Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/45110784-3654-348c-8d00-cb012d90eb3f.roa
File:                     45110784-3654-348c-8d00-cb012d90eb3f.roa (raw, json)
Hash identifier:          Ob1mSux8IZThYbaWZH/yIPl2iabvoRmFIJSXDk6dAz4=
Subject key identifier:   B5:93:EE:C2:9D:30:6D:92:A3:49:14:74:82:70:03:4A:D0:EE:20:46
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F432858496FAF05835BD770FD9A1452E0
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/45110784-3654-348c-8d00-cb012d90eb3f.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     396319
IP address blocks:        64.140.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:05:83:5b:d7:70:fd:9a:14:52:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=e3d50939-216d-4fa0-bf84-a5ee8b5516d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:19:4f:04:c5:23:e8:46:d0:ae:2e:43:bc:
                    99:dc:91:43:16:aa:4d:24:6f:60:4e:ba:e3:85:a1:
                    e8:34:30:ba:a7:37:9c:96:9c:ba:5b:de:ea:f7:4d:
                    f0:49:fd:d4:9c:55:f4:90:b9:b2:67:f9:02:33:49:
                    bc:1b:99:10:0f:a4:01:55:7f:4b:2b:c4:fb:0d:73:
                    0d:1c:79:6f:ca:7a:9f:b0:8e:99:b6:d0:03:b8:e9:
                    06:1d:31:a8:fa:d0:01:9e:7b:70:4f:24:de:ac:d1:
                    8a:19:a9:ab:3e:f5:8a:96:f9:6f:0c:d0:8f:48:38:
                    6d:fa:32:5a:fb:d6:c5:12:ff:ff:60:fe:c0:32:48:
                    cc:e4:68:49:26:d2:d5:af:ef:b5:47:d7:60:1a:5a:
                    ad:7d:5f:93:7c:29:54:b8:22:f2:e7:d1:05:91:74:
                    2d:52:3e:ed:3b:7a:5e:5e:83:66:98:22:28:70:5a:
                    90:d8:32:17:57:d3:c1:9a:5e:8e:78:8d:41:3f:45:
                    bb:6c:aa:1f:d7:07:ee:a2:03:56:de:12:c8:6c:cf:
                    e8:17:92:e1:e6:a5:86:01:05:43:2d:3b:96:cd:56:
                    e8:c2:bf:ca:73:e3:ec:63:a1:88:4b:d5:63:23:36:
                    f8:22:e7:cc:a3:04:4b:86:4f:5f:8b:f6:eb:3d:db:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:93:EE:C2:9D:30:6D:92:A3:49:14:74:82:70:03:4A:D0:EE:20:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/45110784-3654-348c-8d00-cb012d90eb3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.140.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ac:87:d3:46:64:26:87:aa:b6:89:73:35:c3:47:c5:45:c2:
         f4:0a:ad:25:1b:fa:dd:3d:32:d1:b1:69:f4:6b:92:ab:cb:48:
         01:14:39:b5:8b:e6:1c:03:60:ae:b2:40:d8:cd:9c:60:05:cb:
         87:08:51:ed:88:6c:71:4e:d9:be:1b:ca:f5:4f:07:15:66:5a:
         5e:91:02:ec:48:11:8f:66:b3:42:ad:23:0e:a0:19:04:a8:c4:
         5e:f2:d4:6a:d5:72:d7:e2:bf:6e:94:28:a3:ab:ec:4e:72:d8:
         88:bb:5b:cc:b2:4d:7f:2e:87:fa:97:e5:b6:ea:22:17:1a:00:
         0e:2e:1f:c0:c6:7c:92:e0:66:48:75:f4:7a:4f:24:e9:80:6c:
         38:57:b8:08:e3:3d:58:17:59:60:ee:b6:c4:9a:25:dd:54:7c:
         0d:1c:30:b0:74:83:85:e2:3a:d8:11:cf:a8:44:8e:e8:69:e1:
         ad:d3:c4:bc:fd:13:f4:28:93:31:2f:cd:a4:22:c8:9e:ae:f8:
         0b:69:c7:ee:a9:76:42:a2:82:d8:4c:aa:63:04:a1:01:99:3e:
         40:a6:23:c7:f9:e8:41:28:ed:f6:f0:07:d1:ff:a9:5b:63:a2:
         de:d4:e1:34:bb:34:6a:58:56:be:88:cd:5a:1b:17:8b:e4:16:
         54:02:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:30:30 2025 by rpki-client