Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa
File:                     8bc8986a-ac26-339e-8cf9-423e085dee63.roa (raw, json)
Hash identifier:          svcF8ZlLffsJPqcrVoyiwZeM9asf1c+R+tRxWV92u+4=
Subject key identifier:   F2:00:2D:87:55:79:C4:4E:72:43:3C:4F:38:69:8A:46:AA:9A:CA:C4
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584909E69F24DFDB5FCB06ED3C10
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     4913
IP address blocks:        64.49.128.0/18 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:9f:24:df:db:5f:cb:06:ed:3c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=931e599f-ef4c-400c-a086-477b273e8a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5f:05:cd:43:4a:b2:79:b7:4b:6a:f2:b8:26:
                    16:b9:32:ab:eb:a4:bb:fb:ff:2e:ea:33:0d:e1:21:
                    72:3f:91:26:1e:f0:dd:15:e1:3e:78:78:03:49:6c:
                    bc:94:6f:11:84:b8:33:d4:b3:02:38:4e:e0:d0:01:
                    da:62:7b:40:0c:02:be:c3:bc:82:71:75:d1:b8:6a:
                    62:58:51:84:75:9c:e4:71:ec:b9:9f:01:09:d6:84:
                    c6:98:4e:3b:c1:e1:ee:bd:42:a5:87:38:00:68:a8:
                    99:96:11:89:02:a1:2a:9b:1f:44:ef:f0:4e:9c:cf:
                    81:c5:09:af:88:9c:80:0e:0b:69:27:a7:f5:93:f7:
                    b1:56:4e:a4:47:c6:3d:73:5b:71:90:e2:49:fa:d0:
                    d8:03:46:60:1b:90:d6:fa:ba:84:c4:a1:1d:54:a9:
                    67:95:67:59:45:a9:9d:47:f2:ac:29:fa:d9:b0:c2:
                    b2:25:fe:f4:b9:03:e0:f6:94:5d:20:b1:bd:6b:ae:
                    4b:96:79:bb:dd:03:dc:dc:04:1b:53:79:4f:b7:d6:
                    7d:f4:e4:b7:63:d7:0a:2c:a9:b8:59:8e:7c:8f:0e:
                    e8:1e:ec:93:05:3d:ae:5c:76:d0:97:b6:20:5f:3b:
                    1b:97:06:3a:3f:d6:61:26:58:55:fa:00:89:d2:59:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:00:2D:87:55:79:C4:4E:72:43:3C:4F:38:69:8A:46:AA:9A:CA:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:df:91:44:e1:16:4e:79:66:0f:81:0d:7a:a5:83:e5:03:27:
         41:e0:ae:5c:f1:f0:34:77:95:55:10:93:b6:6c:41:5d:32:ff:
         e7:f1:24:b5:65:bd:05:48:4a:79:a1:7d:cf:f8:8b:cd:01:39:
         78:90:ae:dd:a4:c6:39:41:38:b3:3c:79:45:82:98:20:56:de:
         7f:9d:41:9b:81:02:aa:3a:f1:30:ba:0e:83:ee:2b:a2:02:eb:
         8d:ef:7d:4c:ac:a9:cb:65:47:15:4c:8c:45:e7:f1:f0:d6:d5:
         39:20:74:c6:0e:7f:ba:a9:92:31:37:05:f4:2a:a3:6e:37:16:
         1f:93:73:9d:53:e6:89:db:06:51:75:18:2e:b7:5c:d5:7f:15:
         35:b0:3b:17:82:e1:02:79:ab:10:55:8f:91:13:9e:9f:5a:36:
         18:43:9c:ce:09:54:8a:86:c8:13:36:4c:a4:01:fb:78:00:4c:
         60:58:7a:b1:9d:77:70:e4:87:89:ef:38:f2:1f:0b:42:bf:5c:
         96:57:6b:6d:88:84:df:86:33:9c:81:0e:5c:e1:da:1e:38:e3:
         79:f8:a3:5c:a8:d5:91:ca:52:a3:07:54:96:5a:1a:6c:2b:04:
         af:2c:a5:7f:ea:9e:5e:14:6f:46:09:e0:d5:eb:f7:d3:62:1a:
         d1:a0:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:35 2025 by rpki-client