Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa
File:                     d22c3402-a212-36a9-b07f-cea36e6bf20f.roa (raw, json)
Hash identifier:          426dKocsT0KlNfPhUYlfKlyAsbrD/umO6RnLISzsL2M=
Subject key identifier:   F2:E1:EC:4E:23:4C:AB:3B:7C:AB:1C:00:63:22:BF:DC:3F:D4:03:7D
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584845158CFD878ACF43164388C0
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     400402
IP address blocks:        64.44.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:8c:fd:87:8a:cf:43:16:43:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=6ffd0f18-7ffb-4f73-9127-0546b985b4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:73:60:2c:ed:15:3b:18:09:fa:0f:ea:7c:1d:
                    07:32:b4:49:41:57:ad:99:fe:a3:d0:2b:f3:c3:4b:
                    37:d0:ff:ac:eb:f3:0f:d5:92:d4:41:5b:7d:08:eb:
                    a9:e3:3f:c8:67:4d:b9:29:58:ad:49:70:9b:67:87:
                    ed:e4:78:e4:12:1e:ae:52:23:ed:12:ea:ef:49:00:
                    90:19:37:5d:06:32:85:65:49:83:99:50:46:55:98:
                    04:6a:dd:94:25:8f:6d:f2:d5:33:8c:75:7f:52:da:
                    5f:cb:9c:18:2f:fe:d6:d7:45:7f:91:2d:96:cb:ed:
                    0d:29:7e:d2:1b:c1:5a:1a:62:de:ef:66:4e:60:e0:
                    7a:0b:e7:d9:3b:3b:e8:21:86:02:4d:a0:5b:f7:56:
                    53:f6:b6:4b:9f:9f:de:7f:90:58:56:2e:28:43:4b:
                    0c:83:c4:3e:c8:ab:4b:fe:52:0d:c5:12:c4:27:5a:
                    e6:74:1b:d9:e1:8f:bc:7f:1a:6f:64:a2:81:ec:5f:
                    0b:e1:22:d5:8d:c4:12:fd:2b:7e:04:c2:3f:d9:8d:
                    8a:51:48:9f:80:85:b7:30:2a:af:18:60:95:81:63:
                    76:95:45:06:d0:8e:82:40:57:aa:48:3d:41:d4:d2:
                    67:c5:ed:e7:b3:c5:6e:7f:2e:7e:76:95:ce:80:44:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E1:EC:4E:23:4C:AB:3B:7C:AB:1C:00:63:22:BF:DC:3F:D4:03:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.44.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a2:aa:da:37:85:4e:00:f7:4a:f7:1e:95:87:30:d2:86:5d:
         e1:a7:f5:9c:1a:fb:e0:94:13:20:49:1c:a6:db:97:0b:5c:80:
         26:02:fb:d3:26:1e:17:9c:b9:a0:de:63:91:a2:f2:c1:67:e7:
         35:fe:7f:ea:ba:c5:00:27:e4:50:ac:49:da:9d:85:49:5d:95:
         1b:51:ae:0e:10:44:19:28:05:d9:09:25:16:92:30:7c:21:9c:
         dd:91:04:bf:2b:2e:86:3d:5f:ff:95:5f:e7:25:80:06:81:0b:
         73:46:16:29:6e:4d:23:6d:85:1e:c4:0b:57:3e:c5:29:03:6f:
         c2:c7:5c:ab:15:80:af:8f:92:a0:f3:45:30:4f:fe:47:15:4a:
         a5:cc:e3:bf:31:6c:11:db:04:bb:2b:ce:f5:52:38:47:3f:91:
         8f:2e:95:2a:44:a2:33:eb:e3:45:2e:57:da:b5:fb:28:4e:07:
         92:30:31:63:3c:b0:3d:0f:6f:ea:c2:87:36:58:49:c1:75:9e:
         54:9d:38:78:7e:b4:c0:8f:9f:70:5d:f3:fe:8b:92:4f:f1:76:
         33:97:dc:e4:17:bc:70:60:d8:15:c6:95:02:3b:c9:5f:7e:d6:
         64:21:f8:1a:4e:bf:9a:08:95:a6:48:03:f5:db:7a:2a:1b:35:
         f5:63:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:44 2025 by rpki-client