Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/9c198144-1f7d-33de-8f7a-7ad2d0a793b9.roa
File:                     9c198144-1f7d-33de-8f7a-7ad2d0a793b9.roa (raw, json)
Hash identifier:          viILsylbFOP77fzD5Tqmy+IqUhDV1yin+0+uI7DITn0=
Subject key identifier:   17:32:0B:F2:B9:25:0D:F0:76:AA:80:8D:10:47:52:46:53:E3:73:31
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F43285848EC969A35CEE80F2F3AB0F200
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/9c198144-1f7d-33de-8f7a-7ad2d0a793b9.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     148996
IP address blocks:        64.112.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:9a:35:ce:e8:0f:2f:3a:b0:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=0ec51b61-ac98-4e2f-8a25-83afaf1ab839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:8d:13:16:21:24:a5:33:ea:00:54:5a:2b:
                    f2:c1:dd:af:85:b1:ec:46:38:5d:02:b8:5f:60:5b:
                    cd:e7:47:19:76:53:ee:cd:b9:ee:66:f2:5a:18:81:
                    ee:fc:c8:dd:65:58:55:c3:96:ff:14:92:94:5a:dd:
                    b0:e5:61:58:e6:d9:06:7f:f5:fa:2c:b5:a8:f6:6c:
                    dd:c0:28:58:1a:f6:b6:b7:b0:df:20:b7:8b:27:20:
                    dd:49:fa:a5:6c:43:ab:54:ba:c1:a4:3a:f2:d8:48:
                    1f:1f:b5:63:fd:08:e0:37:d4:9b:b1:99:7a:b8:4e:
                    48:75:d2:7a:9c:52:11:d9:73:80:51:dc:a9:fe:e8:
                    e6:49:b9:03:5c:aa:75:8b:3f:53:44:16:ce:e2:e8:
                    57:d7:57:2c:e5:b9:39:db:ea:05:b3:e5:dc:6d:cc:
                    2c:98:b9:7d:34:7c:90:9c:37:d2:db:9d:2f:09:a4:
                    3d:4f:9a:67:cd:79:e9:6f:b6:56:3e:25:8e:d0:5a:
                    89:8b:4f:c3:e7:90:51:65:f6:fc:7d:f3:f7:4e:b3:
                    fd:e2:fd:8d:b4:e2:99:d1:6e:24:83:f5:6e:17:34:
                    93:7d:6d:f4:09:be:ab:10:4e:f6:35:9f:2d:5a:dd:
                    20:f2:b7:a4:5a:70:80:bc:70:6e:21:e4:a8:07:d9:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:32:0B:F2:B9:25:0D:F0:76:AA:80:8D:10:47:52:46:53:E3:73:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/9c198144-1f7d-33de-8f7a-7ad2d0a793b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:4c:1a:bd:9b:8a:70:75:bf:55:56:9d:b6:dd:84:4d:58:
         9b:a8:45:05:64:19:8a:50:66:f8:24:47:0b:2f:6b:e3:80:e0:
         ce:7c:16:d8:07:c3:e6:20:15:de:bb:65:36:85:dc:9d:cc:35:
         f5:bb:c6:42:08:d2:a2:79:14:40:9b:6c:bc:5b:44:2b:43:27:
         1c:fb:24:0e:b8:dd:77:6a:c2:dc:7d:34:48:05:6f:f1:8d:4c:
         30:4d:ba:e9:0e:ce:2e:08:1b:1e:47:a3:91:3a:0e:f0:97:0d:
         25:88:3a:1d:12:c3:72:f2:85:aa:6d:a2:9f:26:ff:e5:70:c8:
         90:6e:d6:da:03:30:1c:3b:89:c1:ab:8d:27:65:bf:f6:c1:d0:
         82:57:da:d8:57:2b:b2:98:68:67:5c:42:69:63:e7:d0:fe:05:
         c4:89:f2:86:2b:42:0e:c7:f6:18:ea:a5:cb:6d:2a:81:a3:6b:
         64:c0:57:92:63:3d:22:b9:87:40:c9:62:d3:5e:d1:5e:e8:e4:
         3d:4f:6a:81:6f:5b:05:8f:a0:f0:15:e6:c2:d2:c0:e3:ca:34:
         48:ca:d2:64:c7:b9:36:60:a5:20:70:28:f2:b5:9c:b4:bd:16:
         3d:d5:55:66:4e:c0:d6:64:ac:79:85:da:b1:0d:ca:47:26:59:
         b6:48:2e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:10:35 2025 by rpki-client