Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/a2c05db2-f3d8-3301-bf77-c015351fe8fa.roa
File:                     a2c05db2-f3d8-3301-bf77-c015351fe8fa.roa (raw, json)
Hash identifier:          SGsz4ngwns1r5wpij841HR2dEscLTXgv9m+OkLAZ3bk=
Subject key identifier:   50:FE:B2:31:C5:7E:39:1C:32:44:C2:1A:F7:8E:7E:94:E2:17:C0:02
Certificate issuer:       /CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
Certificate serial:       010D0C9F432858495432380CC7444B3265276080
Authority key identifier: 92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/a2c05db2-f3d8-3301-bf77-c015351fe8fa.roa
Signing time:             Thu 27 Mar 2025 16:42:55 +0000
ROA not before:           Thu 27 Mar 2025 16:42:55 +0000
ROA not after:            Wed 25 Jun 2025 16:42:55 +0000
asID:                     18659
IP address blocks:        64.57.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:54:32:38:0c:c7:44:4b:32:65:27:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
        Validity
            Not Before: Mar 27 16:42:55 2025 GMT
            Not After : Jun 25 16:42:55 2025 GMT
        Subject: CN=c74bef73-a797-4704-a7ab-3a89092e6fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:bc:da:1a:89:06:de:fa:06:86:f4:a3:02:
                    97:0b:13:79:15:13:5d:0d:86:af:ea:50:62:e8:69:
                    27:10:4f:6d:3b:1b:87:dc:fd:42:d6:24:71:d9:b5:
                    eb:65:a7:d4:c3:f4:5f:0e:0e:d4:3b:03:80:98:ad:
                    f3:5f:cc:fc:33:01:ad:92:3c:96:00:24:85:d3:aa:
                    48:00:f0:3d:b6:4a:83:40:0f:2a:11:26:80:a3:75:
                    44:90:c8:81:d6:5e:be:ee:7b:53:20:6f:62:d7:18:
                    c7:66:1f:d7:b4:3d:cc:80:10:12:71:85:6e:65:83:
                    db:ec:e2:ce:b9:3a:5a:bc:b3:e7:1d:df:86:8e:ff:
                    19:d3:4e:2a:c5:f0:da:64:d2:fd:04:41:d8:dd:50:
                    60:f6:53:bb:42:e7:3d:df:17:1b:a3:06:05:0e:3c:
                    b4:aa:bd:50:b9:4f:03:86:2e:7c:7d:61:90:22:fe:
                    e9:ed:d2:18:eb:d7:92:4a:58:f8:b3:78:b4:02:33:
                    60:4f:db:51:0b:56:36:66:9a:a1:97:92:59:d3:60:
                    c4:d5:ea:c9:57:ce:d8:24:97:bf:bc:90:ec:bb:64:
                    10:0a:28:9b:a5:b4:38:f6:bf:e1:36:65:34:71:2b:
                    60:b0:70:66:9f:4b:18:76:47:5e:5e:40:56:9a:d6:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FE:B2:31:C5:7E:39:1C:32:44:C2:1A:F7:8E:7E:94:E2:17:C0:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/a2c05db2-f3d8-3301-bf77-c015351fe8fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl

            X509v3 Authority Key Identifier:
                keyid:92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3b:40:a7:c1:34:18:1c:28:b0:9b:5c:2f:33:ec:5f:d2:e9:
         c9:86:7e:04:9e:d0:98:75:a2:07:4c:80:85:67:c4:be:1a:58:
         35:93:9b:32:92:d6:39:74:64:ad:f4:be:7c:b3:83:67:b3:30:
         d4:42:a8:72:7e:e9:90:da:00:c8:ab:c3:d7:30:78:50:c1:ef:
         0d:b9:e8:e3:ef:aa:07:9e:03:30:f7:77:5f:78:d0:4c:bd:9b:
         a7:33:86:88:88:5d:8e:23:61:d6:1e:47:a4:ef:82:78:c4:03:
         6b:fa:50:4f:f7:db:a3:49:ce:d6:8e:22:91:cb:b3:36:5f:3c:
         0c:7b:c1:4c:4c:37:ec:0e:ac:9d:d4:bc:78:56:5e:a0:4b:85:
         50:fd:ba:e8:76:83:20:5b:fb:24:fd:b7:a2:b7:72:8b:66:a1:
         9f:05:30:8b:08:a3:90:ae:7f:80:06:cd:6d:48:86:70:2e:30:
         e7:9e:47:a5:b2:74:36:bb:3e:36:3a:6b:ce:bb:08:93:50:9e:
         0e:88:92:0b:1e:84:59:ac:2b:62:ec:42:0d:5b:7a:43:75:63:
         7d:65:08:41:04:44:d9:e3:9c:83:1a:d0:22:73:c2:7a:37:8b:
         fe:46:7f:f0:75:24:e2:77:b8:c1:89:2e:c7:59:91:2a:85:ee:
         46:7d:4e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:52 2025 by rpki-client