Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/46bc93dd-2d2d-3a7b-8837-053957c750fa.roa
File:                     46bc93dd-2d2d-3a7b-8837-053957c750fa.roa (raw, json)
Hash identifier:          iFCb424t5Y7oxqy8v0YdW95jwIHH0AzW/uqNBq1Udwg=
Subject key identifier:   64:3D:2F:57:94:16:72:DA:7A:C7:27:63:56:F5:AA:62:EE:3D:B1:5F
Certificate issuer:       /CN=5c24b227-71d8-4de3-9a17-e538fd673530
Certificate serial:       010D0C9F43285848E2D106BEB666EE22E3EA4EC0
Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/46bc93dd-2d2d-3a7b-8837-053957c750fa.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     22418
IP address blocks:        64.118.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:06:be:b6:66:ee:22:e3:ea:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=6aa26fc6-47c6-4b4b-894d-7bcf49f1f916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:10:bd:09:4b:ad:3a:50:05:2d:99:bb:ba:
                    84:2f:9c:2c:0a:9c:c7:15:9d:0a:aa:99:66:cd:20:
                    48:94:f4:c8:43:e3:35:16:cc:1d:2c:5e:e0:05:96:
                    e0:63:2c:35:1b:66:c2:6b:bb:4d:c4:3e:be:a9:b5:
                    be:ce:e9:6e:26:06:c4:cc:08:92:1d:73:06:3f:ac:
                    19:46:07:57:ad:91:15:16:5f:5d:c5:45:e0:d3:ec:
                    1a:81:00:ef:28:5d:cd:c2:ad:e9:9f:53:5c:b7:72:
                    7f:6a:d6:0f:79:90:5c:73:33:7c:05:df:75:91:9f:
                    64:47:08:de:c9:12:4e:7d:13:fd:14:7f:d3:55:e5:
                    85:05:e3:6e:67:da:9e:c9:3f:c7:41:5f:6b:8d:ba:
                    88:cd:4a:72:a9:32:26:f4:18:1d:5d:00:e5:3f:d8:
                    ee:8b:24:93:5b:8e:79:b1:db:38:70:02:0c:61:c7:
                    43:c8:78:1b:ae:0a:13:28:53:d8:bd:cc:93:42:de:
                    32:9e:d6:00:d7:09:a9:61:ae:a8:4b:3f:b9:56:1a:
                    0f:e5:96:b3:36:6b:67:24:81:17:2f:8a:35:58:f6:
                    e8:04:6c:2a:58:29:2a:9e:21:93:1a:06:04:ba:d6:
                    39:98:8d:c6:90:83:61:dc:aa:54:d1:37:0e:17:d8:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3D:2F:57:94:16:72:DA:7A:C7:27:63:56:F5:AA:62:EE:3D:B1:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/46bc93dd-2d2d-3a7b-8837-053957c750fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl

            X509v3 Authority Key Identifier:
                keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.118.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:d6:15:51:4c:a4:28:e8:16:f6:c7:ee:c0:de:54:33:7c:1e:
         0b:f3:8a:34:5f:93:2c:2a:96:a6:15:e2:fb:03:15:52:2a:98:
         3b:a9:a2:9a:46:79:37:84:8b:66:00:e5:c4:c6:08:d6:6e:67:
         2e:d5:45:37:c6:f0:ca:5a:d4:2e:e6:81:85:41:95:e2:3c:f1:
         6f:83:2c:58:dc:50:09:54:30:25:04:27:3a:3d:4a:20:c3:ae:
         ed:b6:77:6a:6a:bf:15:b9:d9:7d:6f:e6:c5:47:56:4d:87:93:
         b8:31:10:20:88:79:fb:01:35:c0:bf:20:17:cc:06:28:40:5c:
         cb:63:3b:cc:d5:bc:99:b7:71:ef:4f:0a:19:ef:65:fc:d6:d2:
         5d:40:39:d3:0d:23:78:dc:90:47:09:56:4f:e6:8f:25:0a:80:
         ef:94:9d:16:fa:ab:19:0b:67:7a:bc:c9:8d:b2:11:71:88:0f:
         57:97:56:d7:ce:0a:3b:04:da:03:95:2f:bb:e0:85:43:84:f9:
         c9:09:01:93:8a:c7:5e:f6:f7:2b:3f:f2:4b:a1:9f:77:aa:e8:
         1b:89:42:34:d7:2b:af:bf:81:93:a0:b7:c8:17:5f:b9:ee:a2:
         00:4d:bf:fd:21:55:5d:87:c3:90:df:97:a7:76:de:c5:95:8f:
         3a:77:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:32 2025 by rpki-client