Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/934177ae-0135-31ff-8c6c-f74170527949.roa
File:                     934177ae-0135-31ff-8c6c-f74170527949.roa (raw, json)
Hash identifier:          0aF6tpOrD+3loSTXFvqvDz66CiMig4VzewgvXyUXyrU=
Subject key identifier:   16:7C:77:E0:6E:5D:24:57:D3:40:48:F6:20:7B:B9:F6:CB:CB:65:6F
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F432858497DF907D84C5215E3A156351A
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/934177ae-0135-31ff-8c6c-f74170527949.roa
Signing time:             Fri 11 Apr 2025 15:51:38 +0000
ROA not before:           Fri 11 Apr 2025 15:51:38 +0000
ROA not after:            Thu 10 Jul 2025 15:51:38 +0000
asID:                     199527
IP address blocks:        64.51.0.0/18 maxlen: 24
                          64.51.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:f9:07:d8:4c:52:15:e3:a1:56:35:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 11 15:51:38 2025 GMT
            Not After : Jul 10 15:51:38 2025 GMT
        Subject: CN=c22fd7b9-53f2-430c-95dd-26d0482ef316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:e2:4e:90:98:d0:ea:7f:e6:10:2e:2c:e6:
                    ce:b9:82:5a:fe:fd:20:8a:73:7d:4e:8d:cb:f2:f0:
                    52:8d:91:b9:7f:a7:df:28:81:49:d3:6d:1c:b8:14:
                    13:de:11:8a:df:90:8a:71:61:dd:46:73:a5:1f:e6:
                    7b:a2:60:2c:45:e5:39:1a:ba:49:8b:3c:95:e8:03:
                    a9:12:27:a0:a4:2d:7c:68:36:1f:e0:d0:32:9d:90:
                    6a:54:cb:f2:66:ad:98:d2:c5:05:94:9f:f4:34:85:
                    9f:84:20:c6:24:5f:07:88:04:06:aa:db:d7:40:33:
                    ed:4d:dd:c5:65:95:cd:4e:7a:cd:64:28:89:75:f5:
                    b6:d1:50:9e:b9:b2:09:c4:d6:9a:8b:32:55:33:7e:
                    7b:63:8a:02:65:5a:18:e3:76:8a:12:97:3b:fe:97:
                    43:36:2f:54:80:75:03:84:00:7c:c4:16:ff:b4:65:
                    93:39:a9:59:6b:85:c8:e1:a7:d8:e6:68:d5:4f:b1:
                    6e:d2:ad:3d:a9:8b:62:81:fa:a4:0a:af:16:dc:3c:
                    70:0b:53:59:ff:d5:ab:5f:2a:8f:e3:7a:ae:ea:75:
                    ad:0a:bc:9f:1d:d4:91:37:ec:99:36:b6:1f:ce:4c:
                    8b:d0:ed:bf:dd:49:79:f6:fd:4c:77:bc:6b:fd:95:
                    ca:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7C:77:E0:6E:5D:24:57:D3:40:48:F6:20:7B:B9:F6:CB:CB:65:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/934177ae-0135-31ff-8c6c-f74170527949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.51.0.0/18
                  64.51.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:12:65:99:4d:02:46:65:db:09:69:82:80:5e:48:d4:94:
         09:4a:c9:16:ce:9d:ca:8b:cc:39:93:03:53:cb:86:6b:58:c5:
         fb:2c:53:6c:09:51:e5:aa:f2:50:72:5c:42:05:4a:46:2c:bb:
         20:41:33:33:e1:41:01:89:5b:ea:f8:6c:de:03:fb:54:92:eb:
         36:b9:86:ab:f9:11:92:e6:15:83:54:cc:fc:e9:61:38:0a:49:
         3a:ea:0e:64:bd:e8:80:ef:be:5a:43:84:04:5d:63:b3:57:7e:
         ac:f7:2f:5a:0d:00:f7:4a:48:59:11:66:12:4d:93:91:89:1f:
         aa:7f:a0:e8:68:c0:b4:00:26:17:09:a0:cf:52:cb:88:3c:0d:
         9d:55:0f:a3:02:63:28:e9:4a:b3:10:1f:74:1c:f1:fe:06:57:
         63:24:3b:30:98:6f:f7:cb:83:d2:9d:34:c0:5c:6c:2f:eb:94:
         fd:bc:19:6c:38:b4:7d:c3:6d:64:7f:a3:49:d5:97:48:41:62:
         39:69:31:f1:9f:f4:50:51:f2:42:56:d6:dd:8d:07:61:de:df:
         09:12:5b:ec:ed:4b:62:c1:02:99:b1:ec:67:79:c9:a2:d9:26:
         19:33:68:c8:eb:97:3b:b4:d2:06:68:22:4c:8a:51:1c:45:d1:
         7e:5a:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:57:38 2025 by rpki-client