Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
File:                     14a95db4-f488-33a6-a50e-3c5fecedab24.roa (raw, json)
Hash identifier:          T0C27Nh9sc35PYpw9C7O75DLhc4XF9YBK7QnCKO/kRU=
Subject key identifier:   F6:EF:6C:F2:E2:4C:48:F0:8D:97:12:6F:44:26:64:71:FA:53:B0:1A
Certificate issuer:       /CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
Certificate serial:       010D0C9F43285849244E899F78181768497C6550
Authority key identifier: BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        64.95.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:89:9f:78:18:17:68:49:7c:65:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=8803c7f8-4eb8-4e54-83cc-4c93a1568345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f9:38:2b:21:1c:3c:cb:ef:a8:64:39:a4:0b:
                    66:14:0f:46:1f:d6:88:04:30:24:26:39:61:cc:f4:
                    25:09:d5:51:5f:f7:1f:02:3c:0b:eb:21:28:8f:64:
                    a8:95:ef:88:8b:18:f6:9b:be:62:cf:22:b7:63:0d:
                    65:c5:6f:23:95:bb:e4:06:d5:26:a7:bd:0a:c2:e8:
                    79:45:80:f8:5c:d0:e7:5a:7c:10:fe:53:5f:c6:fb:
                    e5:f5:2b:40:31:66:a7:16:91:8d:d7:e3:4e:f4:6c:
                    a8:0f:6d:bf:a5:04:60:e8:30:5e:b9:eb:1a:6d:b9:
                    a8:0b:c1:2b:18:6a:2a:81:e8:e7:6f:bb:d2:b4:21:
                    22:78:fc:94:71:ab:46:4d:e4:91:a4:d9:8c:04:b2:
                    da:fc:dc:72:be:9a:06:87:fb:47:5d:91:f4:ff:fd:
                    54:14:dc:c8:5d:75:d7:83:0e:a6:59:ba:3e:65:be:
                    df:c1:4d:d5:55:fa:52:6b:13:bf:ff:54:9b:0e:4d:
                    bf:9f:80:79:40:d5:f3:6c:f1:87:69:fa:37:ce:f0:
                    d3:f3:b1:1c:7a:78:3a:78:08:b0:6a:29:81:45:53:
                    15:65:4e:c8:65:bd:3f:58:d4:2c:ab:97:ba:e2:76:
                    7e:0c:03:f7:c1:d4:76:7d:9a:2a:9d:36:42:a1:23:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EF:6C:F2:E2:4C:48:F0:8D:97:12:6F:44:26:64:71:FA:53:B0:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:9c:e2:0a:62:7e:f4:76:db:c3:a2:ad:df:b9:3b:69:15:06:
         0e:65:60:5e:8e:b5:d6:62:2b:46:b0:e0:3e:48:98:4e:bc:ec:
         68:7e:4c:6f:bd:1d:4f:86:96:57:c9:bd:a4:b3:82:5f:96:7e:
         6b:01:eb:a4:8d:d6:13:db:fa:6a:75:fc:83:70:9b:ae:b2:21:
         5b:8f:55:7a:c3:e9:82:c7:22:6b:3f:27:39:79:78:7d:90:81:
         e3:af:11:d4:00:e3:e5:6c:e4:9e:3b:11:63:7a:af:53:b2:0d:
         17:df:c7:39:17:81:9d:dd:95:c1:13:de:63:aa:51:52:5b:e8:
         9c:b6:a5:f1:54:60:ef:07:68:7d:da:b1:c6:c0:77:2a:41:3d:
         e8:73:d8:95:55:74:77:47:b4:6a:4f:48:2e:ea:c6:52:cb:64:
         fa:35:c7:c9:43:35:8f:3b:2f:f8:27:6e:ac:2a:88:72:bc:87:
         fb:42:4a:0d:02:97:37:94:2e:9c:1d:41:7b:9d:c8:3f:5e:2d:
         cc:a9:9b:0c:50:99:54:c6:0a:be:5e:b2:07:df:2d:c0:90:9a:
         9d:52:c5:e7:55:99:bd:c8:86:49:17:a6:08:96:d1:ec:ec:2f:
         bd:21:01:da:38:c8:49:80:e7:31:b7:b4:30:82:e6:35:88:96:
         04:a7:f3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:54 2025 by rpki-client