Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/d20aeba6-8d55-319e-b9b3-5e33bac9481c.roa
File:                     d20aeba6-8d55-319e-b9b3-5e33bac9481c.roa (raw, json)
Hash identifier:          Iv2txUNEz0itXWrn6kjaBFVlspJA/ojmISJmcH2MNbY=
Subject key identifier:   EE:8C:B1:8D:43:7D:EC:28:50:DB:7B:2A:01:C6:E8:29:CD:F3:AD:CA
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F43285848BE8631D190D6220FDC72EC40
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/d20aeba6-8d55-319e-b9b3-5e33bac9481c.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        64.112.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:31:d1:90:d6:22:0f:dc:72:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=9cc00c86-910e-436c-adc1-43c0f6bce6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:02:81:90:55:b5:90:0d:fd:3c:ee:4e:b5:
                    42:04:ac:bd:80:32:b7:50:f4:43:24:88:62:e7:3c:
                    13:d5:b2:f2:4f:2c:77:a8:bb:f3:33:1e:68:29:e8:
                    03:7e:b8:56:cf:85:2d:44:48:2b:0a:3e:2e:08:a1:
                    d3:75:76:68:9b:14:0a:9e:63:1f:70:df:d2:65:c8:
                    e6:a0:1c:d8:c4:64:f7:15:39:df:f9:ea:2f:22:2a:
                    27:90:7a:f3:60:c0:8f:b4:3c:0a:ef:aa:2e:41:c1:
                    5b:6f:2d:7a:df:0c:7c:64:1f:88:55:1f:9b:36:8a:
                    55:57:fa:fd:5b:0c:78:d6:4a:be:95:9b:67:b9:30:
                    87:23:6f:6d:37:f8:d1:18:ad:dc:31:4f:f5:e8:0d:
                    6d:c7:33:b6:75:9f:bf:d0:4c:21:fb:5e:20:46:e0:
                    71:63:96:92:75:2b:fb:2b:94:c3:64:7d:50:2b:7c:
                    e1:2f:15:b7:f3:7a:a7:a1:73:f1:fa:6f:f0:e8:96:
                    17:69:a7:1f:65:22:3a:f0:58:ca:88:a1:7a:81:56:
                    76:82:32:c5:92:39:44:da:ab:00:7b:e6:46:a8:2c:
                    20:f2:ad:79:db:83:39:a7:4b:ef:57:7e:4b:3f:ef:
                    81:89:6a:f3:c5:46:69:7b:6a:01:d9:7b:44:5a:bb:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8C:B1:8D:43:7D:EC:28:50:DB:7B:2A:01:C6:E8:29:CD:F3:AD:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/d20aeba6-8d55-319e-b9b3-5e33bac9481c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:21:2c:f7:67:ab:23:62:e5:dd:36:4d:da:0a:44:dc:3e:
         16:63:ee:52:fa:7f:c7:f1:8e:52:28:2d:8e:59:d3:2d:f5:a7:
         c7:5a:eb:12:09:da:3e:ce:cb:1c:fd:d2:b9:a1:91:b4:29:87:
         49:51:ce:a4:6c:c4:84:0e:c5:db:dd:b4:ba:8f:97:0c:b7:0f:
         87:88:1e:46:7b:b2:cd:69:b1:90:26:89:13:8d:a1:90:b9:c6:
         08:f1:eb:46:6d:a9:f1:aa:8a:89:0a:b3:41:ec:fd:98:0c:b6:
         88:78:70:42:fd:6d:33:ac:fe:5e:a2:8f:e6:c4:10:2c:45:d3:
         db:69:5e:69:79:c2:55:20:1b:e5:e4:6a:a9:9f:e1:22:a1:c5:
         84:d4:93:99:8f:59:c1:81:f4:8e:c2:b1:cc:ab:f4:0b:74:e4:
         3c:e3:8a:26:1d:6f:a4:97:68:6e:5b:4f:d7:18:8f:64:11:26:
         23:c1:7b:41:67:0c:d5:d6:87:96:54:7b:9b:31:6c:0f:9b:48:
         75:58:3e:b1:55:bf:ad:19:5d:85:9c:e0:bb:2c:bb:e2:13:e4:
         9c:6d:7e:dd:13:e5:12:14:2b:1d:42:99:ef:6b:fd:17:75:f5:
         76:cc:af:cb:d3:11:4f:5e:49:d8:82:ca:60:12:25:86:ea:3f:
         93:80:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:30 2025 by rpki-client