Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/d28b11c3-e000-3cd2-99bc-9f0af4ac43f9.roa
File:                     d28b11c3-e000-3cd2-99bc-9f0af4ac43f9.roa (raw, json)
Hash identifier:          ccdxXHkvKmCu1D6SnF8JZcTlnT9Mf/9E4B/zK9gcVWI=
Subject key identifier:   FA:6D:8B:C3:04:36:17:85:A8:84:45:13:D0:A3:85:B6:AF:FC:DD:F4
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F4328584902EC29FA1903BB50D88A1080
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/d28b11c3-e000-3cd2-99bc-9f0af4ac43f9.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     10929
IP address blocks:        64.15.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:29:fa:19:03:bb:50:d8:8a:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=23b2dace-da47-4cb3-879f-95b461e40422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:13:7e:fa:5b:4d:d2:9f:5b:ff:35:6a:ba:f5:
                    58:1e:71:91:02:44:b7:74:c4:c3:b1:d7:37:4f:73:
                    c3:0f:ef:76:f6:c0:4f:61:ad:0c:31:35:65:14:9c:
                    71:08:79:60:d4:5a:b5:da:7b:0e:f5:d8:99:46:ca:
                    0d:2b:b8:48:24:ce:6a:dc:94:a2:bd:e4:27:66:3d:
                    4a:04:df:46:19:c0:a9:b7:4b:8d:f7:73:5e:4c:6d:
                    8b:1b:b4:eb:ee:a1:57:3d:ca:0c:ce:60:04:73:c7:
                    e4:0e:75:f6:58:c3:65:f4:11:e8:24:37:10:b6:6d:
                    b1:83:b9:b5:b5:61:62:2a:9e:06:f2:4a:6f:b5:a6:
                    b6:b5:89:82:af:e2:98:3b:41:56:b8:56:14:6b:5a:
                    ad:ea:5b:1e:7c:57:8f:da:be:22:e8:fe:a5:33:62:
                    3f:e7:4d:da:96:26:c0:55:32:d4:fa:fa:32:e5:1b:
                    ae:be:c1:43:65:3b:c3:17:d5:b2:a9:5e:17:1c:49:
                    28:3d:df:b9:27:ac:b6:08:24:af:ba:42:1d:f7:9c:
                    5d:96:c1:9a:36:92:af:02:b5:00:2a:8d:06:f0:3a:
                    cc:e7:b7:1e:9e:db:7b:0f:fa:ab:18:a6:41:b8:6a:
                    40:a2:f2:6c:34:ea:2f:0a:f5:84:88:e0:d3:b9:f0:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6D:8B:C3:04:36:17:85:A8:84:45:13:D0:A3:85:B6:AF:FC:DD:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/d28b11c3-e000-3cd2-99bc-9f0af4ac43f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:82:45:d1:f1:52:5b:2c:d3:e2:c2:67:60:72:68:c8:88:e8:
         02:da:b5:94:94:47:7b:27:f0:71:f2:92:cf:ac:4e:4c:0c:40:
         99:77:47:26:b5:dc:92:28:02:61:db:5c:46:0a:a8:e1:03:be:
         bd:41:06:8e:7f:b0:77:2d:53:d3:8f:04:61:f8:0c:0a:d4:b2:
         4c:65:59:cc:75:85:f6:57:6c:7e:cf:06:52:88:87:22:ee:4d:
         a9:46:02:88:03:8e:05:8e:9c:5d:e2:39:2b:c8:fe:88:ed:de:
         f3:13:8a:ed:4e:ba:f9:a3:a1:51:f2:ce:32:ac:2d:3e:98:ea:
         b0:62:7c:08:b1:b7:ae:47:54:44:b6:b3:c4:19:79:fb:a6:dd:
         fa:cc:ef:ce:41:83:2f:fe:13:9a:84:0b:ac:b9:c6:0d:d9:36:
         e2:ed:5a:82:24:6e:02:02:3c:d2:c8:e7:88:67:22:31:af:d2:
         b8:61:0c:c0:61:da:c3:28:c0:3a:eb:c1:ac:b9:b4:d4:fc:b6:
         65:f7:e4:20:2d:5f:83:05:06:0e:7d:6e:29:74:38:27:c4:6a:
         95:4a:5d:d6:ae:74:09:de:68:e2:c7:57:8d:1e:db:6e:d0:c3:
         6a:a4:8e:26:f4:e6:5b:a5:d5:d6:a0:cb:83:2b:01:5c:96:bb:
         84:30:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:43 2025 by rpki-client