2a:b9:69:38:ab:24:3e:94:43:d6:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4F:DD:6A:40:C6:A9:38:61:E7:53:D5:C2:3E:C5:10:E8:0F:C2:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/f279cc96-80dd-35e6-9557-660f0a24c19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl

            X509v3 Authority Key Identifier:
                keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:85:f6:13:6d:26:40:47:af:20:97:33:7f:4e:03:d9:d8:f4:
         e1:dc:1e:77:d2:2a:9c:0e:cf:b0:74:e9:bf:bf:d9:1c:5d:98:
         0f:b5:2a:6c:6e:5c:bc:4f:96:96:f0:7e:3c:87:ca:46:25:6a:
         72:6b:ea:04:39:7e:65:f3:35:18:24:3c:e5:f4:71:56:4b:5f:
         bb:a9:7e:bb:ab:0e:ec:c7:8b:9c:6f:e8:8f:d5:4c:0f:53:3e:
         fa:b7:7c:5c:74:d9:de:5f:18:3b:e0:59:1a:3c:07:83:86:e7:
         10:cb:9d:97:32:39:93:c3:3c:c5:22:81:85:a9:5c:ee:5c:c5:
         a5:f7:73:f4:d4:82:bb:a2:1e:40:c8:7f:61:b2:12:88:c7:6c:
         4c:d9:74:22:63:4d:e3:39:81:9a:1b:c2:26:3d:5d:a0:7d:be:
         38:9f:b3:0b:3d:42:53:dc:7d:b9:08:f2:eb:c0:fd:44:4b:db:
         a5:c1:1b:d9:7b:34:f6:48:47:d3:b4:b7:ab:23:32:d3:26:fc:
         7f:63:8e:64:1e:b0:4d:29:49:3e:e7:97:ef:70:cc:4b:40:14:
         a6:59:d4:46:51:c4:3d:58:ae:8d:d4:99:c5:45:31:4a:0e:d9:
         1b:30:76:07:c3:c1:91:e9:f0:c0:0d:59:aa:80:2c:4b:76:ff:
         27:3b:1c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:25:01 2025 by rpki-client