Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
File:                     0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa (raw, json)
Hash identifier:          RuR5yGGYILe4DsowDUvY3srBaaj25Zixt37zJJzKtp4=
Subject key identifier:   8B:72:38:89:F0:49:FC:FC:DC:C8:49:80:DC:6B:96:64:3B:19:AB:9D
Certificate issuer:       /CN=ee451155-06f0-4e35-9b53-96104a44c5e1
Certificate serial:       010D0C9F43285849EA851659F1288784F3A69DA0
Authority key identifier: 28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     55002
IP address blocks:        64.112.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:16:59:f1:28:87:84:f3:a6:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee451155-06f0-4e35-9b53-96104a44c5e1
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=bffd1cb8-b491-4083-9bfb-f071dba4265b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:8e:96:17:b3:2a:3d:50:07:6b:14:d1:31:
                    32:2c:d0:3b:48:d9:18:c2:08:aa:6c:5d:41:e7:f0:
                    a5:53:7b:f9:ea:f2:f1:4b:95:8a:f1:4b:c9:fb:08:
                    c0:66:92:9b:74:2e:d2:a4:21:4b:b9:c0:a8:d9:3e:
                    a4:5f:7c:f6:09:a6:6d:8f:33:7c:7b:69:38:9f:12:
                    6e:6d:4c:4c:a2:85:b2:65:1c:76:30:f7:f2:da:85:
                    f4:60:7e:81:7b:65:1c:e3:df:01:ab:b4:56:9b:02:
                    7a:ab:2b:3a:82:5c:f1:82:ff:e6:ae:3d:1f:fc:60:
                    d7:ca:9e:b8:9a:fa:3b:12:f8:aa:c5:57:03:60:db:
                    ee:24:90:ac:91:12:73:5a:c0:d4:bc:ff:72:8e:01:
                    80:3b:d1:79:32:61:fb:b8:04:16:96:9a:9b:2d:c4:
                    22:3e:1f:86:3c:4c:16:d6:0d:1a:00:a8:db:a2:61:
                    4e:af:13:e1:13:28:b2:f2:9c:5f:83:0b:c3:85:a8:
                    ce:fd:b3:aa:b9:28:23:05:07:0e:60:71:3d:45:d3:
                    3e:52:8a:99:59:96:ba:f2:b4:ef:5c:22:e8:a0:f4:
                    68:4c:4a:ca:1a:96:68:96:bb:86:41:9f:d4:0e:c0:
                    d2:01:6c:54:0a:57:41:47:c6:ad:76:ae:4e:f6:ff:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:72:38:89:F0:49:FC:FC:DC:C8:49:80:DC:6B:96:64:3B:19:AB:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl

            X509v3 Authority Key Identifier:
                keyid:28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:38:fe:46:61:a4:6b:f3:8a:71:8f:99:c7:3a:53:d1:87:af:
         c6:4e:46:43:9b:49:17:88:9a:55:54:44:35:b9:a1:44:d6:5b:
         a2:30:82:f6:f8:8b:de:ed:99:34:e1:ab:47:34:ce:5e:7f:8c:
         4c:b8:2f:4a:50:1c:5f:b0:2c:2c:aa:b4:d2:98:80:bf:87:c3:
         5f:77:d1:75:4e:93:fe:90:2f:39:06:92:5d:74:a4:4b:d7:ac:
         3e:d5:eb:db:d0:08:6b:47:10:d4:a8:e1:e7:13:d4:dc:a5:c3:
         ef:57:4d:85:39:72:93:75:d0:70:2c:a9:b4:ab:cd:12:f4:4b:
         b4:58:dc:ad:c9:09:dd:12:62:b0:e0:a7:9c:0b:35:44:c3:9a:
         7a:ae:d7:27:75:f6:63:64:18:2e:bd:e3:4e:ff:86:d1:48:74:
         3c:0f:4b:95:69:be:2f:32:b1:57:35:c2:4b:94:c3:ef:1b:4c:
         77:5e:ea:ef:d1:c4:56:f8:42:24:a9:cc:3f:ff:cc:be:83:bc:
         f7:8c:57:af:2b:88:9a:c3:0c:a9:6e:9a:e9:bc:ce:d6:15:8b:
         98:aa:d6:43:bf:f3:35:79:b3:69:99:e8:00:98:bb:a6:4f:81:
         e4:8d:0a:be:43:65:ab:f7:d5:47:72:70:98:60:05:56:f5:76:
         65:6c:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:00 2025 by rpki-client