Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/0a26084f-6745-3a60-9adc-8c4f36a364dd.roa
File:                     0a26084f-6745-3a60-9adc-8c4f36a364dd.roa (raw, json)
Hash identifier:          +DO6yhTzprpJloH8jtx+MxTt5zKkvr6F31Br7RYmytc=
Subject key identifier:   61:A2:F1:A6:8B:34:98:BB:83:32:B0:54:F7:63:78:CC:67:13:34:26
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285848EB310B25576F71CA1A9E6840
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/0a26084f-6745-3a60-9adc-8c4f36a364dd.roa
Signing time:             Tue 18 Feb 2025 02:00:38 +0000
ROA not before:           Tue 18 Feb 2025 02:00:38 +0000
ROA not after:            Mon 19 May 2025 01:00:38 +0000
asID:                     27385
IP address blocks:        64.39.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:31:0b:25:57:6f:71:ca:1a:9e:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Feb 18 02:00:38 2025 GMT
            Not After : May 19 01:00:38 2025 GMT
        Subject: CN=8ebba72b-14c1-4641-b04d-340553dc7c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:f4:d0:12:d4:66:26:ad:d2:b9:06:62:c1:
                    94:52:ec:15:14:c3:f0:6e:5d:46:ed:88:5b:7d:2b:
                    c5:b7:52:92:22:2e:75:93:69:b8:b6:92:be:c2:a1:
                    b5:d8:5d:c7:85:ad:5e:b2:5d:31:9d:a3:c0:f8:c5:
                    84:51:31:45:08:b7:e6:8f:87:e9:57:6a:b7:4a:29:
                    a7:29:6a:43:cc:cd:86:6d:97:03:04:81:aa:4e:ec:
                    f3:6b:bf:9f:99:68:2f:a1:6a:48:3c:e4:54:b4:65:
                    04:7f:6d:32:da:e2:7f:17:a1:a0:bf:13:d3:5d:8f:
                    25:ec:da:bc:81:d2:9c:b4:b6:9a:3c:df:d7:10:eb:
                    78:09:fa:2e:55:9e:ea:a2:9a:e4:40:ff:79:4e:fa:
                    f8:c5:c9:32:f8:18:2c:f2:bc:d9:e3:f2:2a:7c:e0:
                    f0:5b:62:29:77:8f:66:29:b7:07:8a:35:11:6a:79:
                    65:6e:a1:ed:c4:92:2c:30:1c:f7:9b:98:4c:fa:46:
                    8a:71:7c:84:1c:6c:09:22:5b:d0:5f:06:2b:d0:84:
                    85:07:d9:af:11:ad:9e:49:bc:10:ab:d1:3c:a2:bf:
                    8c:25:34:fa:79:90:34:4a:c5:b2:50:ae:54:41:1f:
                    f0:7f:cc:16:78:b7:76:f7:2f:c4:a5:7b:de:37:fb:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A2:F1:A6:8B:34:98:BB:83:32:B0:54:F7:63:78:CC:67:13:34:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/0a26084f-6745-3a60-9adc-8c4f36a364dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:f8:d1:23:41:71:7f:b5:ee:9b:67:f4:b0:d1:37:8d:6a:
         8e:54:fb:55:4b:7d:08:37:b9:69:37:97:6e:6d:fc:5a:49:7d:
         3a:b8:91:37:96:65:94:3d:44:2c:27:48:c2:53:53:03:99:7a:
         f8:ea:a1:b9:49:c5:8a:32:73:6c:d8:ff:29:ec:d3:d2:aa:ff:
         d3:71:6e:b6:b8:e5:13:c3:fb:47:65:94:65:cd:65:3b:85:e3:
         89:49:fb:87:f8:30:f1:35:63:68:1c:60:2a:64:8e:f3:73:b1:
         c7:b7:98:ba:77:11:50:36:c1:02:12:9b:4f:79:dc:23:8d:4d:
         69:db:7c:2b:f2:c5:af:c3:89:33:8c:20:d4:09:69:55:02:b2:
         4a:0d:49:61:b2:09:33:da:ba:9a:e2:4a:33:d4:f9:32:ff:ee:
         54:62:fc:a7:1b:0c:b4:30:dc:67:21:87:09:6c:5b:52:b8:df:
         9f:40:03:fd:c7:7b:31:76:ae:f0:f3:8a:54:c6:64:37:69:3c:
         3c:5e:18:9f:dd:de:ad:80:5a:95:8c:82:96:5e:10:c0:27:df:
         d2:e1:2e:7f:25:83:8e:3d:bf:8b:ac:88:b0:7e:49:5e:14:31:
         02:92:d9:87:45:de:bd:7e:11:47:9f:35:cc:ee:19:f1:16:bc:
         65:dc:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:08 2025 by rpki-client