Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5a279649-2917-3495-bea7-8e17adaacc6b.roa
File:                     5a279649-2917-3495-bea7-8e17adaacc6b.roa (raw, json)
Hash identifier:          XRIcwd/D9WO5vLmNwIVLutR49WAj7NuzdKU0NUV8Q1U=
Subject key identifier:   0A:A9:C8:F0:76:20:B7:9E:C6:C0:E4:BA:F9:97:E1:40:6D:31:21:AE
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B642FAC9C2A61F6BC5E7000
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5a279649-2917-3495-bea7-8e17adaacc6b.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     54858
IP address blocks:        24.35.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:2f:ac:9c:2a:61:f6:bc:5e:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=e36ba032-edc2-4813-8fab-ae95359c4dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6d:bb:6f:60:4c:ba:2a:bf:a5:3b:ce:d1:1e:
                    73:4a:10:47:85:99:64:e9:d5:98:d0:a9:65:40:0a:
                    32:c9:98:43:1c:68:8b:d0:dc:d3:fd:ae:3a:4b:25:
                    e6:33:1f:90:6b:ad:9d:a9:1b:df:84:48:a9:96:43:
                    94:66:3c:d0:c4:21:ac:57:ac:7d:68:09:8c:95:39:
                    9c:69:3d:02:4c:d7:37:bc:8a:97:13:bf:a5:96:a4:
                    65:0f:63:aa:1a:61:1e:04:f9:9b:d5:6a:91:84:f6:
                    c4:23:d8:55:c0:8f:08:64:fc:ee:9a:fb:47:46:d3:
                    88:d0:36:8c:c2:1d:f8:af:f9:3e:bf:08:3b:0d:49:
                    47:63:46:6e:26:fb:ae:dd:52:ee:99:6c:1d:65:cf:
                    af:6f:7b:b2:7b:15:b5:0e:31:7c:1f:e5:a3:4b:43:
                    bb:2b:42:1d:a2:1c:15:f2:15:a4:09:fc:c6:32:ef:
                    8b:8f:d4:40:f3:31:43:8d:28:fa:ef:1c:02:90:ed:
                    2c:91:03:22:38:b4:17:79:4b:1a:eb:f2:55:04:87:
                    f4:5c:20:8c:1b:70:91:09:6a:08:14:fa:e2:68:8b:
                    11:38:26:dd:e6:41:38:6a:a1:14:39:8a:6c:01:99:
                    43:73:ae:7e:c6:db:55:fb:f3:d3:1e:29:99:b5:26:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A9:C8:F0:76:20:B7:9E:C6:C0:E4:BA:F9:97:E1:40:6D:31:21:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5a279649-2917-3495-bea7-8e17adaacc6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.35.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:10:d5:b8:7d:16:6b:5c:88:3f:6f:70:d9:d1:82:13:01:
         e5:cd:df:f5:24:72:fd:f2:5d:b5:43:ac:eb:a0:3c:df:9a:c2:
         6e:89:3e:3a:37:25:19:53:b1:a7:aa:ad:4f:73:a3:a6:4c:55:
         35:d3:61:85:e8:a5:bf:18:9e:ef:4e:6c:c6:3a:87:62:63:ed:
         d2:ad:90:ce:16:17:48:80:99:91:4e:89:9e:97:65:04:d9:c1:
         20:bd:9e:05:c4:f9:b8:83:32:84:a8:3e:fe:ac:63:7d:24:48:
         12:94:cd:4a:2d:d3:b3:49:9e:82:8f:13:a3:dc:bd:34:d2:58:
         b3:26:fe:ed:ff:70:82:6b:86:a9:7f:c2:5b:30:58:59:e8:17:
         8c:8e:59:ff:eb:74:41:21:e1:68:bf:dc:95:42:79:99:dd:af:
         ec:6c:bc:48:73:f0:86:71:05:b6:7b:cd:6e:89:39:03:fb:80:
         93:6e:5f:23:51:b4:4d:ce:82:5b:c2:81:f3:e0:a7:69:bb:a5:
         bf:15:e5:6b:96:4d:60:83:e5:22:bb:9b:49:6b:6d:b3:8a:e0:
         e5:2f:4b:a2:bd:8a:a9:e2:0a:9b:6f:fd:f8:e9:2b:81:dc:37:
         71:09:10:ed:d7:72:b4:4c:09:5b:63:10:50:e1:c5:3e:83:2e:
         17:0e:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:12:21 2025 by rpki-client