Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/97ec0704-d5bf-386d-8a7a-64f40383ca47.roa
File:                     97ec0704-d5bf-386d-8a7a-64f40383ca47.roa (raw, json)
Hash identifier:          KX2z/uINpxPHGbF0G70kv9BMLbhvOTErgUbjRdLHAc4=
Subject key identifier:   D4:49:8F:FB:81:0E:B3:6A:C6:E2:39:5C:B5:6E:F5:19:23:97:53:AD
Certificate issuer:       /CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
Certificate serial:       010D0C9F43285848D2113A8553FEFC2EB253A400
Authority key identifier: FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/97ec0704-d5bf-386d-8a7a-64f40383ca47.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     32298
IP address blocks:        64.255.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:3a:85:53:fe:fc:2e:b2:53:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=fbede831-664c-4863-bebb-8baca387317f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:61:6f:21:3e:63:1d:30:27:f0:e3:a1:89:
                    7a:e6:4c:5f:c1:22:9c:3a:5b:7d:68:97:10:f7:5e:
                    9b:30:2e:c2:2a:4d:a2:d8:28:7d:84:7b:41:61:51:
                    12:01:c4:23:81:97:31:5c:cd:48:7d:e3:3f:a3:65:
                    2c:20:db:dd:00:59:4c:8e:a3:ee:4c:63:2a:9a:7f:
                    ea:dd:9c:d8:12:26:2f:cd:24:8b:e8:a6:1f:9f:a2:
                    a0:6b:ae:24:85:85:78:bc:51:9e:9d:f5:86:6e:1c:
                    a3:ed:e6:6a:88:33:6c:32:60:b3:3e:c8:0f:4b:8c:
                    ee:3b:65:56:c4:cb:a2:1a:98:74:ee:58:c7:95:d9:
                    9d:7f:2c:fe:50:22:82:1e:e3:23:62:24:4a:1f:cb:
                    9f:60:e3:4f:ae:94:ac:db:fc:25:e8:77:6e:9a:a9:
                    d3:c3:04:e1:e5:48:a5:d9:62:bc:7b:f6:9a:c6:5a:
                    58:df:10:6d:ae:4c:e3:05:58:50:73:94:f4:db:99:
                    28:4e:d9:a3:3d:b7:65:4e:92:0c:2f:e9:98:e1:72:
                    f2:47:c0:a8:b3:15:be:ac:5b:08:ae:ff:41:52:de:
                    c1:56:7b:ff:04:c2:fe:f3:70:0d:60:f5:2b:ac:c4:
                    6a:06:84:36:67:49:f8:42:7b:f8:e0:c4:3d:9b:ea:
                    41:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:49:8F:FB:81:0E:B3:6A:C6:E2:39:5C:B5:6E:F5:19:23:97:53:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/97ec0704-d5bf-386d-8a7a-64f40383ca47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl

            X509v3 Authority Key Identifier:
                keyid:FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:42:5b:84:30:2b:fa:da:1d:68:50:13:7a:f1:87:b0:d9:73:
         cf:96:d0:9c:c0:93:9a:d5:95:82:f1:9d:61:b0:8e:6f:de:bc:
         46:3d:50:02:b1:4a:d6:61:b9:ea:31:2d:4f:b4:2a:a2:18:1e:
         c3:d4:8b:28:a8:05:00:3d:3e:1c:96:44:33:3a:ff:28:2c:33:
         76:c3:16:f2:c7:f3:c7:d4:4c:09:51:3c:10:1d:bd:fa:3e:74:
         17:1d:e0:ac:e7:74:a1:f6:6a:a1:c5:b1:7a:d1:a3:2d:a8:41:
         6d:d9:81:e9:5f:43:d7:45:00:d9:ee:8f:f7:84:dd:d4:4a:0e:
         e0:eb:b9:67:bc:cd:e1:85:90:79:df:52:fe:32:17:a9:0d:44:
         a2:e7:63:cd:81:14:0a:f4:61:f1:34:e0:d8:4a:d9:f8:0d:bc:
         4a:b9:0f:2a:61:33:da:56:fd:09:a0:d3:50:21:d4:f9:64:c1:
         58:df:4a:31:c3:1f:a1:28:63:4c:dd:33:cf:02:1f:42:18:85:
         93:90:43:0f:22:eb:50:31:54:6c:9a:99:cf:aa:e8:41:f0:21:
         fb:01:08:df:4a:60:a1:7d:da:64:e9:d7:32:35:64:9b:90:4a:
         7d:42:18:08:ea:d5:4f:03:45:54:c7:f5:3b:e6:c5:3f:f2:e8:
         a4:8a:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:05 2025 by rpki-client