Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa
File:                     6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa (raw, json)
Hash identifier:          P5+U6z/GL+R1c/CsOVD7L+0Y5ALq6KnHev/8+/m+2Qs=
Subject key identifier:   F9:D6:54:8F:89:97:A5:5C:10:30:0C:E4:19:2C:C6:BA:DE:D4:15:68
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285848BE86298E52AB0EA3E0080F00
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     212669
IP address blocks:        65.110.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:29:8e:52:ab:0e:a3:e0:08:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=0799ef32-9176-4197-a6a2-9e2543fe9e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:b8:1f:f9:d8:a1:f2:49:62:85:d5:08:9b:
                    39:75:43:43:29:e0:73:11:1d:65:f1:c8:a5:5c:b9:
                    e7:80:7e:40:71:a6:be:6d:2d:db:a0:22:89:ed:a1:
                    3d:ba:61:57:f7:cf:ac:2c:20:53:4e:49:69:52:f0:
                    a7:cf:25:16:d3:a3:01:6c:1a:a8:f5:38:51:63:d8:
                    13:9c:31:af:27:61:e1:36:17:8c:25:9c:d5:0d:8f:
                    ff:b4:b6:6d:22:6c:6e:e2:0c:5c:a7:72:b5:8a:5a:
                    ed:df:ca:d9:d7:a6:1d:1c:23:6b:5a:57:e8:c0:ae:
                    6f:f1:d8:dc:3b:38:dd:79:3f:e0:7b:cb:79:63:bf:
                    7e:55:0e:e7:96:18:44:2e:11:51:41:9a:2f:8f:07:
                    aa:0d:66:2e:e4:ef:b9:be:6c:6d:66:4b:48:68:33:
                    49:ad:42:3a:6f:42:dc:a7:9d:29:12:fa:bb:40:e4:
                    b8:65:20:b9:b8:be:ba:30:72:f2:cd:9e:c3:aa:cf:
                    f1:30:ed:86:ec:c1:04:25:d1:1c:ba:1c:64:56:be:
                    9e:a0:10:29:28:6e:23:7f:d9:a2:16:8d:bb:f0:61:
                    0d:4e:80:ec:9f:03:c2:a3:d2:1d:d6:b0:5e:e6:82:
                    c6:db:42:66:dc:33:fd:aa:a9:9a:df:13:0d:95:56:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D6:54:8F:89:97:A5:5C:10:30:0C:E4:19:2C:C6:BA:DE:D4:15:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e4:09:2d:40:47:3e:72:9e:7a:1e:63:b3:6f:2b:13:53:94:
         c3:ba:90:d6:cc:b3:d2:1b:1c:a6:50:93:b5:2d:fa:5f:d7:85:
         d1:40:61:93:e4:84:02:d4:19:6e:17:03:ba:32:60:43:fd:c7:
         97:d1:87:b7:40:26:f1:7b:72:28:09:61:64:11:a0:b7:dd:5b:
         ce:45:f9:ff:4a:cc:16:df:92:0d:31:5e:82:86:1f:07:25:57:
         b3:d0:c3:b5:8a:4c:0d:c2:d4:8e:52:d8:be:69:e4:6c:0c:81:
         19:80:3f:d2:b8:c7:41:7d:af:32:cb:ae:4f:42:2c:43:b9:4a:
         8a:84:7a:95:07:49:21:72:91:84:73:1d:59:6f:90:75:72:d7:
         f3:7d:f3:db:2f:93:8e:77:3c:16:6e:1e:f4:71:86:68:f7:93:
         0d:20:c0:16:43:3e:94:9d:9e:a8:44:8c:df:1a:61:dc:36:81:
         93:8f:45:42:bb:6f:0d:26:4a:c1:c9:c3:37:1e:11:34:fe:a6:
         a8:c6:dc:d9:32:60:63:1f:5b:9d:2a:f5:a3:48:30:55:fe:14:
         6f:1f:e5:ae:36:60:ed:92:ab:bc:e5:15:fd:d1:59:20:48:cd:
         7e:ab:94:c9:a9:f3:42:41:f5:f8:34:4d:78:53:4b:48:08:15:
         da:17:15:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:36 2025 by rpki-client