Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/ed9f1371-7cd6-375d-b21a-0b1ef16a70b3.roa
File:                     ed9f1371-7cd6-375d-b21a-0b1ef16a70b3.roa (raw, json)
Hash identifier:          OHFjwwkBAh8JnBgtITV5EVAg3Dc8URZ+friOYekAznM=
Subject key identifier:   78:B7:B0:C4:29:F4:40:0F:B4:B5:09:A3:C0:A8:E4:86:40:85:AB:00
Certificate issuer:       /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
Certificate serial:       010D0C9F4328584973DEE3BE94EA777DB2FA8580
Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/ed9f1371-7cd6-375d-b21a-0b1ef16a70b3.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     397455
IP address blocks:        64.246.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e3:be:94:ea:77:7d:b2:fa:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=6dc814d5-e386-4972-922f-a0056e0664c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:df:53:9f:4c:33:73:15:31:0e:47:6c:12:37:
                    3c:6e:72:86:67:06:68:f2:50:b5:e4:e9:d3:f2:55:
                    24:d9:a9:d7:3f:e2:0f:cf:17:fa:ab:4b:eb:57:ca:
                    9f:3e:72:47:a1:7b:8c:18:b7:8c:e6:9c:cd:8b:e3:
                    4d:75:fd:7f:23:ba:cb:a2:82:bb:b5:6c:06:e0:b6:
                    37:22:86:49:55:96:a7:b3:d0:96:50:d9:da:48:39:
                    1c:9e:44:30:1f:62:df:a3:f9:ad:34:e4:38:35:88:
                    3b:cb:18:95:ed:b6:b3:44:96:aa:de:c3:b6:4c:da:
                    d4:a9:c0:65:a8:95:46:68:5e:5e:0e:5c:1d:c5:16:
                    de:ec:39:a9:0b:83:40:bc:7f:4b:e2:5d:7d:5e:18:
                    59:27:f1:13:a6:b6:3b:7d:35:cf:12:ff:0d:1b:bf:
                    62:34:87:e2:95:bf:80:ee:74:00:f4:ee:59:f5:dd:
                    78:02:3d:89:8a:eb:c9:b3:0b:0e:ed:3c:1b:4e:58:
                    61:a1:ae:4c:e2:98:52:2e:75:63:68:d2:f9:69:ab:
                    e8:fc:2a:13:a5:3c:73:32:64:f1:bd:f5:34:a6:5e:
                    b5:05:51:1c:b5:c9:8b:01:81:a1:52:92:ed:73:68:
                    e4:c6:f1:94:4d:ae:d1:e6:df:4d:4c:87:96:22:7c:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B7:B0:C4:29:F4:40:0F:B4:B5:09:A3:C0:A8:E4:86:40:85:AB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/ed9f1371-7cd6-375d-b21a-0b1ef16a70b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f8:8e:d5:30:85:25:56:7c:12:4d:0a:aa:0c:d8:d8:55:0f:
         00:0a:d8:f4:87:91:3f:15:a2:62:67:be:f0:86:66:f9:6b:ae:
         1d:45:73:7d:d3:a8:b3:5e:84:86:79:13:4c:4f:ec:54:a4:5b:
         35:0f:69:1c:fc:43:cc:99:e5:3c:59:5c:6c:55:68:f9:42:bf:
         10:7e:bc:b6:99:30:08:77:4d:4d:f6:3a:49:18:bd:2b:cb:be:
         24:c3:89:ea:ae:2f:5f:5c:fa:5f:76:b5:0b:48:be:fc:93:dd:
         d3:7b:45:39:63:17:b0:f1:17:7f:e5:23:f8:46:4c:60:20:c4:
         e5:23:d6:9f:db:77:78:7c:12:8a:11:26:a6:4e:8b:88:ce:0e:
         be:90:dc:73:ea:de:fd:c4:ae:9d:ca:53:94:5f:06:90:f7:49:
         e0:c3:39:3f:2d:9c:29:9d:0f:c2:2f:21:1e:de:68:79:db:bb:
         14:5c:9f:7c:71:fc:c3:1d:68:e3:4f:44:ac:4b:d3:f0:bd:d8:
         1e:a4:b6:37:af:8f:7f:6a:59:a3:00:e1:be:c2:40:f2:44:da:
         f0:2b:c4:e4:b5:0c:c8:02:9a:d6:35:c8:a9:72:ab:d7:06:22:
         04:3b:f8:d1:16:57:e4:75:b5:b1:8c:17:c2:f2:bd:1e:5a:96:
         41:19:d5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:37 2025 by rpki-client