Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7dffc8d4-32db-30c4-a4bb-1977f0637a80.roa
File:                     7dffc8d4-32db-30c4-a4bb-1977f0637a80.roa (raw, json)
Hash identifier:          w9K3gwwlP+mtpQRLtS3JakSI9ejMXI/ZGKcr+O9HdaM=
Subject key identifier:   9D:A6:A7:30:2B:8A:8D:4D:9E:14:DA:62:CF:60:78:EF:3C:8A:51:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926DA92206BF61127FFAE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7dffc8d4-32db-30c4-a4bb-1977f0637a80.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     40050
IP address blocks:        64.71.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:da:92:20:6b:f6:11:27:ff:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=21810d87-2ed7-4e24-bce8-edeb4dc35af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:3f:ea:97:8d:04:c8:9b:20:f9:66:0b:f5:
                    d7:cd:7a:bd:55:81:99:81:65:1b:03:e7:47:d0:65:
                    19:ba:42:1e:cc:c5:06:ef:1b:e3:ad:bc:80:38:6a:
                    6d:eb:14:bc:68:b1:65:c4:54:a6:be:f6:b4:fd:a9:
                    e3:88:5e:d4:9b:74:23:2a:6f:2e:d7:ba:fa:06:99:
                    d2:82:d1:33:ed:df:d0:84:04:89:93:eb:8d:bb:4e:
                    fc:1e:dd:96:e3:42:5e:3e:d8:58:5f:fd:7f:e9:6d:
                    11:98:18:f0:c5:71:de:0a:80:d9:41:36:12:33:b8:
                    2a:43:be:f5:3d:bc:0e:db:6b:a9:43:06:5a:73:cc:
                    5b:c9:dc:f7:e7:62:7a:8d:0a:da:1d:a3:cf:a6:20:
                    d7:d5:8f:b9:ee:cd:da:b2:0b:aa:05:81:8a:1f:a6:
                    21:06:aa:26:f4:51:38:92:25:14:8e:23:ad:65:32:
                    fa:80:2e:49:6a:ab:a0:d5:52:e8:b4:64:9e:76:ed:
                    09:9a:00:8b:92:d4:d2:8d:57:e7:2b:a1:f2:f8:a5:
                    b7:1c:08:27:f1:6c:e4:39:23:6e:cf:12:b5:e6:a2:
                    ed:bd:e9:8e:c1:2e:bc:4e:9c:9a:bd:cf:f6:94:a4:
                    41:91:96:ac:7a:81:b9:99:62:de:c4:39:40:b7:94:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A6:A7:30:2B:8A:8D:4D:9E:14:DA:62:CF:60:78:EF:3C:8A:51:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7dffc8d4-32db-30c4-a4bb-1977f0637a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3e:b0:85:67:10:ed:47:56:06:4b:6e:7d:87:6c:d2:37:72:
         6c:ca:6f:f0:d7:bf:dc:31:34:df:26:b9:75:1c:39:51:a9:d1:
         e6:57:ec:86:aa:2c:36:1b:18:5e:e2:73:c4:9a:35:73:3f:ba:
         f6:04:5b:47:7f:01:bd:66:39:52:28:dd:ac:97:6a:5f:ff:1a:
         17:ca:ae:54:9b:91:49:66:30:a5:39:85:8d:ea:b1:bb:c8:33:
         9b:7f:b8:7e:0e:e4:d6:91:f8:86:82:ef:5e:8b:d2:c6:bd:a9:
         b0:d5:7d:ab:34:9d:16:cc:f5:66:a9:fd:52:5c:2b:37:d0:86:
         db:cd:7a:b1:aa:d3:ea:47:11:3f:9e:4d:fe:fa:81:52:df:40:
         9b:d1:f9:e9:95:2e:0d:1f:79:93:a4:3a:79:97:b0:f1:e5:4a:
         bb:24:08:47:44:dd:c9:07:e3:f6:e5:76:50:ed:f6:a5:16:b8:
         84:0c:5f:ac:b1:9d:43:7c:60:2a:53:e2:98:17:2b:25:57:77:
         59:80:65:12:04:4a:63:0d:bf:1b:7b:41:08:a3:db:34:6f:4f:
         9b:35:11:28:50:4d:75:29:63:cb:b9:67:12:41:cf:0a:7f:21:
         f5:09:cd:0e:c6:cd:fb:0d:42:59:01:3b:ba:f4:ce:2e:97:84:
         16:a1:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:10 2025 by rpki-client