Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/885a81eb-a2d9-31e9-9eed-27d6c0cc8deb.roa
File:                     885a81eb-a2d9-31e9-9eed-27d6c0cc8deb.roa (raw, json)
Hash identifier:          1o+ZfGIxpNOhBjOR49Cxet0OWLw6pzLvuaxD/QZboDw=
Subject key identifier:   30:4C:F5:4A:A3:18:A7:1E:C5:F4:3D:04:1D:FA:FB:E0:B8:23:1F:53
Certificate issuer:       /CN=b65380d4-1db9-4ed1-a660-7ee094b9800a
Certificate serial:       010D0C9F432858489E6B65791ED4260460CE3F20
Authority key identifier: 41:85:92:1A:28:4A:58:5E:31:D8:A5:10:23:34:62:66:20:80:49:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/885a81eb-a2d9-31e9-9eed-27d6c0cc8deb.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     39987
IP address blocks:        64.49.112.0/20 maxlen: 24
                          64.49.112.0/24 maxlen: 24
                          64.49.113.0/24 maxlen: 24
                          64.49.115.0/24 maxlen: 24
                          64.49.121.0/24 maxlen: 24
                          64.49.122.0/24 maxlen: 24
                          64.49.123.0/24 maxlen: 24
                          64.49.124.0/24 maxlen: 24
                          64.49.125.0/24 maxlen: 24
                          64.49.126.0/24 maxlen: 24
                          64.49.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:65:79:1e:d4:26:04:60:ce:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65380d4-1db9-4ed1-a660-7ee094b9800a
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=b5cbe65e-c4fa-45f9-8494-d7c461f8e779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:51:7b:d0:b3:bf:fa:49:c5:be:a3:ec:ac:33:
                    eb:4a:df:9b:c1:e7:e1:dd:5a:02:54:5d:1c:a6:19:
                    6e:1a:3a:4a:32:c7:db:23:61:7f:c4:45:2d:46:87:
                    f9:c4:75:c5:57:29:b7:62:d5:06:8b:6d:0a:5d:e6:
                    4b:81:80:26:56:ac:ba:b3:94:f8:ab:ca:54:0b:9a:
                    71:35:b8:ac:f9:94:d0:75:da:66:59:4e:31:5f:33:
                    0c:22:de:fc:04:b3:bb:b9:ae:0e:a9:66:66:40:a2:
                    03:3d:dc:6d:22:22:4c:ea:99:9a:2d:d5:c8:df:ab:
                    56:a7:67:f5:93:dc:67:0b:ac:5a:db:d7:9f:89:32:
                    be:19:0b:b0:42:d7:09:01:2b:d6:07:de:17:f9:85:
                    c6:0f:a3:2a:51:23:b8:a6:4c:75:f0:ec:a0:22:1d:
                    ae:ca:03:fc:54:ec:43:3c:1e:4a:3a:43:bb:3d:e7:
                    a7:ea:de:d4:04:81:b5:fc:32:c6:9d:b3:78:f6:37:
                    a0:1e:32:bc:ce:ea:68:16:de:6f:ce:70:6d:55:e3:
                    a3:8e:1c:0b:86:33:b5:82:92:3b:08:00:66:d5:72:
                    46:47:77:e6:06:04:99:ab:6b:de:09:0b:5a:40:e5:
                    1d:d5:c1:df:cf:45:bb:e3:54:36:c3:96:b3:36:5a:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4C:F5:4A:A3:18:A7:1E:C5:F4:3D:04:1D:FA:FB:E0:B8:23:1F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/885a81eb-a2d9-31e9-9eed-27d6c0cc8deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.crl

            X509v3 Authority Key Identifier:
                keyid:41:85:92:1A:28:4A:58:5E:31:D8:A5:10:23:34:62:66:20:80:49:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:78:84:ee:0a:88:c1:b6:28:93:09:21:0f:d7:33:82:ec:99:
         1f:49:88:48:b5:61:3a:2b:67:2c:4e:3b:5d:39:b2:29:5d:54:
         df:72:7b:aa:e2:d8:c2:ac:77:79:b8:38:a0:93:30:2f:c1:d2:
         8e:3a:ac:d9:47:ca:c4:0d:f7:10:79:98:86:85:af:91:40:ae:
         7b:2e:59:d4:87:48:c1:48:9c:89:07:44:f5:51:74:67:60:aa:
         06:b4:82:42:8b:75:7b:69:70:00:e9:2f:f3:3c:90:46:89:62:
         2f:5b:bd:e2:34:40:47:46:19:5b:10:ba:ef:78:06:bd:69:41:
         9f:45:4f:dc:9a:ae:97:59:f8:df:58:67:c2:3a:e9:aa:e4:a9:
         a7:8d:a7:b5:57:df:f5:e8:30:8e:97:c3:be:47:da:03:d3:28:
         b4:8d:2e:2e:dd:67:47:e3:b6:9d:a7:11:4d:37:3f:47:ab:a9:
         1b:23:0b:12:13:ae:88:79:33:6e:7d:ca:a2:2f:97:ca:b4:fc:
         9b:7e:2f:f4:95:22:50:7b:23:b2:3c:3e:6a:82:1c:1f:5e:10:
         2f:0a:2f:b8:d1:3b:38:05:01:c5:b5:d5:1e:0f:e7:43:e4:1f:
         2a:fb:4a:92:50:7a:0d:d4:ea:49:c6:eb:a4:c3:bb:1f:3b:0a:
         4d:a7:93:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:13:47 2025 by rpki-client