Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa
File:                     42ad508a-1d9b-3416-b900-7d41869eb2b5.roa (raw, json)
Hash identifier:          kPw6+UsmZfTzJfMkiM2/H7mRLi7iAwoEdLM8+qrfL5E=
Subject key identifier:   51:30:3E:14:AF:87:B3:AB:79:DD:E7:B0:B2:6D:17:52:C2:3A:DC:9A
Certificate issuer:       /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial:       010D0C9F43285848CB165903071AD750AC423A00
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     14217
IP address blocks:        64.21.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:59:03:07:1a:d7:50:ac:42:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=332f363a-170b-4071-ac6d-7e0901e005ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:63:af:ad:3f:9c:aa:60:13:40:0c:5b:f2:
                    5b:cb:14:b2:89:60:92:f4:b6:ca:4d:1c:72:63:c9:
                    6a:09:29:b5:86:26:33:99:98:7a:38:d5:8b:ae:bb:
                    87:5f:f3:07:df:08:66:7d:f0:f9:00:b7:7d:77:0f:
                    c2:3b:99:82:04:68:20:1f:a9:7d:80:a7:63:56:ce:
                    f5:ef:0a:52:55:d1:fa:32:bc:4f:f4:a9:0b:ce:00:
                    90:ed:6b:3b:68:54:b1:f1:22:e1:15:6b:5e:b7:b2:
                    cb:5d:ac:fb:74:91:2a:ea:5b:a4:06:47:bb:f0:fd:
                    9f:74:61:0d:d2:16:7f:27:de:94:a6:2b:5a:3b:ce:
                    ab:3b:0f:20:d0:d9:8f:2e:22:ab:af:0d:86:75:00:
                    97:d1:c9:06:46:ce:19:ae:3c:88:08:e0:9e:07:c2:
                    da:4f:4f:15:dc:09:fb:57:5e:3b:80:74:76:0f:8d:
                    8e:d1:0b:62:dd:49:cd:e1:77:72:9a:28:cf:ee:6a:
                    66:64:75:04:38:5c:dd:7d:0c:83:32:9e:b3:30:6d:
                    41:b7:af:88:b4:07:66:a5:57:8e:16:a0:67:b4:f1:
                    a4:3a:ee:50:fe:32:90:20:d2:e5:a6:22:41:5e:f5:
                    d9:32:19:40:e8:58:30:e5:fa:b3:57:db:18:da:14:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:30:3E:14:AF:87:B3:AB:79:DD:E7:B0:B2:6D:17:52:C2:3A:DC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl

            X509v3 Authority Key Identifier:
                keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.21.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9b:93:bc:27:31:33:4e:78:90:18:de:9a:19:c5:f0:80:f8:
         97:d1:6c:7f:9a:56:7a:66:8b:95:36:c5:20:47:cc:e1:be:10:
         dd:1a:a4:1e:0c:28:ef:6a:a9:d0:83:2e:a4:87:52:cc:66:81:
         8b:62:75:42:0f:24:3a:d8:90:43:5e:f8:3a:0e:4e:42:03:5b:
         f5:7f:a3:b4:87:6a:09:1c:7c:c6:02:f9:42:47:50:55:21:d0:
         9d:34:c7:92:ca:91:f5:06:3b:b3:e2:94:63:6c:b0:36:32:8d:
         33:d4:25:76:d2:82:25:a3:fc:68:89:9f:fa:f9:08:45:4e:26:
         1a:a3:b6:ec:3e:f6:1f:30:3f:18:52:8d:98:b7:ee:5d:cc:7f:
         7d:49:c7:2b:89:41:a0:98:02:80:44:83:9d:2c:3e:79:63:d8:
         fe:72:65:90:c9:62:39:62:4a:68:fd:cf:89:f6:ed:2f:26:ac:
         58:f9:f5:b9:fa:5c:cb:38:78:03:f2:e2:3e:d2:d7:d9:d9:8b:
         6f:27:9b:f4:db:dc:f6:85:96:2a:de:86:20:a1:61:c7:c5:3b:
         8a:5e:bd:2c:e9:5e:c0:2b:64:89:c7:a0:a2:a0:1b:5f:21:e6:
         5f:cb:a6:47:08:79:0c:ed:96:5e:af:e8:dc:e1:64:a0:b5:14:
         21:d6:a8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:11:54 2025 by rpki-client