Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/0147e107-4a40-3be6-9b96-5731b6d05ffa.roa
File:                     0147e107-4a40-3be6-9b96-5731b6d05ffa.roa (raw, json)
Hash identifier:          aSQojcrAS9WVCq3espefRgCe+ZjBeKrKJQgk7qwRIbU=
Subject key identifier:   FD:8F:EA:21:3A:D2:A8:9F:CE:46:3D:1F:28:1B:77:5B:7D:19:26:E9
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F432858483A733363ABEA84F3DAD97280
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/0147e107-4a40-3be6-9b96-5731b6d05ffa.roa
Signing time:             Mon 16 Dec 2024 18:35:53 +0000
ROA not before:           Mon 16 Dec 2024 18:35:53 +0000
ROA not after:            Sun 16 Mar 2025 17:35:53 +0000
asID:                     6939
IP address blocks:        64.112.33.0/24 maxlen: 32
                          64.112.34.0/24 maxlen: 32
                          64.112.35.0/24 maxlen: 32
                          208.69.100.0/24 maxlen: 32
                          208.69.101.0/24 maxlen: 32
                          208.69.102.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Feb 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3a:73:33:63:ab:ea:84:f3:da:d9:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Dec 16 18:35:53 2024 GMT
            Not After : Mar 16 17:35:53 2025 GMT
        Subject: CN=6c7eb000-91a9-4cce-9023-3f86b5e628f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:2e:85:ef:92:cd:9c:08:bb:b0:9b:0c:ad:
                    51:6b:ed:0f:1a:71:97:b8:7a:8d:77:d0:53:6d:f4:
                    b3:37:49:08:69:bc:bf:23:7c:33:b0:9e:4c:f7:6b:
                    91:91:17:ff:ed:05:9c:75:0e:8b:68:25:ef:ce:88:
                    a5:0d:fd:f0:d2:45:b6:34:52:32:7a:7a:38:e5:d5:
                    84:90:31:13:67:75:52:4e:9e:42:d4:a8:c2:f1:9d:
                    9f:97:63:98:b8:47:ca:e3:f3:8b:2b:ae:e0:4a:ae:
                    13:d1:8d:82:62:8e:c5:a7:77:9c:2b:c7:68:4c:0a:
                    bb:7c:f9:cc:64:41:cf:a5:1c:5a:c3:23:3a:53:ce:
                    23:91:21:ab:05:c8:75:f5:3c:9e:eb:c8:6f:64:a1:
                    3f:d9:08:af:32:66:96:b4:e2:71:97:08:78:43:eb:
                    75:9e:1a:9a:d9:72:f1:4e:71:66:2d:f9:db:58:a4:
                    1c:cf:5a:4d:05:6c:62:85:c3:fc:42:59:21:a0:16:
                    13:f1:de:87:e8:b1:16:da:e3:ed:c2:5f:09:27:f3:
                    93:02:66:f3:77:47:f4:43:f8:57:5f:20:84:be:ad:
                    31:c6:af:99:37:3b:c5:22:bd:60:4b:2a:dc:93:55:
                    49:a6:09:29:de:4b:a6:72:f1:a1:14:42:0a:b7:a7:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8F:EA:21:3A:D2:A8:9F:CE:46:3D:1F:28:1B:77:5B:7D:19:26:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/0147e107-4a40-3be6-9b96-5731b6d05ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.33.0-64.112.35.255
                  208.69.100.0-208.69.102.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5a:83:26:f7:0e:b5:02:cc:52:83:e3:46:f0:cd:5e:82:67:
         65:11:f7:80:b6:07:44:2f:a2:9d:5e:2d:be:20:5f:02:f4:73:
         58:15:79:56:69:a8:36:98:b6:e6:cc:e7:2b:cd:30:4d:b6:67:
         df:40:84:c3:aa:43:97:1e:a1:06:a5:97:42:7c:1a:b7:5d:30:
         d9:a2:6d:27:3f:60:ef:a6:eb:c0:5b:aa:6b:4f:58:18:02:a1:
         d4:fa:be:58:d7:a2:1b:4f:bd:9e:03:d1:b4:42:b6:2d:73:7a:
         bb:20:ca:05:3d:ff:f1:fe:d5:e1:a0:48:7a:54:79:f6:16:69:
         04:d5:de:4f:89:d2:25:6c:c7:6f:31:83:d5:8f:a9:f0:ec:a7:
         17:c0:43:30:d0:9d:b1:19:65:a8:d0:1f:c4:b4:cf:f6:db:4f:
         c8:1c:56:61:be:7c:b5:c9:7b:74:58:e5:86:c6:07:d2:95:cb:
         8f:98:56:ab:15:39:f7:9a:5b:5a:23:d7:c0:6c:25:51:43:0f:
         d7:8b:5c:d3:84:a1:b3:35:69:a5:0b:95:f1:c2:15:a8:cb:f1:
         5b:89:b2:6c:13:ba:57:94:c3:c3:b3:14:bf:91:83:d5:b4:23:
         04:29:0f:00:60:98:ee:df:f3:ec:ed:00:db:65:cf:b2:a0:0b:
         dd:80:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:56:51 2025 by rpki-client