Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/37c7825f-f0e6-3c91-8a84-d42b3e87cee1.roa
File:                     37c7825f-f0e6-3c91-8a84-d42b3e87cee1.roa (raw, json)
Hash identifier:          SAHBoUbPj2THu+nEVXBFya6pB8OOga70l9B6xc30ob8=
Subject key identifier:   26:49:E8:9F:AD:DA:D8:E8:F2:DA:F2:5A:4A:7D:2B:45:52:93:A0:B8
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F43285849A784C332A6F5459D6AF28A00
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/37c7825f-f0e6-3c91-8a84-d42b3e87cee1.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     46261
IP address blocks:        64.79.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c3:32:a6:f5:45:9d:6a:f2:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=cfb377d5-493b-49b7-ad29-84d10a6caf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f8:19:b6:de:9b:d8:7d:6d:8a:64:2d:5f:50:
                    12:41:4c:7f:fc:97:7e:b8:97:48:2d:26:96:90:5c:
                    29:ee:69:e2:63:7f:99:64:71:2a:fc:5f:fa:7b:57:
                    a1:c4:a0:f1:49:0b:e7:e2:aa:86:90:5d:77:b5:5f:
                    5f:f7:03:7a:5e:24:ed:a3:25:65:c4:9c:55:9d:c1:
                    d3:e6:a8:9f:26:fa:21:84:a4:ee:85:28:17:e9:d2:
                    fe:f4:ef:d4:9c:75:37:7a:6d:83:42:c3:c4:95:c2:
                    c4:89:e1:7b:ca:59:1f:73:f5:88:c6:d6:69:f7:54:
                    57:c8:47:8f:8b:10:a1:cc:b1:3d:38:9f:2b:a5:2c:
                    3f:59:e2:aa:01:08:e7:b0:de:b6:99:3d:29:94:0d:
                    3d:ff:57:d5:9b:30:af:84:8a:3a:a7:7b:3f:98:07:
                    1c:d4:d6:1d:56:c7:14:a5:f5:5a:35:ba:d2:b5:d5:
                    b5:9d:5c:17:5c:04:a8:6a:72:92:90:73:51:14:63:
                    0d:8f:5f:4d:1e:8e:63:1a:d8:86:68:78:53:df:e2:
                    93:44:ca:74:c7:57:0d:e7:6a:92:5d:b5:8e:62:f3:
                    8e:80:5b:aa:8f:f3:bd:7b:7b:a8:0f:a3:01:15:b8:
                    98:7e:ed:75:24:b0:ae:a5:dc:d1:92:7a:06:08:13:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:49:E8:9F:AD:DA:D8:E8:F2:DA:F2:5A:4A:7D:2B:45:52:93:A0:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/37c7825f-f0e6-3c91-8a84-d42b3e87cee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:96:c0:1e:fa:bd:42:5f:0d:7d:c7:44:71:ff:b8:3c:bb:4e:
         1f:a2:f4:79:bd:6b:27:07:b1:c1:c2:6a:5b:df:a2:91:7b:75:
         38:95:e0:c1:cc:9d:b4:33:87:68:7d:3c:c5:f9:93:62:0f:d4:
         9b:f4:f7:43:e7:a2:73:f7:be:29:cd:99:c8:5f:89:16:c5:72:
         c5:6c:fa:0e:e9:70:37:53:4c:f9:c3:5b:65:12:c4:88:4f:0b:
         89:28:92:69:bd:f6:67:15:3e:3e:8d:78:90:ff:0c:b1:ca:f4:
         ae:34:96:4f:c5:dd:59:a8:9a:ca:b0:f3:f0:04:10:c6:d4:b5:
         62:58:53:18:34:31:5c:16:50:72:b8:72:f7:42:60:c7:ae:35:
         db:42:3b:f2:40:d8:8d:9d:b2:ec:55:63:a5:e2:3b:1b:74:10:
         39:91:1e:13:a5:33:cb:80:3e:c1:dc:fa:51:8c:e8:22:f8:a8:
         8d:12:51:1d:7b:81:09:c8:63:19:8a:6d:d2:1d:3d:16:1a:3c:
         aa:34:69:8e:f8:be:82:80:cc:39:f8:53:62:0d:87:25:d3:62:
         fc:4b:fa:62:e8:37:89:f4:78:8b:cd:65:16:89:05:25:2d:63:
         c5:81:9d:4c:6f:09:9c:09:c0:17:07:53:d9:57:9c:34:1a:06:
         4d:30:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:45 2025 by rpki-client