Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa
File:                     2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa (raw, json)
Hash identifier:          15BPoo0stq7SmcqzIu6guYr/BuUOIBC76RksaZQ5haU=
Subject key identifier:   78:67:4C:53:1D:57:B9:1B:38:1E:40:B4:77:6D:B8:AF:62:6B:45:96
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584929E3C57A339C4099861E0900
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     399629
IP address blocks:        64.95.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:c5:7a:33:9c:40:99:86:1e:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=5a8c9ba1-5372-4937-90b8-43c84db16333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8b:24:8a:70:16:ae:05:0e:8b:cc:f5:95:25:
                    30:91:5a:35:e2:7d:3a:e1:4b:c2:58:98:ce:30:ff:
                    af:0d:9b:9d:e5:a6:4d:4a:ca:e0:a3:fc:04:12:f2:
                    72:ce:94:8c:8c:45:07:10:c0:48:25:c8:62:0b:f6:
                    77:15:fe:31:64:a6:7a:d7:fd:3e:fd:2e:67:5c:c7:
                    04:88:20:db:e1:0e:76:25:d0:cb:62:6a:d4:eb:b7:
                    a2:2d:38:1d:2d:10:2c:dc:df:3f:4d:54:34:36:0c:
                    1f:93:2b:e0:8f:a9:38:93:d5:bc:bb:bb:25:eb:7e:
                    ed:8f:44:fb:df:ac:a0:d8:eb:58:bf:e9:ef:35:0a:
                    af:5e:f8:6e:ee:f5:5b:51:27:c0:7f:b4:51:64:29:
                    22:b3:9d:ea:67:21:56:b1:6c:bf:4e:5b:31:a5:b3:
                    9a:6d:15:ed:4e:80:09:7b:9b:c7:6d:1a:ef:b3:64:
                    c9:c5:53:72:aa:ac:96:44:77:9c:29:9c:34:f3:5a:
                    96:97:e6:53:af:63:6c:53:fa:87:36:06:c3:e5:46:
                    e0:d8:c6:66:78:91:94:a8:3b:dc:57:2d:eb:ae:92:
                    7e:55:99:06:de:ec:ab:76:52:83:93:77:24:23:61:
                    92:73:29:16:d3:41:8d:32:89:a1:dd:b7:32:08:22:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:67:4C:53:1D:57:B9:1B:38:1E:40:B4:77:6D:B8:AF:62:6B:45:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/2f967a9c-cfe2-34b3-8f5d-1363b1027444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:55:d7:e8:8d:10:35:4a:bb:a8:17:67:47:4e:d4:42:72:57:
         bc:8a:e3:05:78:17:30:29:84:d0:b2:04:79:17:3b:e4:86:63:
         51:93:17:c5:27:9d:e0:d1:4e:6d:ed:dc:d6:57:01:d3:bb:3b:
         ff:18:08:c2:a7:fc:3d:d4:2b:36:bd:1b:ce:b6:be:cc:1d:08:
         bb:c9:87:5f:73:07:f4:d1:59:a1:75:5f:1e:7c:7d:0b:0e:d6:
         99:fd:71:b5:1f:55:d0:0a:5d:47:24:21:6c:e4:67:de:78:f7:
         3d:db:05:dc:55:6e:18:56:b0:3f:93:6b:7f:50:16:f3:91:e4:
         70:35:cc:f5:4c:7a:bb:ea:3b:ed:e9:6b:36:9a:34:6c:2a:92:
         28:ca:bf:42:82:d5:fd:85:4e:27:f2:6d:bb:39:73:05:a9:09:
         cb:18:5a:49:54:3a:eb:70:5e:e9:e6:68:e8:9e:8d:c2:b3:c6:
         53:fc:09:5a:fc:67:ce:81:8b:93:c7:04:f4:29:a7:3b:66:20:
         dd:c1:f7:e2:81:d2:88:35:a2:66:08:72:40:ca:c4:fd:2e:e0:
         3b:c5:c7:61:2c:d4:cc:ee:38:8a:ce:a8:94:07:cf:3e:3b:a1:
         ad:b8:c2:f8:ee:a9:6c:e9:95:f0:77:0d:e8:05:77:fd:eb:b9:
         7c:96:fe:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:18:22 2025 by rpki-client