Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/57de6bd1-eb2c-3268-9d16-f8cfe4845767.roa
File:                     57de6bd1-eb2c-3268-9d16-f8cfe4845767.roa (raw, json)
Hash identifier:          AJfJQb6237T3RaegOjq/pF+/Ancf0Vx3aYpyKc2h+AI=
Subject key identifier:   BF:2D:87:78:EF:9F:A1:9B:B1:4E:78:66:F5:23:01:1F:3B:A0:B2:23
Certificate issuer:       /CN=f8838580-1598-45e5-8353-b551ae78b110
Certificate serial:       010D0C9F43285848F92695F9DB462125BC210E00
Authority key identifier: DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/57de6bd1-eb2c-3268-9d16-f8cfe4845767.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        64.190.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:95:f9:db:46:21:25:bc:21:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8838580-1598-45e5-8353-b551ae78b110
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=6f19f35c-0ad9-4de7-8fc3-a6934ca3c87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e0:69:89:ad:07:d9:25:28:f9:49:a0:81:38:
                    e0:e1:e7:8a:76:74:e3:9a:ad:e8:be:2a:13:6d:de:
                    d3:be:29:f9:72:82:bc:2d:8b:ac:d2:6b:9c:4a:d6:
                    1c:70:75:0f:1d:d3:76:f3:32:02:8e:37:29:41:f5:
                    dc:c1:e1:85:1e:d9:02:ae:0e:1c:21:96:c7:c1:a5:
                    e3:43:ef:b2:03:57:4d:3d:b7:88:2d:57:4c:f6:fb:
                    aa:80:d1:27:af:8a:a5:ee:97:ad:d8:6f:71:73:7f:
                    7b:96:96:a0:f1:7c:b5:52:19:e3:eb:34:02:81:e7:
                    40:a1:a3:47:68:b0:bc:83:4b:d2:1a:2b:e8:12:35:
                    0a:16:a5:81:f0:eb:ec:ae:53:1c:c7:93:c3:25:3a:
                    f3:20:a5:ee:04:47:38:22:12:ac:11:a4:c4:0e:07:
                    4a:ca:0b:8b:ef:24:c0:6c:33:61:e7:49:2d:71:7a:
                    d3:59:e2:d4:3b:c1:72:01:4e:0b:3f:11:f6:80:b1:
                    e1:4a:20:f3:b1:5a:67:82:89:2c:ea:d5:e4:90:8c:
                    11:c6:17:76:ab:7f:17:84:23:90:9d:25:ca:85:bd:
                    2c:b7:5e:11:7f:fc:37:18:47:01:62:bf:83:e4:5f:
                    64:51:97:e2:f1:e3:18:ba:cd:41:6b:c2:d8:76:89:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2D:87:78:EF:9F:A1:9B:B1:4E:78:66:F5:23:01:1F:3B:A0:B2:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/57de6bd1-eb2c-3268-9d16-f8cfe4845767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl

            X509v3 Authority Key Identifier:
                keyid:DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:01:b4:cd:80:80:de:62:f6:e0:2a:94:b5:c0:f5:92:54:48:
         5f:51:cc:26:c5:bd:ea:09:88:71:79:10:2f:ba:38:7e:1f:ff:
         20:36:87:30:e3:d6:35:42:d8:f9:b7:83:17:32:57:4f:fb:e1:
         f0:21:0f:e3:00:88:55:1d:1b:6e:b7:f2:49:96:93:cd:5e:3a:
         ed:51:03:4e:19:cb:76:f8:6e:71:df:de:84:6d:aa:7b:f9:bf:
         58:a2:09:c1:0e:e1:00:e8:54:29:e2:c4:91:09:8e:a4:22:17:
         12:88:fe:c6:c0:1b:8b:39:dc:ba:0f:2b:01:fb:64:5c:cf:ae:
         e7:04:4f:4e:57:f1:e6:c0:1f:47:42:39:f4:84:91:34:4a:fd:
         6d:92:31:29:f2:6d:dc:f1:6a:23:4b:88:bc:f6:7d:fd:83:f2:
         35:3b:b4:57:34:35:de:db:4c:1b:3d:2b:6a:ce:1f:03:28:d5:
         d3:79:bf:61:7d:19:51:13:1e:1a:25:44:26:12:73:cb:06:95:
         61:35:88:04:2e:d9:73:ad:94:e2:f0:98:4c:17:4f:09:e4:2f:
         d8:62:43:c7:f9:73:c9:c0:66:ac:b6:6d:9b:90:73:f1:d3:7f:
         13:95:36:83:47:46:f3:fa:b1:76:c2:2a:22:4e:81:12:fc:e5:
         63:a4:2e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:33:54 2025 by rpki-client