Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa
File:                     7aa03dbb-c767-31ad-805f-79f186089aa4.roa (raw, json)
Hash identifier:          r7SDHcv74Cp8f0POzRoj/pMGbtB05Ha3kSLHI1xNxmY=
Subject key identifier:   44:FC:BF:5F:1B:37:90:81:9F:42:F0:7D:FE:57:42:2D:60:45:97:33
Certificate issuer:       /CN=a5227ba9-e279-4048-a93b-e62de3502f68
Certificate serial:       010D0C9F43285848547030D45BC33D833AB94010
Authority key identifier: 44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     395896
IP address blocks:        64.89.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:30:d4:5b:c3:3d:83:3a:b9:40:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5227ba9-e279-4048-a93b-e62de3502f68
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=f6760f34-aafe-46c6-9398-aa37d2a2fc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:6c:25:de:c4:c6:61:4a:ea:39:0d:ea:b5:
                    4d:dd:c5:d2:7f:25:d3:36:04:7c:4a:3e:98:f4:cd:
                    3c:0a:90:c2:86:c0:69:b8:16:a9:6d:df:07:ea:c0:
                    2a:88:d1:fd:56:4f:16:1c:2e:de:49:fa:45:5f:e5:
                    8b:05:78:67:77:78:6e:ec:bd:54:6c:b5:72:2c:89:
                    f3:4a:9e:23:ff:22:6f:7b:5d:ee:3a:b2:b4:7b:2c:
                    61:49:08:be:68:c0:70:a0:30:79:41:c4:da:06:dd:
                    9c:c7:ba:3f:f6:d9:3e:a0:6b:67:59:1c:fd:02:2f:
                    1b:de:9e:af:aa:17:44:c9:da:df:a8:fe:15:7d:b3:
                    38:eb:7a:ca:b3:a2:aa:bc:07:e7:d7:66:5a:31:13:
                    8f:5e:ba:8a:4c:75:29:7f:be:c8:98:f4:ac:f7:97:
                    55:1a:5c:ab:bc:83:17:53:d2:c0:68:0d:c6:55:a5:
                    38:21:6b:85:12:97:6f:ae:df:4b:bd:cd:7a:a8:80:
                    26:e6:fb:85:a8:32:c9:65:0c:a0:0c:34:3b:1b:a2:
                    bc:30:06:9c:85:de:7b:15:a1:f5:fd:e8:89:db:9e:
                    51:e9:57:48:c9:ec:4f:73:ef:42:91:2a:c9:a1:e2:
                    37:9e:72:e1:85:c1:cb:55:53:4c:2b:e9:5c:0a:0e:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:BF:5F:1B:37:90:81:9F:42:F0:7D:FE:57:42:2D:60:45:97:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/7aa03dbb-c767-31ad-805f-79f186089aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68/a5227ba9-e279-4048-a93b-e62de3502f68.crl

            X509v3 Authority Key Identifier:
                keyid:44:02:F2:CE:3C:E2:5B:C5:F9:17:9C:EB:4A:5B:4B:3C:3A:3E:96:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5227ba9-e279-4048-a93b-e62de3502f68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4f:7b:91:e1:5a:07:f7:b2:36:79:e0:52:c9:c3:69:f2:e5:
         a7:a7:48:2f:d1:e1:96:22:fb:80:bf:41:c1:00:a0:a3:db:5c:
         9b:e2:59:b7:16:0c:75:3a:b8:e7:e9:9f:1b:b5:01:cf:d7:6e:
         09:92:76:07:fe:da:4d:a2:5d:13:fa:35:77:71:7f:ce:db:62:
         7c:77:ca:93:ab:c7:4c:8f:84:90:93:86:35:60:04:be:66:b2:
         ae:75:4b:05:bf:f6:6f:37:32:8e:55:98:d5:7e:84:68:c2:b2:
         84:1d:eb:c2:b3:ca:39:f0:c6:88:e9:21:dd:17:c0:08:32:13:
         53:37:51:dc:2f:41:bb:d1:0e:05:33:58:96:19:86:1c:f8:15:
         c3:06:ca:b4:b7:c3:fe:3d:a0:ae:12:63:cc:93:84:b0:c6:41:
         43:47:d3:f4:09:9a:a4:1f:10:21:ed:0c:61:6b:4f:9d:2e:74:
         a9:39:d6:f2:1d:47:82:34:90:25:c7:5a:b2:aa:11:d2:c9:72:
         94:8e:a3:c7:2d:60:9f:aa:0a:9d:63:7c:21:c4:ba:32:4b:a1:
         a6:1c:c8:a5:ef:54:a6:7f:09:21:7d:df:fc:63:8f:e7:8a:27:
         cd:7c:ec:6c:06:0b:9a:2b:96:7d:10:37:16:e1:f3:a5:0a:ed:
         d2:0a:c0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:32 2025 by rpki-client