Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/514897d4-8452-3f1b-a77c-ba0062bf0509.roa
File:                     514897d4-8452-3f1b-a77c-ba0062bf0509.roa (raw, json)
Hash identifier:          5d2k0Zg0Tjg0R+wp+wzIEfHSsgCNaXKP80bKoiDGEVo=
Subject key identifier:   4A:19:1E:F3:3C:53:44:EE:B5:57:54:68:F9:C7:63:57:F0:89:78:EF
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285848EF6143E3059F6ED62D5B9E80
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/514897d4-8452-3f1b-a77c-ba0062bf0509.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     27385
IP address blocks:        64.39.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:43:e3:05:9f:6e:d6:2d:5b:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=7840676f-d83a-4c2a-a926-486c4e292d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:27:e4:4e:d2:3e:ed:a1:be:47:34:65:84:
                    43:01:5c:bb:7c:a3:e5:9b:d8:a9:55:59:e2:24:12:
                    98:37:6d:39:66:b9:77:5d:1b:44:40:b1:b1:79:fc:
                    0a:33:01:aa:e1:fa:4a:6f:aa:47:b2:c3:2c:20:1d:
                    c9:0a:ad:e6:1a:ba:e5:88:16:47:6f:0e:67:4e:df:
                    72:5d:4f:8e:49:2b:54:0d:00:44:89:ff:f4:7d:57:
                    6c:99:bc:d4:73:09:69:69:ac:87:3a:ca:1a:57:30:
                    48:de:70:d7:c3:cf:76:5e:1f:27:f2:47:b5:77:e0:
                    cf:33:72:21:10:f6:8e:ea:2b:66:66:8f:05:03:d9:
                    48:47:c4:bf:98:05:05:e9:0c:69:3e:0c:e1:f4:d9:
                    89:77:bf:da:08:d9:38:97:2c:43:19:ed:78:5c:af:
                    00:0f:9e:80:64:0b:76:44:4e:73:fd:8d:a6:8f:ec:
                    ed:8d:80:0f:8f:d1:30:9e:62:8a:e8:67:d0:a6:ec:
                    1d:b1:59:79:2a:1a:7d:80:12:ef:0a:9e:7d:52:78:
                    01:2a:16:e7:ed:5a:d2:ce:d0:ea:99:e0:64:cb:cf:
                    dc:b0:73:14:d6:f4:e1:df:d1:8e:09:60:02:58:e2:
                    74:fd:b6:df:70:cb:30:1b:71:b5:06:17:29:c6:7f:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:19:1E:F3:3C:53:44:EE:B5:57:54:68:F9:C7:63:57:F0:89:78:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/514897d4-8452-3f1b-a77c-ba0062bf0509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:16:6a:e7:15:c3:96:32:27:db:43:61:e1:1d:9f:db:38:31:
         99:a4:f2:4d:1a:a4:77:0c:8f:32:41:1f:3f:fe:c3:b5:a5:17:
         f6:60:a3:84:35:05:30:b4:e3:04:5b:a6:32:16:13:5d:e8:2a:
         fe:69:31:ac:0f:a9:d6:d7:ed:87:ed:ed:03:18:75:a8:3b:80:
         07:83:7d:35:93:08:13:4a:0d:16:5b:9a:29:e7:67:49:40:a7:
         34:c3:ef:24:40:c4:8d:73:cf:22:d1:fa:cd:e0:ef:81:3a:75:
         a5:43:43:ec:27:6d:41:b4:87:e5:1f:75:e7:d5:a4:f7:9a:31:
         d4:a5:c3:c7:14:03:dd:6c:b7:38:1b:f3:a8:76:7f:59:72:34:
         79:cb:76:f6:0d:9d:09:62:55:8e:7d:4b:5e:20:37:e2:35:14:
         e7:57:77:4b:62:db:aa:4c:1c:82:ad:1e:88:82:44:90:09:b9:
         3b:9b:7e:75:d4:64:cb:a9:b0:b9:33:b9:d2:d0:cd:6b:5f:5f:
         d8:22:df:d2:b5:c5:10:96:87:94:80:4a:0b:ee:71:25:5b:bf:
         16:cd:a0:50:d4:b1:80:c8:16:be:d4:97:9f:49:e0:35:4d:66:
         d0:79:78:dd:b5:43:c8:b5:a8:b6:24:7e:00:1b:c1:fc:cc:bb:
         70:44:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:42:36 2025 by rpki-client