Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d19a2039-b74c-3bf1-9ac7-a23b83f8be87.roa
File:                     d19a2039-b74c-3bf1-9ac7-a23b83f8be87.roa (raw, json)
Hash identifier:          nfsAg0Cu5lM0CHJRKT2JTgw02KNXwGbi7KQK6zp9Q1k=
Subject key identifier:   6C:38:6E:2C:AC:6F:C7:77:A9:13:6A:7A:A8:44:69:62:EB:DA:DB:00
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858498CFF25FD02D2F83519B99440
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d19a2039-b74c-3bf1-9ac7-a23b83f8be87.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     62957
IP address blocks:        64.147.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:25:fd:02:d2:f8:35:19:b9:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=7663c1e3-9a70-4285-a7a0-cc79b9c5c26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:94:b1:e5:94:0a:0a:42:be:a5:45:51:18:
                    69:9d:4b:12:29:16:56:30:b6:cd:da:8f:d8:5d:a7:
                    4d:36:d0:b0:62:36:3e:ad:63:2c:fc:6b:6e:31:c7:
                    b4:79:da:08:be:12:af:81:88:a5:ce:6b:ca:22:a8:
                    94:92:0e:b9:ab:3f:30:5d:c4:c1:8c:ab:52:a9:fe:
                    54:1a:3a:df:6b:fe:01:c3:54:71:c3:4a:3b:58:a9:
                    dd:c1:13:2a:73:49:a7:71:e5:31:61:e9:5d:07:40:
                    5b:ec:71:1e:ce:24:4a:22:99:9f:14:de:aa:a6:aa:
                    88:31:ff:ed:76:ef:58:a1:52:29:7d:90:fb:85:c8:
                    5b:6c:b1:c4:42:56:a0:3d:53:2e:82:e6:16:df:1a:
                    da:5c:6e:54:d0:79:db:6f:01:a5:f7:3a:ea:7d:22:
                    da:eb:22:6f:03:fb:de:e2:57:5a:c6:40:d8:33:30:
                    d9:a8:2c:b8:42:b5:86:82:9f:4f:60:03:57:cb:f3:
                    d4:74:5e:2f:41:62:cd:f4:2f:2d:44:20:71:c6:20:
                    79:e9:d1:3b:e6:76:8a:c2:f6:5e:1e:c8:dd:50:a4:
                    eb:08:13:d4:4a:9f:1a:21:98:7f:9c:ca:3a:87:86:
                    96:da:6c:19:61:16:f4:57:bb:1f:c4:b3:9f:5d:b4:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:38:6E:2C:AC:6F:C7:77:A9:13:6A:7A:A8:44:69:62:EB:DA:DB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d19a2039-b74c-3bf1-9ac7-a23b83f8be87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.147.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:74:de:a8:eb:f4:db:ef:ce:1f:28:c2:ab:4b:ef:20:2b:
         25:0d:ba:50:21:34:9e:1c:2b:99:76:50:c5:79:e6:16:4a:21:
         e7:c1:6c:52:43:53:89:28:7c:83:e7:83:3b:04:f7:2f:38:e9:
         cc:a6:e1:fc:a8:31:44:49:42:a4:a6:0d:7b:0d:56:ea:a1:f1:
         8f:8a:8e:de:11:bf:a0:66:99:bf:6a:8e:fa:0d:d4:ac:81:76:
         5f:5d:b0:61:9f:75:c3:fc:ec:b0:12:c5:2e:67:df:30:46:2f:
         58:d4:50:c7:0d:05:71:c9:cf:05:4c:a5:d7:c4:36:c3:03:a5:
         a5:01:00:de:f8:d5:82:82:2c:46:5b:75:90:2d:d9:0e:f1:04:
         cc:2a:3c:6f:bb:f7:a0:fd:58:44:ad:d6:4f:50:d3:33:1f:de:
         a2:52:9f:04:d4:f6:de:fa:06:80:30:46:cd:bf:09:cd:52:18:
         6e:b9:49:b6:b7:fb:de:e4:71:c1:05:80:a0:9e:9a:78:7f:72:
         31:7b:9d:c0:f6:d9:52:e5:ac:ce:c5:0c:f5:12:6d:eb:ab:ea:
         4b:b4:ca:d5:76:0c:c8:17:48:ac:18:cf:c5:86:db:41:ba:2e:
         7c:2d:ff:8f:89:fc:9f:cf:6a:c7:5a:67:51:d5:3c:72:0b:1b:
         69:31:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:40 2025 by rpki-client