Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/8b936b82-a03d-3124-8651-3dc415bf66d4.roa
File:                     8b936b82-a03d-3124-8651-3dc415bf66d4.roa (raw, json)
Hash identifier:          IqYYOQ/J3nH/pW+5EhmYUeWsctE8PcCl/f5QUM24IVY=
Subject key identifier:   42:54:DA:54:47:53:15:97:57:9F:BD:0E:50:F9:D5:D9:1F:11:12:D3
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858484C10334F0916B387E8328080
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/8b936b82-a03d-3124-8651-3dc415bf66d4.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     834
IP address blocks:        64.40.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:33:4f:09:16:b3:87:e8:32:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=d7e887d8-9586-4b51-bfe8-db8ef44ff99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:4b:08:6f:ea:aa:b4:4a:e8:31:85:6e:0f:
                    9e:9d:ed:af:d8:0c:bf:c1:78:87:93:c0:7b:23:91:
                    5b:2f:f4:44:f4:22:ef:fb:cf:d7:ad:78:01:26:e5:
                    17:74:6d:1e:a5:a2:9d:a2:4c:f4:37:f8:31:21:6e:
                    fa:0b:c4:85:7e:03:5e:02:93:e3:d1:40:bc:ac:35:
                    36:ea:7d:4d:da:5a:59:d2:3e:0e:05:a2:a2:f4:63:
                    ea:60:24:bc:53:dd:65:25:1c:95:04:17:e4:e6:2d:
                    8c:b5:82:4f:5a:16:64:32:27:48:cb:54:b6:81:0b:
                    63:d9:91:d6:30:3d:7c:66:09:a5:a6:26:d8:df:ef:
                    f8:60:86:83:50:58:59:47:f1:f9:08:2a:8d:9f:e7:
                    8f:96:94:6f:f7:a8:59:77:e4:cc:52:2d:40:c6:e5:
                    41:9d:6b:7f:67:cd:9a:4a:48:87:65:8d:b8:fa:55:
                    f8:7a:9f:79:7d:30:32:09:25:7b:50:ce:e9:ea:3a:
                    34:98:a5:1a:a3:4b:a3:2f:01:5e:e3:2c:84:85:7c:
                    3a:64:3d:48:2c:f1:9c:c2:a4:59:99:f5:e3:7c:c0:
                    88:e8:48:ee:5c:75:38:b2:27:9d:b8:4e:3f:0c:9a:
                    de:c5:6d:8a:f4:bc:77:b7:36:22:84:ae:f3:3c:67:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:54:DA:54:47:53:15:97:57:9F:BD:0E:50:F9:D5:D9:1F:11:12:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/8b936b82-a03d-3124-8651-3dc415bf66d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:02:1b:3d:a9:85:a2:6a:e2:e6:b9:c2:d7:cf:96:94:f0:b6:
         ff:df:10:4e:1f:fc:49:88:89:ec:7d:6e:aa:cc:e7:b2:71:4e:
         b5:3b:4a:e7:e0:7e:34:82:6c:79:d7:90:b0:db:b0:56:f7:65:
         e5:c5:0f:87:50:2b:7d:26:99:7c:e7:49:17:61:6b:39:ab:16:
         8a:02:f2:ac:d0:d7:df:b7:76:c7:97:55:45:fa:f3:1a:77:19:
         d8:73:94:54:7b:86:cc:c8:47:03:9c:74:4f:87:fb:a4:15:f9:
         9e:61:37:cd:db:00:ea:24:83:82:cb:5e:e3:a1:27:e2:45:8d:
         44:69:59:d0:cc:4e:d6:c4:dc:25:5c:f0:bf:ea:43:1c:c3:18:
         4b:ba:8e:8c:e8:e8:4a:44:67:e6:7c:f3:c4:a8:c9:62:39:7b:
         f1:c9:a0:2a:98:b9:92:72:db:34:eb:b7:36:a6:8c:be:d8:de:
         fb:cd:d9:76:9a:fb:3e:b9:dd:33:5e:b0:66:cf:1d:18:d7:21:
         f3:51:f9:d7:ff:5b:99:0d:35:88:0a:ae:f7:0b:9b:09:52:f0:
         85:80:1a:e4:1f:28:c4:bb:e6:4b:5e:cf:48:e9:2d:47:65:cf:
         a3:5b:d8:a4:7b:27:2a:8b:fd:9f:24:dc:49:5d:0d:cc:68:d0:
         0e:6a:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:30 2025 by rpki-client