Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/82bb00f5-b592-37a1-8e68-c14feb40c92d.roa
File:                     82bb00f5-b592-37a1-8e68-c14feb40c92d.roa (raw, json)
Hash identifier:          RCEM+tFo+smujtmy1bCU21vR0+j9cHB+UmGGymwosBA=
Subject key identifier:   A4:72:9B:28:FA:DA:BC:A8:98:FB:9D:CC:F5:1B:87:47:06:5F:99:5E
Certificate issuer:       /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
Certificate serial:       010D0C9F432858490E16C287760827EE4E2E0670
Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/82bb00f5-b592-37a1-8e68-c14feb40c92d.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     63037
IP address blocks:        192.64.70.0/24 maxlen: 24
                          192.64.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c2:87:76:08:27:ee:4e:2e:06:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=58328315-66ca-4eb9-941c-41e684d522db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4a:f0:b9:80:77:be:c3:e4:5e:da:dc:b6:42:
                    64:66:6d:fe:57:67:55:12:50:ad:9b:6a:cb:87:7f:
                    69:d5:f7:94:09:93:6e:df:bd:37:6b:27:81:d4:d9:
                    c4:c2:30:09:90:15:98:91:24:fd:27:56:98:ff:77:
                    1b:a9:51:1a:ab:74:27:56:6c:4e:c2:20:30:80:11:
                    ec:5d:f1:64:7b:5d:bd:cd:03:bf:09:ca:13:30:d0:
                    63:6f:38:a1:55:e0:60:2f:04:8e:8e:14:55:b4:69:
                    5b:17:d2:bd:56:07:03:cc:27:71:7f:dc:3c:33:01:
                    6a:8d:af:9d:e7:07:54:9e:a5:06:01:69:07:e0:75:
                    d0:43:34:bf:b7:d6:b4:9d:a4:da:82:05:c3:e1:9a:
                    00:65:9b:95:9c:09:68:9e:e9:e7:9a:1c:cf:4c:ff:
                    29:62:eb:75:6b:2d:92:15:40:2c:2a:18:6f:4a:6b:
                    83:69:1f:79:b0:eb:c6:08:d8:ec:bb:3f:50:0e:35:
                    49:32:ef:91:ac:fa:a5:51:55:46:99:56:cb:cd:91:
                    97:5f:62:17:94:90:20:b3:a3:98:8d:67:a7:96:dc:
                    24:a0:27:f4:bb:93:8e:48:b3:62:b8:a5:46:b6:a2:
                    85:84:64:68:53:02:1f:86:64:7f:35:e6:37:79:dd:
                    92:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:72:9B:28:FA:DA:BC:A8:98:FB:9D:CC:F5:1B:87:47:06:5F:99:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/82bb00f5-b592-37a1-8e68-c14feb40c92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl

            X509v3 Authority Key Identifier:
                keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:85:65:8b:3b:a6:85:07:db:f3:e3:b6:05:fc:f9:3a:d1:f8:
         3f:8e:3d:75:cc:b7:15:be:f7:d9:a7:80:31:cf:53:f9:cd:37:
         47:ab:6d:6a:1a:ec:87:95:f8:be:68:93:54:9a:30:07:5f:25:
         a0:96:c5:14:3a:48:de:da:b7:04:b6:fa:5b:f0:96:90:4c:9f:
         57:b2:d4:1d:95:d6:bc:18:e8:82:6a:ef:cd:f9:cf:2e:d5:3c:
         d7:4f:2c:e9:89:42:33:bf:3e:13:49:e7:3e:a3:d5:bf:74:1c:
         c1:a4:b9:df:47:fc:16:29:99:01:07:60:07:37:82:5d:c2:bd:
         2c:e5:5b:07:c0:90:f6:d1:97:8b:3c:37:50:a7:63:42:26:21:
         1f:6d:74:69:ed:5a:88:a9:21:f1:bb:0e:ee:61:df:a1:75:57:
         1f:93:d5:89:19:43:77:cb:a0:63:8e:22:ff:1b:82:3e:93:69:
         ff:bf:41:19:c2:ac:fc:90:9f:71:4f:d6:95:0d:19:20:d9:fc:
         35:2c:1f:0c:68:93:0d:84:5f:19:3d:1c:f6:60:34:7f:cd:b7:
         8c:87:a1:b8:f8:9a:87:12:6c:c6:b4:98:f3:17:22:62:d0:24:
         80:03:f7:0e:0f:60:8c:60:12:7a:34:ec:cb:6c:c3:4b:cd:09:
         13:0c:eb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:18:07 2025 by rpki-client