Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/5d0b63c1-3863-3ec4-a511-1dbc2f59a4b6.roa
File:                     5d0b63c1-3863-3ec4-a511-1dbc2f59a4b6.roa (raw, json)
Hash identifier:          8XhXZ8PkWK4JcDAlbmBKUJ4GkhQ+xk8AEKD86RxA4IA=
Subject key identifier:   FD:2E:61:79:62:DE:90:93:4B:83:C7:BB:E2:D4:0F:6B:B3:AC:18:EA
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584961B98D8FAEB97CCC7C1A38F0
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/5d0b63c1-3863-3ec4-a511-1dbc2f59a4b6.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     396032
IP address blocks:        64.38.142.0/23 maxlen: 24
                          64.38.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:8d:8f:ae:b9:7c:cc:7c:1a:38:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=028abf75-f766-44b5-8a35-428923c510f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:82:a7:87:c0:fe:cd:7f:42:eb:bd:0d:3a:
                    1b:ac:77:3d:4f:7a:6a:36:49:0e:11:95:41:54:b3:
                    9d:06:3b:26:bb:5a:e8:15:23:7e:3b:2d:07:b4:ac:
                    9e:64:9c:1c:be:49:91:e7:48:60:0c:75:67:81:d7:
                    51:57:60:7a:27:6c:8a:2b:ac:ba:1b:58:7c:62:60:
                    d3:d0:db:86:f8:69:5b:5a:2e:e1:07:cc:4e:9d:40:
                    1d:f2:23:8c:ee:c1:21:6f:1b:ee:e9:c0:b2:55:16:
                    77:03:dc:49:e4:50:d5:32:0b:e6:72:d8:4e:9d:97:
                    8f:db:a7:f6:2c:81:2a:39:c4:71:49:85:dc:38:55:
                    d1:57:d8:d8:f5:d0:11:33:86:e8:dc:d6:38:dc:e3:
                    b3:5d:14:a2:b2:1c:23:6a:c2:b2:6f:e5:12:0a:52:
                    cf:45:7e:1b:1e:2b:6f:a2:26:75:49:0e:c4:7e:fc:
                    24:cc:df:b7:98:40:69:c9:e4:8d:b9:f5:10:c2:7f:
                    b8:a2:98:c9:26:a4:65:6d:3e:39:7d:b8:25:dc:1f:
                    5e:56:89:35:6b:8b:87:02:32:a8:5f:b1:50:64:9e:
                    00:97:c9:51:70:09:74:70:a1:4c:c0:65:55:09:24:
                    38:fd:b1:02:40:a9:d0:eb:0a:ea:93:75:02:b4:17:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2E:61:79:62:DE:90:93:4B:83:C7:BB:E2:D4:0F:6B:B3:AC:18:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/5d0b63c1-3863-3ec4-a511-1dbc2f59a4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.142.0/23
                  64.38.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ad:9e:26:ee:f0:91:ec:2f:1c:47:26:c3:33:07:89:2d:10:
         76:7e:f4:7e:46:59:a2:d6:53:2f:3f:a1:2b:ac:d3:66:34:ab:
         72:e6:a6:57:9f:d5:c0:b8:bf:86:2f:44:e7:8b:9f:19:95:fc:
         ed:7c:98:47:6e:34:7f:da:dd:62:18:75:d5:3e:84:5a:02:b7:
         08:24:d9:a6:09:32:b0:35:c0:be:9e:4e:13:f2:31:10:88:cb:
         4f:22:14:33:fd:36:3b:83:09:30:6c:15:96:d3:38:33:b3:43:
         34:e6:e5:c0:44:0c:f9:1b:dc:2a:72:d4:ab:41:61:b1:63:14:
         02:5c:87:6e:38:e5:fa:a8:d8:20:26:4e:c1:a4:17:19:7e:6d:
         fe:05:8f:d3:6b:d4:89:df:d3:05:b9:2d:a9:52:8a:28:8c:5f:
         26:09:b9:c5:e3:1e:46:e1:6a:d2:b4:bc:b3:23:dc:17:8e:d8:
         da:6e:98:0a:e6:21:b1:1b:5f:9f:1f:a5:d4:6d:2b:79:e2:7a:
         36:14:74:0a:78:29:c2:d3:f5:90:98:ff:48:90:a1:95:04:7f:
         cc:fc:7b:98:0a:19:fe:97:64:af:82:3f:6a:49:1c:ce:a5:6f:
         41:fe:d4:ed:ac:21:10:c5:90:c8:17:3e:b2:f9:38:44:35:9d:
         2f:1c:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:14 2025 by rpki-client