Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f070a6f3-baca-3377-b676-79ab48b2a038.roa
File:                     f070a6f3-baca-3377-b676-79ab48b2a038.roa (raw, json)
Hash identifier:          YUeqGaHFVKEXtWix8Gk4vbShJpcuJTDPcZk8TDrRWEg=
Subject key identifier:   C6:2A:F9:CD:A7:3C:CD:7F:C2:5E:0F:26:DA:5A:29:CB:53:60:1D:BA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C84C0210A57057093197E480
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f070a6f3-baca-3377-b676-79ab48b2a038.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     36492
IP address blocks:        64.9.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:02:10:a5:70:57:09:31:97:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=a985b5d1-8ff7-4f9f-81d2-ddd95cbfa399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:dc:1f:67:e7:1b:77:06:c1:d6:ba:29:f5:
                    40:9f:42:56:3a:7c:74:6b:96:48:c4:98:b9:71:ae:
                    9e:5f:01:88:94:9f:9e:9c:b7:45:58:83:52:8d:00:
                    80:99:c5:8a:33:31:6c:80:fc:29:19:4d:26:f4:16:
                    4a:e5:3c:ff:b6:f6:ff:f9:b6:c3:a3:f6:ed:e5:68:
                    0f:82:4f:d1:ab:0b:4f:31:27:7c:b9:4a:09:9c:52:
                    5a:4b:5c:f2:d0:30:29:c7:7e:89:19:4e:b9:d4:13:
                    53:53:26:e0:2f:31:30:a8:21:6d:ff:1e:46:22:6c:
                    aa:b4:83:17:57:fc:0f:05:a9:7c:40:a2:08:a6:95:
                    69:b7:19:af:d6:de:19:ee:ec:b0:f2:59:4a:16:1f:
                    2e:6f:0e:33:87:1b:37:20:2e:8d:ed:8f:06:4f:c0:
                    57:2b:e6:d4:8b:e6:d8:db:09:16:bd:c8:c0:01:96:
                    02:34:46:d4:05:2e:d7:90:7e:31:5c:f8:ab:66:67:
                    80:b3:a4:da:fb:ea:0a:0f:f6:24:89:9b:89:c9:47:
                    19:f6:1a:2f:c1:1c:d4:c4:cd:93:a3:ee:e4:de:f9:
                    01:85:9c:ab:25:dc:b6:1b:ea:89:f9:93:c1:7d:d1:
                    fa:d0:92:08:81:ba:95:f9:8c:2f:99:52:22:91:de:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2A:F9:CD:A7:3C:CD:7F:C2:5E:0F:26:DA:5A:29:CB:53:60:1D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f070a6f3-baca-3377-b676-79ab48b2a038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c3:7c:14:e3:09:3b:a0:d3:b3:9a:b0:60:bf:a6:3c:9d:58:
         bd:0a:b4:11:63:a0:1e:9a:50:70:35:65:b4:8a:05:3a:c5:77:
         e7:7b:0f:7f:bf:f9:f6:07:f7:1f:16:21:dc:f3:4e:61:eb:b5:
         bf:97:74:fc:36:8b:9a:fa:5e:08:8c:38:e9:cd:cf:b8:d7:7a:
         4e:5c:35:63:da:71:f1:5b:17:74:66:ee:9d:06:c0:0f:ea:d5:
         0c:ff:88:bf:21:f1:8e:0c:b5:08:05:8d:6e:fb:8c:3a:ac:7c:
         8f:68:bc:4c:11:80:34:f6:c6:53:d6:c2:3c:f3:63:b9:f9:83:
         43:8b:84:31:09:d6:0e:b7:2d:d9:23:f8:90:3d:40:96:a7:67:
         f1:60:b2:ba:7d:e7:64:37:0a:15:97:87:ea:ee:7e:70:bd:90:
         a4:b4:da:5c:80:e2:75:56:f1:4e:6a:56:64:a2:5f:72:80:1c:
         60:ee:74:b6:98:6e:9e:8a:a5:1e:35:14:05:41:00:39:04:32:
         29:f9:f6:64:15:d6:2a:f2:45:ee:1c:64:54:cc:40:be:91:df:
         63:19:4a:48:22:c1:da:b6:86:22:aa:16:fe:d3:14:a2:33:cd:
         51:04:9f:57:a5:7d:e8:9f:ec:10:b8:8f:e3:16:47:88:6c:17:
         68:61:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:46:23 2025 by rpki-client