Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/008153be-ba18-36dc-affb-c3ea2686731f.roa
File:                     008153be-ba18-36dc-affb-c3ea2686731f.roa (raw, json)
Hash identifier:          XdSQ8C9gd8Pq8rAMGFwQtx680X1QzcCtdM7U4xgRtYU=
Subject key identifier:   1A:60:E3:EA:3B:1A:03:E3:F1:DE:CE:D9:07:55:0B:C1:27:A6:0E:58
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C84C047987205C3C91738E20
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/008153be-ba18-36dc-affb-c3ea2686731f.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     36040
IP address blocks:        64.15.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:04:79:87:20:5c:3c:91:73:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=3924a274-f836-4a5f-83f4-29455409a60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:6c:00:db:6c:1e:80:f4:62:d3:2c:00:ec:
                    da:5e:ad:b7:8d:ba:a9:84:46:7c:4a:51:d2:f4:b5:
                    cc:eb:e2:6d:c8:a4:63:9b:da:6e:4c:a6:c5:0b:6d:
                    d8:1f:13:ef:d0:e9:34:41:ca:96:67:18:0e:d7:91:
                    e5:a0:76:4a:cb:29:0f:fe:00:3c:75:f1:d9:a2:70:
                    b3:4f:aa:d4:67:95:ad:10:35:8b:8c:11:d5:d2:66:
                    c9:63:3b:9c:b7:dd:4c:f4:fd:21:e3:26:59:82:c9:
                    95:87:29:6f:fc:02:dd:a5:a2:3d:2b:38:a1:f8:7e:
                    15:b2:66:2a:04:2c:3f:01:4e:c3:d2:f1:2f:60:01:
                    3e:fa:0a:73:fd:84:92:a2:d2:39:af:77:f6:ab:a9:
                    b7:19:71:fa:3b:2b:04:82:d0:4e:5c:53:d5:51:90:
                    51:9a:f4:8a:e5:f6:15:89:c3:9d:68:c8:22:0b:92:
                    3a:05:8b:bc:d6:2b:ca:03:76:56:b6:94:8a:24:ea:
                    72:ae:35:f1:ad:01:8d:11:b7:67:bc:51:3e:45:c9:
                    b0:38:68:ef:28:12:b1:e7:cd:47:31:4a:c5:13:05:
                    9b:41:57:fb:88:f8:1f:3f:2a:7f:ac:38:99:9b:dd:
                    17:8d:42:2c:8e:71:df:be:bd:d6:de:b0:6f:d2:e4:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:60:E3:EA:3B:1A:03:E3:F1:DE:CE:D9:07:55:0B:C1:27:A6:0E:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/008153be-ba18-36dc-affb-c3ea2686731f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d2:1a:e8:a5:af:16:9f:e7:5d:d6:43:ca:ba:2b:82:e5:51:
         ed:6f:64:41:eb:b6:a0:66:f6:72:6b:e9:61:20:57:8c:c8:25:
         fb:88:84:81:94:16:70:c1:64:24:ea:19:ad:45:8f:fc:bb:7e:
         1a:13:01:11:06:f1:b1:4c:7b:81:06:b9:09:23:7e:38:70:84:
         65:56:36:9a:9e:6e:21:d9:5e:f7:06:26:21:18:a2:0f:a3:ce:
         d3:c0:4f:84:40:b2:07:e7:04:0a:5b:fb:e2:46:4a:b9:2c:9f:
         d5:ac:03:dc:80:17:7e:7d:de:56:1b:0d:10:6c:40:07:f2:b9:
         8e:45:d6:a6:b8:4b:ac:63:0f:b6:55:90:0b:38:03:f6:dd:6b:
         d7:f7:e2:c5:c8:04:fb:fe:a5:24:68:a1:e8:5c:ef:5c:9e:8d:
         b2:a5:ce:ab:2d:16:37:bb:19:1d:38:c4:82:83:82:d3:96:79:
         fd:1d:4c:b2:5d:09:44:9e:f9:89:00:9c:ba:eb:ea:44:fc:1c:
         f5:b8:f1:c5:95:1e:bb:f5:9f:b2:71:6f:ad:10:9d:13:03:e0:
         8c:a2:35:13:b2:29:56:f7:44:6f:64:50:fd:91:9f:5b:85:11:
         a6:41:ec:da:8e:76:8e:7b:40:be:4c:6c:6c:6b:b5:c6:f7:61:
         17:99:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:45:46 2025 by rpki-client