Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/64143236-c9e6-376c-bc26-60c1bf738d17.roa
File:                     64143236-c9e6-376c-bc26-60c1bf738d17.roa (raw, json)
Hash identifier:          4E+cdn5zXSkjXmpOzrJ96j+fAcjJx7xEts+kYmtDQVI=
Subject key identifier:   A7:A7:56:40:59:05:11:63:50:18:AF:11:37:0E:FA:0C:74:F8:B3:3F
Certificate issuer:       /CN=fac4bf11-5ec6-4df2-b8d1-535b6c3c7279
Certificate serial:       010D0C9F432858495D896D4F7108F2C0E1361980
Authority key identifier: F5:1E:31:A4:4F:90:79:91:BF:60:FF:EB:85:12:43:B0:01:70:C7:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/64143236-c9e6-376c-bc26-60c1bf738d17.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     40487
IP address blocks:        208.76.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:6d:4f:71:08:f2:c0:e1:36:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac4bf11-5ec6-4df2-b8d1-535b6c3c7279
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=61653687-10cb-460d-b14f-dc52809e612d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:f3:81:3b:5a:7c:f9:72:53:7d:ab:06:f2:
                    8b:72:de:8e:24:a5:33:be:60:dc:7f:bf:9c:a3:10:
                    9a:1a:f3:f1:ca:13:f4:49:35:24:a7:53:5f:01:5a:
                    f5:e7:d7:27:a7:43:f5:ad:8b:0f:4b:32:0a:76:bf:
                    25:15:2e:31:8d:4e:0b:12:54:3b:d4:3a:c5:6c:6f:
                    e9:10:f7:54:82:79:a9:48:3e:3e:d0:46:9e:e8:8b:
                    6b:82:b9:47:91:b1:4a:e2:e6:63:d2:45:64:53:f1:
                    2b:d0:df:ee:63:e5:8c:21:a6:bb:16:a3:f1:df:7b:
                    81:0f:de:4a:91:5f:dc:ca:50:b4:9d:ae:e5:a7:82:
                    1d:7f:61:91:82:3f:32:dc:24:73:b0:1e:cc:0a:e9:
                    05:42:0c:a5:18:90:0d:49:cc:9a:ba:3b:42:8d:30:
                    78:bd:4d:39:01:00:fa:04:70:b6:fa:7f:a6:c1:23:
                    e3:44:69:d3:38:05:a7:0f:f7:f5:b4:c8:8c:25:4b:
                    bd:ce:7a:5a:ae:e4:a3:a0:c4:bd:e8:7b:69:d3:bc:
                    ee:b0:87:e4:40:87:2a:12:c4:f3:1f:23:fb:e8:46:
                    90:19:9d:86:ce:3b:2b:87:be:a3:5e:5b:3b:a1:7d:
                    6f:0b:13:b2:d1:7b:85:a1:e3:68:fd:bb:b4:6a:17:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A7:56:40:59:05:11:63:50:18:AF:11:37:0E:FA:0C:74:F8:B3:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/64143236-c9e6-376c-bc26-60c1bf738d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.crl

            X509v3 Authority Key Identifier:
                keyid:F5:1E:31:A4:4F:90:79:91:BF:60:FF:EB:85:12:43:B0:01:70:C7:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:5f:0c:5b:cb:30:df:e7:d8:c5:f5:63:fd:a3:e5:fd:1f:5a:
         8c:ea:5f:6c:54:4b:93:23:ab:73:47:18:77:9d:5f:2a:d9:e6:
         33:a2:23:c7:3a:cf:7e:c0:d0:9c:67:6e:da:95:26:2f:eb:58:
         c0:5d:e8:11:31:8e:67:bf:5c:d0:10:32:60:6a:22:e9:3c:69:
         39:61:35:7a:98:fe:05:a7:da:e8:cf:42:0a:41:66:ee:02:be:
         e2:f2:a8:b9:fb:d6:0b:2e:87:71:bb:a5:95:33:d9:bd:04:5c:
         21:e6:96:a5:fb:3b:41:d1:13:36:0f:65:79:5b:0b:94:22:5a:
         0c:47:bc:4e:e4:75:73:69:48:2a:ce:18:cf:05:43:d6:e2:d2:
         60:26:c4:e5:df:c2:93:82:fe:da:fd:f5:0a:35:96:81:1b:f0:
         0e:83:7b:ce:34:9b:e2:88:44:9b:14:0b:3c:84:26:6a:ff:6a:
         d9:65:4d:ef:41:de:de:e8:3e:53:6f:36:32:4c:1c:b2:62:de:
         af:41:52:55:9e:35:c0:85:97:49:bf:db:fc:4d:57:f0:bd:97:
         c2:3b:aa:21:b4:6a:ea:1a:f4:dc:13:ce:93:8c:20:09:1e:99:
         28:c2:02:33:9b:cf:16:51:c3:10:6b:fa:d1:46:fc:12:77:92:
         d8:08:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:20:10 2025 by rpki-client