Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa
File:                     b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa (raw, json)
Hash identifier:          EJ70pKl8BIrxfYryzksZFZmVlVifOtzVRO53SIFGxg4=
Subject key identifier:   74:99:FF:13:13:49:E8:BB:FA:AD:14:5A:7F:BD:09:94:09:E6:D4:0C
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F43285848EF6167DBAD44BD94034999C0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     11260
IP address blocks:        64.178.128.0/19 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:67:db:ad:44:bd:94:03:49:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=27e5aa40-2d8e-4eac-8277-cfa9677852e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:70:a7:f1:98:f6:ab:c9:10:c1:0e:39:cd:
                    e3:69:47:5b:f8:62:3c:24:cb:dc:d7:94:65:ee:1a:
                    ed:bd:fb:71:bb:31:49:a2:84:18:7e:6e:71:82:f3:
                    85:39:b3:d3:23:4b:41:e6:65:d9:8e:da:a1:e3:e5:
                    3d:da:ed:64:49:1f:70:c0:ea:a6:08:30:0a:92:7a:
                    9d:2c:fa:5d:0a:ef:4b:d8:b5:3b:80:f7:e7:25:68:
                    18:de:ee:97:69:a2:df:d6:fd:68:34:c9:9b:03:48:
                    74:66:c7:be:81:ad:fa:8e:a2:f8:df:2b:00:ae:90:
                    d7:88:64:c8:17:c8:48:66:2e:58:dc:53:7f:5b:62:
                    f3:a1:a5:93:36:65:59:b6:44:6d:5c:d1:c9:17:2a:
                    7d:ff:a3:ff:28:75:78:31:8e:bb:31:8f:b4:32:c0:
                    34:ed:47:c6:22:3b:af:d0:0b:01:f9:78:c9:4a:12:
                    7a:37:a5:53:8f:9e:36:03:67:ab:77:ea:54:37:ae:
                    01:b9:f6:25:7d:58:86:55:d3:ae:32:1b:e1:78:8f:
                    51:4f:cd:57:7b:e3:49:95:dc:ee:ec:e9:98:c5:0f:
                    6f:9d:f5:23:3d:13:eb:0c:71:d3:d5:24:4c:3e:99:
                    f0:fc:2e:14:67:d5:c2:3f:7c:cd:0e:aa:11:fc:c2:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:FF:13:13:49:E8:BB:FA:AD:14:5A:7F:BD:09:94:09:E6:D4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.178.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:2b:d2:19:c2:7a:80:44:b8:e9:56:8d:f0:8d:6c:77:a5:81:
         c9:0b:8c:ef:9e:2e:8a:11:ba:47:aa:4c:dc:31:ce:e0:b9:c2:
         97:6c:fc:77:79:a3:7d:85:51:28:99:ad:2f:fd:02:3f:52:59:
         39:08:02:66:fc:1d:80:fe:f1:06:0b:b0:59:23:f5:d4:1b:52:
         55:84:91:96:39:78:e6:66:b7:7c:10:c6:f4:af:fa:df:24:b3:
         54:4c:01:b1:36:b9:85:21:f6:74:32:0b:a1:2d:2f:34:a3:08:
         a7:d0:ab:69:87:5b:8a:30:eb:aa:83:2c:95:c0:3e:69:54:05:
         ec:f4:28:d9:ba:1e:c9:79:27:6c:e8:fb:46:a4:52:08:07:58:
         ad:8d:0e:28:02:f1:12:54:69:07:af:03:e4:af:f2:7d:23:1f:
         c2:f8:f9:69:89:b5:65:40:95:9c:90:b2:3f:88:f8:85:e3:cd:
         aa:bf:6f:cc:b9:0b:9b:b3:65:57:0d:75:1b:cb:2e:a8:5a:0a:
         ba:70:cf:3c:b1:4d:2a:a1:4a:b9:30:4e:66:1b:84:77:b6:3a:
         38:70:03:6a:74:d0:42:a6:0c:84:6f:72:3d:83:0f:c9:37:d4:
         01:cd:fb:c0:13:36:cb:87:49:5c:99:d2:47:0b:90:7b:05:97:
         67:3d:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:36 2025 by rpki-client