Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b2261347-5311-38f2-82f2-02ff663dd8b9.roa
File:                     b2261347-5311-38f2-82f2-02ff663dd8b9.roa (raw, json)
Hash identifier:          e/hm5R+suJZAdISwjdW5JAqhvc235hfjKR2/2G6psgA=
Subject key identifier:   C2:20:F4:F5:15:7A:AC:49:FE:A7:BC:C8:75:1C:0E:B0:5D:7F:90:B0
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C84BD1529285B018A9BEC000
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b2261347-5311-38f2-82f2-02ff663dd8b9.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     36040
IP address blocks:        64.15.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:d1:52:92:85:b0:18:a9:be:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=9416ae80-753f-4835-9d12-de1a16e7f5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:a5:97:86:bd:46:49:9a:31:30:12:89:c5:
                    42:00:02:24:d2:e1:d2:0e:e2:2c:2b:7c:65:23:7b:
                    91:57:b9:e4:53:d2:ab:28:bb:e3:5f:b0:1b:66:4f:
                    4f:f1:51:59:5b:59:04:0f:34:2b:66:88:00:6b:72:
                    57:42:80:15:3f:78:26:83:b6:01:32:40:2a:1a:db:
                    6a:b7:85:7b:df:21:b6:f4:26:79:a1:4c:e4:27:b1:
                    33:97:f9:39:d6:4b:00:09:a3:4d:7e:bf:7a:43:43:
                    37:78:bb:b5:e4:c7:3b:2e:1b:98:83:d2:db:26:4d:
                    05:92:d9:d4:e4:cf:d8:3e:af:b4:3e:6e:de:f6:9e:
                    b7:0e:3c:e7:e5:e2:2c:c7:61:16:8c:d9:cb:cd:0c:
                    40:8d:37:b5:71:74:e0:23:dd:ad:dd:e3:5d:8b:be:
                    48:e0:70:6c:3b:91:2b:40:75:dc:00:31:95:d0:6e:
                    e6:5f:9e:7d:68:ec:28:e2:ca:04:fc:31:d6:f8:49:
                    1a:25:a0:f8:cb:ca:13:95:ef:90:73:9a:a1:6c:c6:
                    27:f7:78:6d:1c:74:b4:47:4d:21:9b:9a:bc:5c:f8:
                    d2:72:13:4e:af:57:a7:72:7f:ee:87:3b:82:31:7f:
                    dc:b5:f3:35:b0:6e:7c:ff:a1:2b:db:bc:5e:22:57:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:20:F4:F5:15:7A:AC:49:FE:A7:BC:C8:75:1C:0E:B0:5D:7F:90:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b2261347-5311-38f2-82f2-02ff663dd8b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ba:74:58:9f:b9:8e:00:4f:8c:f7:07:92:e6:36:95:5b:7f:
         21:5f:3c:31:aa:10:6b:99:e6:ae:c9:18:dc:0d:23:bf:35:9a:
         6a:69:2c:68:90:06:98:b0:d3:ea:6f:7a:7a:92:f5:ec:19:f7:
         09:6b:5f:8a:2f:ce:ca:2b:56:f7:78:bc:f3:f7:7a:47:2f:00:
         a1:9c:4d:10:b7:08:af:bd:db:50:21:c0:67:f7:da:45:c8:a6:
         d1:8a:17:6d:a2:01:50:45:32:bf:1a:04:12:5f:7d:86:3c:b9:
         1b:c8:07:82:0a:97:d6:c2:c4:be:1d:69:98:16:59:3d:8c:fe:
         34:84:22:8a:be:44:07:93:aa:06:3e:d5:38:54:c3:bf:50:9b:
         1f:f9:33:c4:27:ef:5f:7b:29:81:00:2c:63:ca:79:36:26:73:
         91:5a:26:9b:ce:ac:fb:c7:9d:36:ac:e1:cc:bf:95:85:21:2f:
         82:83:b1:cd:18:10:b9:e4:e3:9e:a5:18:1b:28:29:f5:7d:09:
         81:c4:c0:c9:30:a1:c9:1b:b3:d7:76:8d:28:1f:58:72:d0:6e:
         46:1e:3e:78:09:ff:d3:d1:93:07:ee:ad:71:35:25:da:9a:67:
         d6:49:e7:db:5b:63:7f:73:2a:3e:11:f4:cb:a6:25:93:3f:e3:
         d3:90:34:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:39 2025 by rpki-client