Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/f99d87dc-b2be-3044-a90e-6884aaaf07f7.roa
File:                     f99d87dc-b2be-3044-a90e-6884aaaf07f7.roa (raw, json)
Hash identifier:          KEyCGE4awz3rBr8uVgrfPtm3KLIlspsHNGmanr9fzKw=
Subject key identifier:   9F:64:D8:1B:1E:68:B9:FC:F5:0E:8E:C3:03:54:78:E8:90:12:68:C5
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F43285848ADC6243874388DC7E06C7980
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/f99d87dc-b2be-3044-a90e-6884aaaf07f7.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     6250
IP address blocks:        76.164.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:24:38:74:38:8d:c7:e0:6c:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=a17df5c1-ec45-4531-95af-12b615e758a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f2:18:14:70:ef:10:01:7b:b5:18:ed:a9:e2:
                    81:e4:fb:bb:f6:00:ce:68:37:1e:24:43:34:54:56:
                    b9:15:82:6c:7b:fd:b1:cd:19:27:7e:af:5e:48:03:
                    b9:70:9f:5d:96:e7:42:d3:19:b4:f1:24:39:5b:80:
                    9b:80:c3:25:4a:5e:54:c2:9f:11:8a:13:4f:70:43:
                    d5:2b:41:bf:9e:39:0a:38:89:12:b0:b0:d2:d8:ba:
                    4a:09:8c:84:49:5d:94:8e:65:c4:2b:b3:f4:c9:92:
                    85:1f:ce:cb:e6:d6:83:43:b2:f8:f6:b8:2c:86:52:
                    f4:b8:49:29:31:c8:cf:f1:87:24:2f:a8:2b:40:bb:
                    c0:06:f8:41:f3:a5:8a:38:be:de:41:f9:14:fa:8f:
                    47:53:a0:4e:17:a2:4f:50:37:b5:4f:38:ee:35:aa:
                    80:6c:bf:83:4d:46:82:0f:ce:2b:60:43:18:48:53:
                    e1:36:ba:1a:10:9b:05:a5:0c:cd:f5:75:f0:e4:49:
                    d2:5e:8f:7a:74:d6:d6:47:49:47:7e:5c:57:ae:52:
                    83:96:cc:79:b3:e2:26:47:5b:4c:56:3b:98:5d:62:
                    be:63:b1:bf:98:8f:d8:09:7f:69:e9:a0:40:9f:70:
                    f9:7f:da:bc:13:12:0a:e9:02:f7:74:4d:0c:76:f9:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:64:D8:1B:1E:68:B9:FC:F5:0E:8E:C3:03:54:78:E8:90:12:68:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/f99d87dc-b2be-3044-a90e-6884aaaf07f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:13:f5:e6:d1:e5:37:f7:65:35:aa:14:64:04:80:8a:3d:
         57:e7:44:39:e1:24:f7:4f:54:fc:1a:fe:72:81:b9:16:da:95:
         7e:84:54:b9:0f:4f:e4:5c:96:18:c9:02:2d:f2:33:cb:29:82:
         51:cf:45:0c:3b:73:86:59:e9:56:cc:1b:10:44:6e:d0:7a:14:
         8c:a1:c6:9c:24:bb:a3:0d:c7:64:4a:ac:fa:cd:aa:e0:5d:1f:
         06:8d:31:de:32:6f:88:49:6d:45:b0:00:df:a2:73:98:91:6e:
         d6:4f:df:ed:b6:69:31:a0:71:7e:76:65:e4:ef:b7:be:8d:06:
         1b:5c:68:27:30:ed:16:37:9d:2a:f6:60:63:c7:e0:5f:9a:d8:
         87:20:d8:9e:39:8c:34:fd:e9:1a:20:11:3f:25:71:48:9d:ab:
         1e:57:cc:3e:a8:53:60:4b:a4:03:3b:ff:6b:d9:9f:c8:18:7e:
         a0:b8:b5:c7:cb:8f:4c:5b:bb:a6:06:f4:34:2a:01:b0:88:f9:
         8b:49:01:0b:99:92:ec:fa:42:b7:b7:aa:40:23:06:12:3a:6f:
         80:2e:1a:8a:b9:b5:6f:9e:11:2e:a2:6f:55:10:db:26:54:7e:
         52:5d:a8:48:b1:3d:df:0b:d7:9a:8f:be:23:94:92:a6:7e:76:
         1d:24:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:29 2025 by rpki-client