Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/553871bf-6d14-32ab-81d2-f44e861298f5.roa
File:                     553871bf-6d14-32ab-81d2-f44e861298f5.roa (raw, json)
Hash identifier:          A3XTdxuNFlpB9wzJ633RLCQtII1uwbGpnk9wu6k7o6M=
Subject key identifier:   94:02:27:E0:DB:F3:78:21:D4:8F:29:70:D4:BE:DF:B8:9F:50:2B:BF
Certificate issuer:       /CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
Certificate serial:       010D0C9F432858495151D493C2A84FD3A7558D80
Authority key identifier: F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/553871bf-6d14-32ab-81d2-f44e861298f5.roa
Signing time:             Wed 26 Mar 2025 15:59:11 +0000
ROA not before:           Wed 26 Mar 2025 15:59:11 +0000
ROA not after:            Tue 24 Jun 2025 15:59:11 +0000
asID:                     14230
IP address blocks:        97.64.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:51:51:d4:93:c2:a8:4f:d3:a7:55:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
        Validity
            Not Before: Mar 26 15:59:11 2025 GMT
            Not After : Jun 24 15:59:11 2025 GMT
        Subject: CN=9be7a437-eaff-4c92-a72e-48c16607cdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:52:4c:d8:07:88:15:db:bb:3f:2b:bb:ef:3e:
                    a8:ee:86:41:4d:30:46:85:f2:80:7a:e5:f1:96:b0:
                    f2:dc:f9:82:42:20:93:69:51:85:4f:00:ad:73:24:
                    62:e7:5f:47:9c:21:64:70:c7:b4:cd:d2:25:f8:be:
                    d3:c1:d3:05:c0:f9:b1:4c:ae:5c:1b:fd:8d:73:ac:
                    51:1e:db:ae:3b:78:77:9b:98:49:10:08:d9:a8:5a:
                    03:83:c8:38:df:e5:47:45:15:00:20:d4:3a:63:a6:
                    a7:35:5b:94:4c:35:37:8a:3b:a9:fa:29:01:e5:e2:
                    06:58:b0:99:0a:4a:c4:19:fd:15:d2:9c:37:5f:97:
                    36:1b:4a:e0:d8:f7:da:8b:27:18:c3:de:84:8d:35:
                    79:18:b7:c1:17:5d:ff:e6:b3:1a:fd:39:56:a6:b0:
                    8d:1a:79:da:fb:78:ae:8d:d8:69:b5:7f:1b:c8:f0:
                    3f:18:72:96:e0:9c:7e:6f:7b:c5:58:e2:67:5e:d0:
                    72:8e:66:39:66:4b:98:89:b2:6b:01:5d:c5:eb:cc:
                    01:47:f3:f3:26:fa:70:df:f8:8a:ee:ef:79:60:0f:
                    d2:5a:32:4a:25:87:94:41:10:45:57:0a:42:ea:d8:
                    cc:84:2a:81:61:17:69:7d:cd:40:1b:2f:82:38:26:
                    2f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:02:27:E0:DB:F3:78:21:D4:8F:29:70:D4:BE:DF:B8:9F:50:2B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/553871bf-6d14-32ab-81d2-f44e861298f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl

            X509v3 Authority Key Identifier:
                keyid:F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:54:72:12:14:a4:2d:91:e0:5e:f5:a0:75:cc:de:b2:23:af:
         88:75:ec:99:71:eb:0a:56:c7:41:47:d1:d4:be:c3:cd:00:22:
         df:41:25:93:94:dc:5c:9e:27:d8:82:39:17:cb:2d:b8:73:5d:
         a1:dc:77:bc:97:df:2e:80:2e:2e:23:a4:de:51:eb:9f:58:a3:
         76:ee:d2:ee:d2:2f:08:06:d6:82:d4:fd:c3:f0:39:e6:68:34:
         b0:ec:39:bc:4a:b2:f9:51:ec:86:93:89:dc:c1:93:a5:78:fc:
         8f:01:13:43:73:e9:b5:19:84:9e:cd:7a:bd:0c:5f:98:e1:bb:
         3a:2f:8a:2e:57:04:b0:12:34:35:d7:c0:2f:0e:ae:b2:51:9b:
         b7:e9:7e:58:06:45:24:ee:91:01:07:9a:0b:ba:87:de:f9:26:
         20:55:02:dc:e3:a9:e0:bb:68:a3:09:de:24:e7:dc:06:b8:78:
         1a:f4:f4:23:34:1e:58:32:09:10:a6:97:63:8e:61:88:1d:57:
         2e:92:22:72:62:7a:4c:a7:dc:e5:26:4b:38:cb:4c:0e:49:99:
         51:58:8e:d2:b6:cf:43:e8:9f:68:06:d5:a5:62:3f:10:cd:6f:
         8d:37:d0:96:7e:ae:c6:30:64:f9:4f:aa:44:03:f3:46:91:fb:
         6e:47:3f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:59 2025 by rpki-client