Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa
File:                     5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa (raw, json)
Hash identifier:          hQpQUei9sjAoOFYs8iH1N2Ypgilzp/aXcAzWgfXP8q4=
Subject key identifier:   AE:7D:AF:83:BE:87:42:CC:34:8E:09:4C:B8:E8:68:79:B9:BC:10:24
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F43285849407D7F4C47D57C4546F48780
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa
Signing time:             Thu 20 Mar 2025 15:18:25 +0000
ROA not before:           Thu 20 Mar 2025 15:18:25 +0000
ROA not after:            Wed 18 Jun 2025 15:18:25 +0000
asID:                     33521
IP address blocks:        64.25.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:7d:7f:4c:47:d5:7c:45:46:f4:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Mar 20 15:18:25 2025 GMT
            Not After : Jun 18 15:18:25 2025 GMT
        Subject: CN=e4683581-2ee0-483c-9c55-cb21ad892aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:f0:0e:9f:c7:07:36:10:f2:25:c0:76:7e:
                    97:0a:7a:c0:04:40:f7:d3:8d:a7:f0:26:27:00:a7:
                    bb:a1:b3:d0:95:48:e0:02:07:85:c3:67:0c:8f:94:
                    e8:68:e5:24:f3:4b:f9:2e:9d:c2:fd:a1:0c:8c:d1:
                    9f:a1:bc:4f:94:5f:63:47:84:57:db:42:93:74:2e:
                    d7:85:37:7b:05:25:0c:69:04:76:ff:83:2a:1f:6a:
                    f4:2b:76:1e:4e:84:d1:d6:05:77:cc:1e:58:2f:d3:
                    ce:87:0c:f8:19:ae:d2:be:fb:f2:45:98:6c:3a:38:
                    f5:65:49:6f:d0:49:a0:51:c2:ac:52:0b:ce:42:2c:
                    a8:ec:39:21:21:c0:45:76:9e:58:7b:fd:30:c4:8d:
                    83:d9:02:25:e0:83:47:8a:e1:cd:24:9e:f7:e4:37:
                    58:80:6d:e0:2f:d4:c4:2c:4b:8e:e1:17:83:69:40:
                    0f:8a:78:40:cd:4a:3c:38:e4:8c:a9:15:e9:61:9c:
                    2c:fe:aa:04:a0:db:e1:7f:de:c3:6c:fd:f5:f9:f9:
                    aa:c3:1c:a9:a4:72:c0:77:1b:02:b4:5e:4e:eb:27:
                    d1:99:9e:cd:5b:7d:50:83:35:c7:8c:b6:c3:68:c9:
                    81:c3:5e:e8:1a:84:56:4e:1e:63:1b:f3:30:f6:e9:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7D:AF:83:BE:87:42:CC:34:8E:09:4C:B8:E8:68:79:B9:BC:10:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e4:6c:0e:9c:37:01:25:ce:f7:bf:24:b7:d4:a1:81:8b:6a:
         3b:a5:48:de:4f:ed:66:14:c4:07:8b:7a:fd:8b:a5:03:50:51:
         b9:f3:6f:8b:49:58:aa:4c:38:8a:cc:11:15:ef:b9:8c:fc:00:
         ce:77:10:d4:8f:a5:5e:7a:a5:01:1a:e1:06:1a:31:2e:76:f3:
         a1:6a:81:d2:3d:d5:57:a0:e1:5f:98:ee:23:b3:7d:c6:a1:69:
         a7:ab:3a:24:4a:ad:bf:0e:08:9e:c2:cc:a4:4b:7c:73:b8:d9:
         38:3b:65:e2:60:e6:0f:a3:67:87:68:6f:37:68:23:c8:ad:2f:
         43:6f:fa:d3:51:9a:c7:97:18:1b:e1:ee:90:50:0c:88:d8:a1:
         0d:4b:83:37:62:c0:36:6b:01:b8:a8:b7:a4:62:f5:01:f6:99:
         cf:9a:1e:c0:07:19:cb:e1:b6:1e:80:ad:c6:a8:d2:19:dc:24:
         b7:a7:aa:21:b1:e9:4e:df:bc:9a:28:12:70:30:dc:2e:74:0e:
         ae:4d:34:30:58:db:11:c2:31:ab:1f:d0:48:fb:c1:da:68:dc:
         bc:7e:35:fa:1b:a7:00:1f:32:b4:d2:43:d2:13:37:10:14:5a:
         d2:94:c3:33:ee:29:aa:0a:86:9b:54:b2:08:42:31:ed:15:68:
         10:ae:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:52:08 2025 by rpki-client