Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/2ea001cc-d262-3277-b7af-56fbb5863c2b.roa
File:                     2ea001cc-d262-3277-b7af-56fbb5863c2b.roa (raw, json)
Hash identifier:          /mmLI/dNCZk7idMalqUBZlNkMV5X8J0dPTKcgNic0Hk=
Subject key identifier:   7F:73:8D:1A:5A:43:A0:D9:5B:EC:00:F3:FD:DB:55:28:94:9A:22:14
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584897708BD6E68339291FBB3480
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/2ea001cc-d262-3277-b7af-56fbb5863c2b.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     13760
IP address blocks:        64.239.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:8b:d6:e6:83:39:29:1f:bb:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=34ea46ca-478f-4fd7-bc94-d0f719b2f8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:35:56:9b:62:60:a4:4c:b5:72:1f:40:5f:15:
                    75:5e:72:ad:67:ed:d6:c1:58:50:98:f4:0b:d7:c8:
                    45:f1:c2:6b:d8:4f:90:0a:f1:8d:47:08:8f:d2:5b:
                    c9:4c:51:25:f8:5a:7a:4c:a3:2e:57:54:82:e0:81:
                    b8:7d:72:d1:ec:10:f1:6c:c9:65:8f:01:ee:6c:25:
                    bc:42:d6:48:83:65:2c:5d:e8:63:35:11:35:27:0e:
                    ec:10:71:1b:fb:ec:77:7c:c6:7d:e6:6b:c8:ae:76:
                    c2:f5:57:66:a5:5a:a5:1f:e9:7b:5c:d8:e5:ad:ab:
                    50:1b:01:20:8a:48:7e:b1:4a:3a:21:b1:39:f6:29:
                    cb:88:f6:3f:cc:d9:13:05:e7:fa:79:24:ab:e4:25:
                    4a:10:25:bd:52:be:77:a0:cb:c1:75:8b:1a:ed:76:
                    f6:0b:03:24:ea:98:78:30:76:af:b4:58:0e:4d:92:
                    6e:97:39:d1:7e:a8:54:47:b9:38:17:37:84:ae:db:
                    a0:6a:e0:ac:d4:ee:9c:9e:1e:89:4f:25:eb:98:23:
                    a7:65:03:d9:24:2f:17:32:3e:ee:3b:da:5e:30:cf:
                    f2:3a:24:c8:0e:c0:be:f6:96:c4:a4:63:3d:99:c0:
                    6c:61:82:45:96:51:ea:61:04:fd:5e:45:4b:b4:8b:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:73:8D:1A:5A:43:A0:D9:5B:EC:00:F3:FD:DB:55:28:94:9A:22:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/2ea001cc-d262-3277-b7af-56fbb5863c2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:1f:9c:c1:d9:c1:d0:59:a5:41:dd:fc:a1:9b:ba:67:20:
         41:41:bf:0d:20:da:48:a8:29:2f:d5:5d:d8:c7:3d:3e:e8:24:
         ed:46:be:a0:ff:58:6a:ae:ce:1e:f3:76:44:63:cf:1a:10:e2:
         03:d0:49:24:a6:ae:db:e8:6c:d9:18:a0:5d:63:b2:02:15:98:
         4d:1f:6b:e2:4d:f1:22:4f:00:48:ba:c0:9a:94:79:25:a4:83:
         71:f5:2b:4d:4e:e8:b7:4a:fa:c6:d4:9b:b3:aa:66:f5:bd:32:
         34:88:45:ff:bd:72:fd:b2:a3:37:fe:ff:ac:12:04:30:06:79:
         19:94:fc:b9:ea:94:ad:69:a5:4b:79:0f:50:3e:4b:20:62:19:
         cc:7b:a5:94:9b:86:38:eb:c9:eb:07:e0:27:b8:8c:20:6f:37:
         8e:96:7e:5a:9a:7e:96:d6:e4:f2:a4:01:f4:68:d4:f1:b8:d7:
         56:95:20:49:a2:75:31:32:40:a8:48:5a:84:49:7b:22:92:f8:
         6e:59:98:e4:65:1b:a9:bc:b3:6b:5d:94:3f:d9:bf:c4:0b:c9:
         27:1a:9e:ef:ac:e5:69:70:15:3a:22:f4:23:c6:48:2a:1b:15:
         bf:a6:c8:d8:b4:f8:5a:94:6a:4d:4a:52:a3:36:5d:4e:79:29:
         71:0e:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:18 2025 by rpki-client