Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/0c54a92f-55c6-3c08-a5ee-bdd765f94702.roa
File:                     0c54a92f-55c6-3c08-a5ee-bdd765f94702.roa (raw, json)
Hash identifier:          I1yZsWUEqnHKTiA31SMQ1QnvPPUOb2UYL7sl3EVyfes=
Subject key identifier:   DC:5E:7C:D0:AA:26:6C:7F:0D:11:5C:9A:86:4F:22:D1:D5:4D:CB:5C
Certificate issuer:       /CN=12380a37-68ce-4e9c-9585-53cd09071ada
Certificate serial:       010D0C9F4328584938E89CE508C2F10D6945F800
Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/0c54a92f-55c6-3c08-a5ee-bdd765f94702.roa
Signing time:             Mon 17 Mar 2025 22:07:47 +0000
ROA not before:           Mon 17 Mar 2025 22:07:47 +0000
ROA not after:            Sun 15 Jun 2025 22:07:47 +0000
asID:                     33128
IP address blocks:        64.189.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:38:e8:9c:e5:08:c2:f1:0d:69:45:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada
        Validity
            Not Before: Mar 17 22:07:47 2025 GMT
            Not After : Jun 15 22:07:47 2025 GMT
        Subject: CN=b7e2f808-d6fa-4033-ac16-b42dad9fe9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:d8:98:86:16:02:61:4a:48:07:75:48:eb:
                    d8:26:7b:15:29:35:03:f2:db:6a:99:9e:ca:64:c9:
                    29:6f:df:9e:53:8b:cf:e6:a2:5a:90:e0:56:3f:60:
                    8f:98:05:a0:50:43:e0:59:ce:96:ca:41:f0:6d:2b:
                    6f:2d:c5:da:08:1e:fd:43:d5:b8:1c:95:c1:4e:7b:
                    8b:2e:14:cf:58:71:c0:9f:13:3d:59:01:a6:14:24:
                    8c:99:a2:39:78:87:77:f8:c0:97:23:ea:40:24:a9:
                    f7:2c:40:04:9f:b9:d3:28:54:a2:71:bc:9a:3a:13:
                    07:65:c8:0b:41:ec:57:3f:14:e2:39:dd:9c:27:76:
                    75:f1:61:3c:99:06:ce:0a:1e:97:0f:0f:0f:1e:f8:
                    24:b0:3b:a9:c1:f5:c9:f7:60:a4:6c:92:a1:4d:be:
                    85:41:c7:fa:db:9b:1b:9d:27:98:5c:c7:5f:cf:c0:
                    c9:b6:d0:c0:dd:05:55:b7:61:2d:5f:f6:3c:f4:5c:
                    70:dc:1c:97:f4:72:2c:dc:29:77:43:34:fd:81:1c:
                    a7:b3:28:0c:2b:1c:74:b3:9f:d6:75:e1:1d:d0:98:
                    6d:cd:1b:e9:61:6d:6e:db:e6:66:57:c0:a8:6a:0c:
                    73:f6:97:14:7b:5f:84:d7:ca:3f:69:10:81:f7:7d:
                    ca:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:7C:D0:AA:26:6C:7F:0D:11:5C:9A:86:4F:22:D1:D5:4D:CB:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/0c54a92f-55c6-3c08-a5ee-bdd765f94702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl

            X509v3 Authority Key Identifier:
                keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.189.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:9e:88:35:3d:78:3d:c3:0c:36:d3:d1:ea:ae:f6:2a:6a:
         eb:d2:5b:88:c2:ff:aa:e5:af:ee:31:5f:6d:aa:46:54:83:40:
         8e:4a:60:08:86:83:ec:2b:ea:39:e8:2a:c1:49:ec:dd:1b:6e:
         af:b4:6d:37:67:d4:da:78:8b:da:ad:e3:f4:71:d9:8f:f3:91:
         1e:d2:69:2b:53:ff:57:ea:4d:ee:b9:32:de:75:70:a0:76:1c:
         08:cc:da:46:07:68:28:da:82:a7:14:93:77:ea:a7:a4:96:eb:
         fd:40:29:89:8e:6e:d2:a6:3b:8d:6a:6a:ae:5a:1a:09:97:50:
         3f:9d:6f:18:54:47:3e:2d:b5:e4:b0:68:e0:e6:10:3a:73:63:
         2b:a2:15:f7:a9:b4:bf:0f:bf:26:c1:3d:98:b4:51:10:19:0f:
         a2:1c:a8:8d:1f:a8:bb:8b:3c:1d:03:c3:69:d9:be:37:64:2b:
         a4:16:b5:65:31:55:5f:e1:c6:e4:99:fe:74:56:5c:f0:f6:c7:
         96:e4:f4:d9:4f:85:57:26:42:78:6e:ff:3d:c1:b9:74:f7:16:
         46:b2:72:f2:f4:14:51:33:de:2b:67:94:69:61:af:43:d5:e9:
         78:76:cc:84:3a:a9:06:8e:19:5a:69:73:cc:be:eb:e7:0f:5a:
         1b:b4:99:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:47:30 2025 by rpki-client