Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/11da962d-b616-3bbb-a780-d5f1555c8a88.roa
File:                     11da962d-b616-3bbb-a780-d5f1555c8a88.roa (raw, json)
Hash identifier:          99V/vMobc2Jq+1gHx+zJgiYZxam4Ihbg/5df+rNBKSU=
Subject key identifier:   FC:0A:8F:31:76:3E:B5:D6:86:FD:76:1D:6C:43:00:31:C0:DB:BF:61
Certificate issuer:       /CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
Certificate serial:       010D0C9F43285849244E8991F096EBBD3C1420C0
Authority key identifier: BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/11da962d-b616-3bbb-a780-d5f1555c8a88.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        64.95.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:89:91:f0:96:eb:bd:3c:14:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=f03bacec-f832-471a-8ea1-3e30d161df1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:e2:ec:dc:31:b8:ed:52:8b:91:b8:5c:ee:
                    ad:89:56:3c:74:aa:1d:e2:24:9c:36:d4:bb:ef:b0:
                    aa:51:8e:78:b0:7d:79:72:57:55:56:cd:a4:45:6c:
                    67:94:5a:d8:d8:38:78:ce:80:c1:47:5e:03:93:2e:
                    de:3e:fc:e1:25:75:35:cc:ed:54:04:c7:d8:22:4b:
                    f9:4d:a5:d4:a8:b1:e7:f7:ad:cd:4c:2d:69:b1:55:
                    0b:39:69:50:c2:dd:d2:db:e3:08:10:82:5f:25:84:
                    5e:2c:55:75:2d:e1:ce:39:a2:18:73:03:4c:65:2b:
                    6d:2a:79:83:cb:fe:5e:60:9e:2d:05:0e:4f:89:a2:
                    31:16:54:da:64:52:99:95:17:5c:a5:01:d1:d0:98:
                    95:76:f3:ca:7e:b6:44:8f:f4:13:fa:4e:c2:bc:32:
                    e5:67:ba:86:da:8e:d8:bb:da:fa:0b:61:4e:c0:29:
                    42:c3:c7:be:f2:d7:bb:0d:78:89:44:47:ef:80:37:
                    54:32:13:ba:09:e3:8b:03:62:ca:97:93:4a:fb:33:
                    dc:0a:6d:e1:c3:5c:d3:2d:f2:72:29:27:f4:5e:6b:
                    08:15:b9:67:9a:4a:f2:f3:f1:cd:c6:bf:95:d7:8a:
                    53:40:4e:68:f4:c7:36:87:61:9f:d9:cc:85:d8:bc:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0A:8F:31:76:3E:B5:D6:86:FD:76:1D:6C:43:00:31:C0:DB:BF:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/11da962d-b616-3bbb-a780-d5f1555c8a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:81:87:e4:b6:38:e6:43:7f:48:b2:a0:7d:ea:ec:7b:9d:ac:
         5d:5f:1a:26:30:54:16:fa:15:ad:4a:33:19:a0:ac:a1:e9:74:
         c5:03:02:9a:4a:92:82:88:71:b9:fe:36:2e:43:6d:d1:94:84:
         bf:df:52:dc:33:ca:d0:6b:a7:cd:dd:f0:4c:46:62:4c:fd:40:
         c0:f5:b8:c3:0a:69:17:a4:e5:7a:8f:2c:3a:7d:29:c4:dd:6f:
         16:d6:9e:3a:eb:a8:73:fb:4d:42:f6:a1:36:fe:36:25:df:a0:
         5e:ce:00:19:f1:83:d5:b1:61:93:b3:10:df:60:5c:bd:de:70:
         cb:1d:d4:64:65:5a:46:82:38:b1:93:cf:1a:cd:a8:08:70:37:
         10:0d:9e:bf:8f:30:34:74:f6:51:9d:f0:81:29:e8:16:1c:53:
         df:dd:0e:fa:8f:85:17:b5:05:0c:10:97:0c:8d:13:39:45:47:
         4b:87:90:f4:a6:ef:b8:a0:28:5f:ad:33:c3:57:f0:ea:b1:3b:
         5d:7b:67:3f:2a:97:7c:c8:99:f7:66:94:0f:fb:18:1b:f5:6e:
         60:82:b3:81:2b:53:63:36:bb:95:a7:24:d7:2c:a1:f3:34:2b:
         46:50:0e:ed:07:a0:f8:76:ef:d6:e9:83:99:88:b6:c0:21:8a:
         e7:45:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:34:11 2025 by rpki-client