Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a1e44f-5c92-3f2d-95bb-6078f9c5d55c.roa
File:                     53a1e44f-5c92-3f2d-95bb-6078f9c5d55c.roa (raw, json)
Hash identifier:          MhkCboo3bXJEuFgFU5OHrueHicCQQ7KFLBimCQL/Xco=
Subject key identifier:   62:05:1A:D8:96:02:F1:9C:5F:30:AA:9F:DB:8A:9C:33:E1:8A:CF:8C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C84BE9E6BD0F024888577000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a1e44f-5c92-3f2d-95bb-6078f9c5d55c.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     36492
IP address blocks:        64.9.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:e9:e6:bd:0f:02:48:88:57:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=22cd0310-adad-4f89-94b3-c67b7b1853d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:b6:15:4f:df:39:40:18:38:0f:7b:6d:41:
                    d9:bc:d2:23:29:3a:be:2b:8b:22:9a:63:2d:d4:ae:
                    d1:d2:d8:bd:ca:d8:70:fa:54:c4:2e:33:47:46:ab:
                    06:e8:10:57:a5:5f:a0:01:d7:d5:1e:da:05:75:07:
                    54:c4:5f:b0:be:8b:0a:81:62:eb:2b:8f:cb:07:e5:
                    51:43:f7:57:24:48:3a:5c:53:6b:24:81:95:fa:7f:
                    b8:66:b4:cf:43:be:95:b0:a0:25:e6:56:6c:5e:cb:
                    f9:c6:bd:8d:24:f4:2a:5d:ee:e4:f3:78:fb:8d:41:
                    66:94:87:db:1f:cb:1a:0c:d6:af:f5:d8:de:23:b7:
                    22:9b:e0:06:e4:f1:1d:49:9a:be:aa:10:51:05:ee:
                    88:f4:20:83:e9:eb:28:88:25:62:c7:44:d9:58:e8:
                    2d:d0:73:13:d4:7a:54:7b:c0:58:ef:4c:08:74:63:
                    2a:a1:fe:82:d2:9b:d5:c2:20:66:bf:7e:25:3f:56:
                    05:8a:c3:53:1f:e3:9a:9e:5c:46:98:cf:ea:3f:a8:
                    57:a0:2d:dc:e2:db:9e:b7:f3:78:d7:a0:7f:5f:cb:
                    f1:f0:85:50:c2:68:33:9f:13:d8:d2:2b:a1:5b:e2:
                    0b:32:e4:6d:74:51:14:75:44:11:47:c8:c3:33:22:
                    1c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:05:1A:D8:96:02:F1:9C:5F:30:AA:9F:DB:8A:9C:33:E1:8A:CF:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a1e44f-5c92-3f2d-95bb-6078f9c5d55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:37:d9:a0:00:8d:d8:95:fe:fc:61:8e:2b:05:0e:a0:19:f4:
         04:4a:ea:c0:03:d9:63:3c:e0:35:a8:6f:ba:aa:a8:b6:ea:f9:
         6d:41:b8:c9:94:eb:87:36:8c:9c:c4:17:7c:f1:c6:42:af:c8:
         e7:4a:61:b3:28:7f:65:df:da:ba:a3:49:f6:57:9d:87:0a:f3:
         2f:40:2a:9c:ff:d6:aa:b6:d3:0c:8a:de:db:b1:b5:48:be:23:
         e6:b6:11:5e:4a:f8:36:c9:44:1d:24:29:8e:4a:84:c5:25:6c:
         9a:c3:66:59:b1:a0:2b:e2:8f:0a:ad:53:74:37:83:88:3f:4d:
         69:fa:11:97:5c:5b:63:3e:9e:11:fe:72:b4:89:76:6b:b1:eb:
         8f:79:ac:25:30:0c:b2:ed:56:c2:0d:5f:4f:dd:d7:90:f7:8c:
         7e:ac:7a:00:05:0e:06:30:68:6d:28:23:a0:6c:f7:71:67:3a:
         3d:4d:d5:96:eb:6d:50:ce:94:1f:0f:dc:d4:cf:e4:07:77:87:
         f4:1e:ea:3b:79:71:2a:45:20:5b:ef:2d:14:a7:01:52:9b:7e:
         99:70:ec:f3:ac:34:37:73:6b:5a:d0:4c:f8:c7:d8:02:42:d4:
         a4:67:b3:5c:b2:3a:fd:0e:f7:be:2d:78:6b:f2:c7:bb:d1:7b:
         9d:1b:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:31 2025 by rpki-client