Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa
File:                     b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa (raw, json)
Hash identifier:          8vAkIZW3LCwhxIgUyuOMljbvFJg6/EtjAN+/9+qjVag=
Subject key identifier:   A9:94:10:84:77:31:85:BE:38:38:5C:C8:D1:9E:9B:AA:E8:27:3B:C1
Certificate issuer:       /CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1
Certificate serial:       010D0C9F43285848C41B80E46645EFCA9F83A200
Authority key identifier: 5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa
Signing time:             Tue 04 Feb 2025 02:00:40 +0000
ROA not before:           Tue 04 Feb 2025 02:00:40 +0000
ROA not after:            Mon 05 May 2025 01:00:40 +0000
asID:                     30674
IP address blocks:        129.62.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:1b:80:e4:66:45:ef:ca:9f:83:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1
        Validity
            Not Before: Feb  4 02:00:40 2025 GMT
            Not After : May  5 01:00:40 2025 GMT
        Subject: CN=1b819917-53bb-4fc8-ba93-edfe95ba8ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:7d:e2:f0:b1:4f:bd:7a:42:89:05:ad:e8:
                    0a:f7:ea:26:57:78:cc:b1:bc:c8:a5:4f:78:be:67:
                    67:9e:ce:83:ef:e2:d0:7b:e2:0a:f9:01:68:e1:d1:
                    7a:b4:50:f9:03:1d:45:3c:82:2d:ae:29:b9:e2:16:
                    eb:7d:65:cd:e8:dd:26:e5:5a:20:0e:7c:bc:c7:c7:
                    72:83:8d:11:01:fa:ec:8f:e8:46:e6:fe:c9:cd:22:
                    77:e7:d5:3d:97:41:e1:3a:45:94:73:8c:86:47:64:
                    c4:e4:1f:2a:0c:5a:b8:86:d3:22:59:f7:ad:dc:8d:
                    a2:4e:25:a6:14:e4:39:37:a4:4c:d4:fc:8e:d0:8e:
                    12:da:64:53:81:97:17:6e:73:2b:42:87:70:01:88:
                    f4:74:ff:fe:11:c2:65:f6:91:f0:19:70:7c:38:03:
                    be:d0:a0:f0:a4:f0:14:3c:96:3b:1e:ce:fb:8c:d0:
                    22:61:38:7d:1e:cf:c2:6a:7b:49:89:c7:95:8b:91:
                    52:d9:f5:c4:f4:3a:e8:a4:eb:8b:05:1b:65:e0:c7:
                    f7:4b:26:84:a7:ab:74:50:a7:4e:ac:a8:c3:24:95:
                    ac:37:39:81:0f:30:44:24:a1:eb:37:bb:36:c1:a1:
                    1b:07:f7:93:48:c8:22:33:fa:a4:ac:af:e0:45:16:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:94:10:84:77:31:85:BE:38:38:5C:C8:D1:9E:9B:AA:E8:27:3B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:ce:68:f7:77:af:d7:76:af:c9:7f:96:70:61:5c:19:a0:
         54:c7:5b:05:8a:f7:19:cd:80:31:bc:4f:ca:53:ec:ab:0c:a7:
         05:42:be:85:06:b6:55:13:4a:34:80:f8:45:89:62:8e:c3:66:
         74:a0:12:bb:fd:a9:92:1b:41:17:c4:f4:5c:74:1a:8a:ce:12:
         02:4c:21:c2:3f:cb:dd:a8:6c:a6:c6:9d:2d:9b:f5:69:a6:7b:
         74:0b:90:36:44:6b:31:bd:c5:db:90:86:32:32:42:ff:09:72:
         7c:45:31:f6:a8:83:46:1b:c8:da:20:73:20:f1:34:a8:e5:e8:
         55:8e:32:cd:3e:73:34:35:f6:3e:f2:31:04:54:b6:be:0e:fd:
         29:f9:0d:89:ae:2e:1f:d2:3a:0a:1b:02:46:48:84:f6:2c:f3:
         33:d5:46:c6:48:57:b7:75:21:88:94:24:11:3e:f4:ca:f8:72:
         a3:1d:25:5f:b3:0f:e9:1a:fc:28:1a:cc:96:d7:2e:43:09:15:
         21:8f:34:21:e5:a5:b0:85:d7:72:49:60:66:61:23:7c:36:02:
         ee:25:2d:6e:0b:d4:db:c8:3f:1b:30:2e:72:80:25:58:43:94:
         a8:52:5f:7e:68:98:07:c7:ce:0a:39:8b:94:6c:40:0d:5c:49:
         98:91:b5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:23 2025 by rpki-client