Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/90db42c4-6921-388d-8bed-643eefa83bde.roa
File:                     90db42c4-6921-388d-8bed-643eefa83bde.roa (raw, json)
Hash identifier:          Ed0zgBRilHrYvDpH5bNQxSo1DHC4gnCyZ3Gp+LkLcUc=
Subject key identifier:   7D:19:5D:1D:A3:B6:1B:B3:7A:05:62:0B:29:8C:C7:44:F6:02:84:1D
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584908815F25E895D7D6391988A0
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/90db42c4-6921-388d-8bed-643eefa83bde.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     11572
IP address blocks:        64.38.249.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:5f:25:e8:95:d7:d6:39:19:88:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=20e0b1b3-ac5e-4d02-85a4-e5fc5d39dba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:54:22:96:a9:2b:51:54:fc:af:70:ab:d0:
                    d6:a2:c7:75:8c:d2:ea:4b:c7:6f:ec:95:be:27:e6:
                    b1:2b:05:d2:33:71:74:04:9c:69:ef:7e:19:ad:c0:
                    81:8a:c1:63:53:32:db:3b:e5:84:ad:e6:08:76:10:
                    b1:99:48:a9:12:ef:d7:d4:27:a8:5a:f1:af:10:f1:
                    e8:1a:43:b8:24:e6:b4:a6:09:95:61:09:e0:0a:fa:
                    85:7f:8a:9b:68:8e:da:91:13:0f:b4:ae:4e:2c:68:
                    37:db:f5:47:ec:b9:e5:d4:4d:11:93:48:7f:60:c0:
                    e9:84:00:e2:76:20:46:63:b7:09:98:2e:af:20:be:
                    15:74:1c:c6:96:09:a1:10:5b:d3:75:49:20:92:d2:
                    7a:db:54:9f:fe:c2:cf:f7:41:9e:ca:60:7e:ae:ba:
                    1d:d7:65:e8:94:a1:c7:59:16:5b:7a:9c:a1:2e:f2:
                    01:6b:4f:7b:3b:ed:98:2d:a6:83:7b:d1:43:dc:c9:
                    3a:bf:9a:f2:fa:6a:64:67:96:36:23:be:3b:ff:ff:
                    80:7d:9c:52:c8:e0:99:29:e8:64:18:e6:53:1c:d0:
                    d0:96:31:73:3b:e7:8a:11:34:e5:9b:d4:f6:b7:fd:
                    a4:d5:5d:f5:61:a3:fd:56:4c:36:ed:00:c0:ee:cf:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:19:5D:1D:A3:B6:1B:B3:7A:05:62:0B:29:8C:C7:44:F6:02:84:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/90db42c4-6921-388d-8bed-643eefa83bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:14:e6:3e:81:ba:24:9e:cf:35:5c:cc:d2:70:1e:82:95:da:
         b7:be:80:29:5b:cb:24:ac:40:7c:40:8f:65:e5:45:b0:65:38:
         07:72:b7:81:19:6b:fe:15:82:5b:48:5f:70:5c:f7:9b:da:40:
         14:3c:e8:fe:e2:57:53:88:1f:15:95:4e:20:67:26:7e:d6:a8:
         9c:0d:81:c9:38:ed:d0:91:16:32:2b:86:13:b8:e7:a9:3e:88:
         9b:d9:eb:77:dd:8d:3b:dd:bf:1b:f1:3b:ec:8b:f9:8f:8d:81:
         b8:95:4e:6e:cb:bd:0f:76:89:4f:ac:39:1c:9b:f7:83:93:9a:
         82:88:38:bb:46:ec:8d:b0:21:48:d2:83:5d:8a:9d:fe:75:8a:
         21:9c:74:ba:40:bb:20:9e:8b:42:dd:cc:de:5b:ef:c4:f2:1c:
         ee:00:8a:31:16:dc:b2:d5:8f:c0:c3:16:e0:96:b9:4a:92:4f:
         7f:f2:a4:17:30:2d:90:c4:32:d4:bd:39:ae:c4:08:16:14:a7:
         e8:46:53:19:6d:9d:d1:25:69:4d:fc:ba:a3:a7:c6:3b:ad:6e:
         5c:e5:b2:e6:b7:16:56:3d:90:8e:9f:7d:e9:2c:78:ed:bb:c9:
         2e:54:3d:0d:fe:ba:04:3a:76:c5:8f:42:95:b3:02:ed:87:e1:
         b8:37:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:58:00 2025 by rpki-client