Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/adababfe-130c-375c-8caf-b14bce1dbd82.roa
File:                     adababfe-130c-375c-8caf-b14bce1dbd82.roa (raw, json)
Hash identifier:          90yvhQm2miGL6x7/B3SZ8CgVeDlCNrBJep4pAZPS4d8=
Subject key identifier:   F9:58:8E:A8:03:70:CF:07:6A:29:0B:75:3E:8C:7A:D9:8F:13:57:DB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848BBBB7F0590FC2C5FC032B380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/adababfe-130c-375c-8caf-b14bce1dbd82.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     64267
IP address blocks:        68.65.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:7f:05:90:fc:2c:5f:c0:32:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=aa74dfa0-2b74-4570-8b95-acaab5ac8d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:da:3b:38:6b:e8:f9:9d:70:ba:dd:2e:f3:
                    12:65:c3:1d:e2:00:fc:c4:e8:39:a1:4e:6d:96:87:
                    5f:a0:77:00:13:7b:e8:c7:43:55:8c:8c:13:fa:0e:
                    9f:ae:18:0c:1a:37:b9:a9:cc:5e:3d:08:ce:b0:d7:
                    43:99:39:c2:8c:1a:98:ea:5e:7c:97:d2:89:79:a8:
                    c0:e4:ea:88:ff:58:69:88:07:90:f3:63:a4:10:cc:
                    47:66:de:a5:cd:a6:9d:2a:cd:7e:74:11:0c:21:06:
                    5e:05:9c:71:03:77:aa:05:20:17:94:4c:70:cd:a1:
                    e2:c2:c5:ab:af:d3:03:5c:50:f0:4f:ea:b8:e2:65:
                    b2:1f:cb:ee:10:a8:de:3b:7e:2a:c5:3e:5f:81:4e:
                    19:0d:8c:45:f2:c9:e2:d0:45:ba:cc:57:fe:ae:58:
                    46:f4:79:b4:39:2c:f8:54:4c:12:87:6b:ff:32:56:
                    a2:da:b0:c6:e6:cf:0c:ec:73:0b:e4:d2:71:6f:f1:
                    bf:5e:5e:0b:65:02:7d:22:37:3f:a3:f2:79:8e:fb:
                    e0:c2:50:bb:5f:7f:d6:6c:6a:66:72:86:c9:00:42:
                    e2:3e:5b:47:b3:b2:cb:b3:07:a3:82:cc:06:a3:6b:
                    fc:62:51:82:1d:4e:72:95:f7:ae:21:10:81:e2:30:
                    5b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:58:8E:A8:03:70:CF:07:6A:29:0B:75:3E:8C:7A:D9:8F:13:57:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/adababfe-130c-375c-8caf-b14bce1dbd82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.65.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:83:33:91:ef:c3:da:b8:1a:94:40:b7:4a:ae:e9:80:7d:3a:
         63:8b:9c:fb:9f:f6:c4:b8:e4:9f:1f:0a:15:e6:ae:ad:6b:f7:
         50:e8:3a:d6:2a:8f:2f:59:8e:6c:fc:ed:fc:c0:59:64:75:a4:
         c3:f6:4c:70:95:eb:92:7e:3d:ca:41:5e:5b:85:25:d7:10:61:
         fe:6f:5f:e1:fa:aa:ec:9c:dc:55:3c:90:a3:18:b5:96:e6:43:
         46:86:50:8f:0d:01:e8:26:59:94:f9:7f:5f:49:96:2d:e1:49:
         d8:43:f2:11:f6:4f:60:f6:a0:21:18:05:99:89:96:ff:aa:dd:
         36:83:dc:b6:cc:b4:5f:9c:65:d2:12:06:5f:9a:99:1c:ec:7b:
         65:74:39:41:e9:ff:bf:4c:94:98:ea:b9:e4:03:77:f3:e4:eb:
         2b:14:25:b0:d2:61:35:4e:67:87:a2:8a:10:99:bd:ac:60:dc:
         e7:13:34:7e:dc:82:36:04:73:c6:ad:6d:3e:fd:cd:c7:1c:2f:
         e4:55:67:4f:cb:d2:aa:9e:25:b8:c0:7a:70:f7:51:3b:13:c6:
         d9:80:3a:ef:15:f7:1f:3f:22:70:37:1b:ca:c3:4c:03:f7:94:
         07:5a:f4:4f:a0:85:2f:bb:a1:90:7f:b0:42:22:c4:6a:1f:9a:
         44:e5:3a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:15:35 2025 by rpki-client