Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/17723d91-3946-3df5-91ab-544205621d49.roa
File:                     17723d91-3946-3df5-91ab-544205621d49.roa (raw, json)
Hash identifier:          hqx4kgdrbwRYOvUgOaFI8VDrvSdub3XV2Z1hxyGFD/c=
Subject key identifier:   18:38:BB:3E:D2:E4:A8:F1:26:71:FD:8B:74:87:AB:64:21:8C:A4:D2
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F432858493AB81398C2D021EF99AC8380
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/17723d91-3946-3df5-91ab-544205621d49.roa
Signing time:             Tue 18 Mar 2025 13:41:36 +0000
ROA not before:           Tue 18 Mar 2025 13:41:36 +0000
ROA not after:            Mon 16 Jun 2025 13:41:36 +0000
asID:                     29789
IP address blocks:        64.210.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:b8:13:98:c2:d0:21:ef:99:ac:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Mar 18 13:41:36 2025 GMT
            Not After : Jun 16 13:41:36 2025 GMT
        Subject: CN=cea60b53-5320-48e5-9e28-66e1ee7877fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:12:90:ad:c2:b9:bb:e4:f3:ac:a3:9a:d1:c8:
                    b2:fc:f6:98:68:92:13:d1:94:c2:3d:2c:7a:fa:b2:
                    e5:55:59:8a:8f:d3:a7:3a:b4:18:2b:14:e9:85:49:
                    39:33:56:e8:f4:a0:b9:d9:83:04:90:ee:ff:ce:be:
                    f4:9d:f9:b7:08:ec:34:72:68:f0:5c:a5:63:33:a5:
                    fb:ca:a7:f8:cc:bb:78:c9:2c:23:54:87:54:5d:9b:
                    85:1e:3b:ba:5b:0e:32:40:dc:42:d2:9e:3c:31:6b:
                    3a:49:61:92:20:e6:53:9b:83:60:77:a6:7d:7c:c2:
                    37:92:fb:eb:b1:a0:7c:c7:5d:27:92:5c:fc:0e:19:
                    14:4a:c7:9a:08:9b:c7:6d:b9:50:a5:e1:c2:e8:e7:
                    47:1f:b0:db:f6:9a:e0:37:09:91:20:c8:fa:5a:ee:
                    3f:30:03:3d:1a:ac:45:07:9f:c3:5e:87:10:1c:fa:
                    71:69:3b:a0:93:62:50:c8:3e:77:f6:d9:02:bc:0a:
                    00:4c:81:37:da:fc:0e:7f:de:fd:72:69:1f:e7:ae:
                    de:06:a7:c4:22:a1:99:f5:36:20:06:fa:ab:8e:dd:
                    0c:41:57:1f:e0:d1:3a:8d:8b:99:8c:cb:2d:cb:2f:
                    3c:bf:53:b8:c4:4c:9f:21:55:2b:aa:80:cd:a0:e8:
                    ec:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:38:BB:3E:D2:E4:A8:F1:26:71:FD:8B:74:87:AB:64:21:8C:A4:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/17723d91-3946-3df5-91ab-544205621d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.210.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c3:e3:88:8d:98:cd:8a:cb:79:0e:ed:97:47:24:16:3b:17:
         c1:55:36:b8:ce:60:d7:c2:a5:81:29:f1:ee:34:18:65:8a:dd:
         c5:e4:bd:67:07:e6:1c:71:16:e2:7c:ad:a8:89:a7:7e:cc:e1:
         25:e2:eb:34:aa:b9:af:89:bf:13:fa:57:c3:ef:27:d3:6f:42:
         c0:1b:c9:da:fb:68:cf:a7:2f:9e:c3:d3:77:fb:42:52:20:e2:
         5d:37:3d:03:f6:5a:c4:47:cb:fe:f1:ad:81:d6:4c:13:90:6c:
         09:ac:bf:28:99:94:8a:ff:70:88:a2:0e:71:7c:9f:4b:6c:f1:
         79:bf:c1:d9:a6:b1:d7:75:02:7b:95:3e:12:d9:7d:20:60:01:
         0b:eb:0d:ee:82:ae:c4:b6:eb:b5:87:fd:3e:89:84:5a:57:77:
         b7:06:e0:8d:e1:fc:d3:61:9a:87:54:e1:d8:d5:4b:da:82:58:
         50:9a:ce:2c:2d:bc:b0:b2:29:5f:34:1c:4a:34:d8:8d:ad:37:
         4e:ed:94:96:d0:d7:d5:3a:3b:0a:fa:a6:e7:cf:c6:26:12:64:
         21:d0:f9:df:91:cf:cf:48:f3:93:24:bb:6c:34:59:ff:5a:fd:
         5e:36:79:ce:8d:99:bf:46:20:95:df:d6:c5:bf:36:d3:b9:62:
         b8:19:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:20:00 2025 by rpki-client