Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6f4423e-3019-4c82-b89d-7dcd998a0367/67baaed6-7820-318a-9ced-fdc01ea0c6c1.roa
File:                     67baaed6-7820-318a-9ced-fdc01ea0c6c1.roa (raw, json)
Hash identifier:          I2rP55Pg6usS/i8SoIsHEygAVFSQfZWkereMzO27YB8=
Subject key identifier:   CA:72:D2:7D:1D:C3:5B:19:A0:3E:8E:E6:EA:3F:2D:D4:47:67:90:0E
Certificate issuer:       /CN=c6f4423e-3019-4c82-b89d-7dcd998a0367
Certificate serial:       010D0C9F432858490B4C1C39DE0E5C07AF3D9780
Authority key identifier: 52:A6:3D:C6:A0:9E:DC:E0:23:E8:77:0A:6F:04:74:CD:33:AE:30:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6f4423e-3019-4c82-b89d-7dcd998a0367.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6f4423e-3019-4c82-b89d-7dcd998a0367/67baaed6-7820-318a-9ced-fdc01ea0c6c1.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     399913
IP address blocks:        64.112.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6f4423e-3019-4c82-b89d-7dcd998a0367/c6f4423e-3019-4c82-b89d-7dcd998a0367.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6f4423e-3019-4c82-b89d-7dcd998a0367/c6f4423e-3019-4c82-b89d-7dcd998a0367.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6f4423e-3019-4c82-b89d-7dcd998a0367.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:1c:39:de:0e:5c:07:af:3d:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f4423e-3019-4c82-b89d-7dcd998a0367
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=fb76ce93-6729-4acf-a63f-1b53d8ac9094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:81:91:5f:de:5b:b2:76:b4:5f:6a:53:c2:
                    ea:9a:b5:46:b8:7b:c2:61:39:6c:2e:48:a0:59:ae:
                    7c:09:58:6a:6e:70:06:8e:7f:fb:15:94:b4:59:13:
                    19:36:9c:da:06:5e:16:e7:cb:ac:67:95:9a:a2:7b:
                    90:76:73:05:dc:68:34:f1:ac:88:fc:1e:89:26:89:
                    3a:c1:0e:b8:b1:37:2f:79:31:49:7d:4a:09:06:4a:
                    20:a0:18:fd:1f:4e:1e:33:c5:b6:2a:85:f6:c6:60:
                    ba:d6:f9:00:4a:79:42:11:40:d9:06:e9:3a:e8:e8:
                    0f:70:e8:d4:04:42:a7:f3:28:a6:c5:a6:74:56:dd:
                    31:9c:ec:49:ab:dc:9f:2d:ab:c7:32:5d:81:df:a7:
                    59:9f:c8:8f:6c:36:cb:12:23:fa:fe:84:dc:ea:33:
                    d8:35:92:0d:5f:5f:db:45:8b:96:8d:24:32:aa:b6:
                    bc:6b:c9:67:85:dc:62:92:da:fd:a6:ec:12:27:fa:
                    bb:4f:f6:b9:43:68:85:c2:56:cc:62:9c:d4:22:2a:
                    8e:18:6f:3c:3b:29:20:e8:b3:32:29:d8:1a:77:c6:
                    bf:f3:d5:f7:27:91:ef:35:66:59:5a:28:2f:93:8d:
                    99:6c:30:6b:8f:dd:50:ae:99:49:1e:b5:75:72:c7:
                    c0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:72:D2:7D:1D:C3:5B:19:A0:3E:8E:E6:EA:3F:2D:D4:47:67:90:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6f4423e-3019-4c82-b89d-7dcd998a0367/67baaed6-7820-318a-9ced-fdc01ea0c6c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6f4423e-3019-4c82-b89d-7dcd998a0367/c6f4423e-3019-4c82-b89d-7dcd998a0367.crl

            X509v3 Authority Key Identifier:
                keyid:52:A6:3D:C6:A0:9E:DC:E0:23:E8:77:0A:6F:04:74:CD:33:AE:30:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6f4423e-3019-4c82-b89d-7dcd998a0367.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:c5:a3:d9:5d:40:00:80:77:6d:70:95:e1:89:7b:3c:a5:
         96:01:26:2e:3a:18:51:00:e5:08:7c:66:ac:0e:4a:b8:ce:cc:
         3a:5c:27:3b:31:60:7d:a5:6d:f9:69:4a:34:f4:2f:bb:e7:e3:
         3e:8c:25:3a:0f:b8:35:f1:91:76:6c:5d:e7:e9:d6:53:86:a3:
         86:5d:25:5e:2b:20:ec:ca:34:61:a3:7a:07:e5:c6:84:6d:8e:
         f7:fb:4d:35:6f:78:dd:07:fd:d7:bd:65:81:ea:d1:1a:1c:c2:
         f8:74:43:6b:33:39:f1:b3:c8:0d:08:33:45:db:78:58:78:52:
         d7:85:cc:b6:11:ee:ce:db:84:8b:fa:d7:68:c1:b1:b1:99:82:
         ac:20:46:56:bf:73:ab:14:55:ba:74:6e:da:a3:0b:3a:d0:4b:
         ad:b0:20:04:90:fd:63:be:45:2b:26:b7:f5:94:a2:3b:9d:5f:
         c0:04:71:ce:bd:c7:c8:b2:c2:cb:12:24:bf:2e:48:74:b6:06:
         49:94:04:81:89:e4:b5:7c:44:8f:98:8f:9e:6d:0b:79:04:0d:
         bb:05:be:af:76:81:3b:42:82:af:9e:7d:21:c5:d7:20:ed:86:
         a4:33:e2:d1:4a:6f:9d:c7:7d:35:03:15:bc:1e:11:e1:12:99:
         cb:80:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:27 2025 by rpki-client