Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa
File:                     d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa (raw, json)
Hash identifier:          o9EpURHymbOU5Bl7OW8MIQufM8znf5Jh1mIb69vygtM=
Subject key identifier:   0A:6C:D4:32:8F:24:CC:13:DD:E3:05:4E:45:8D:EC:6A:95:C2:59:27
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F432858495C243FEE11C2F26FBCF74980
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        64.7.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3f:ee:11:c2:f2:6f:bc:f7:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=8bf399c3-2acf-4d16-b11f-a82452c4f4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:a4:cb:fb:ef:8e:59:f5:b1:61:8c:dd:d9:
                    32:0c:50:05:0c:1c:9c:d4:69:82:59:6a:4d:40:09:
                    ef:d5:46:99:1c:3e:91:15:31:fe:71:61:95:6b:75:
                    e1:50:34:e3:56:93:ed:59:06:1a:a2:fa:8e:d1:8d:
                    75:03:30:72:8a:f1:ad:09:51:1c:62:bd:12:bf:cb:
                    41:3c:be:88:a9:f1:56:dc:51:e7:cf:9d:26:c2:fe:
                    b9:33:13:95:1c:5c:86:13:1f:e9:50:8f:b5:25:64:
                    bd:fc:02:1e:c0:8c:57:fe:7e:0e:7a:d4:06:fd:e4:
                    da:dd:a6:66:00:c3:ac:fd:41:c6:3e:3f:91:8f:1c:
                    16:60:93:d1:23:f6:64:6c:6b:fd:39:dc:73:4e:0f:
                    b0:a8:e8:f2:50:4f:32:c3:dc:52:d9:fb:33:1b:2f:
                    97:cf:33:a2:b7:f2:5c:82:b9:3c:45:7f:5a:23:1f:
                    68:60:6c:c2:a0:c5:db:51:2b:13:32:da:32:4a:4e:
                    b0:33:fd:14:30:d8:8f:79:30:36:cb:19:d7:95:63:
                    d6:9f:ce:02:41:c7:f8:c9:03:98:4d:95:73:67:8e:
                    c3:e3:a5:9c:6d:3d:b7:11:02:68:24:37:c2:f6:b2:
                    bf:c4:0e:91:06:38:1d:63:02:74:2a:52:51:54:11:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6C:D4:32:8F:24:CC:13:DD:E3:05:4E:45:8D:EC:6A:95:C2:59:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:04:24:c5:4e:39:a1:04:ca:fc:66:ad:30:ca:d9:00:6c:59:
         c5:ef:5f:96:e4:6e:b5:28:e3:8a:16:57:34:7e:03:b6:0c:5e:
         3c:8c:43:98:0a:eb:6b:bc:a1:06:7b:fa:e0:a9:dc:42:79:f9:
         19:90:f1:dd:5c:65:55:8e:9d:a4:cc:19:9c:b1:79:93:e6:d3:
         00:e9:27:ec:95:bc:6c:2c:4d:71:52:35:15:85:8f:6c:a0:e0:
         80:36:4f:38:d8:d0:5e:a0:54:72:3b:05:46:9e:bb:7e:98:98:
         68:0d:77:c4:58:8b:44:83:5e:af:16:10:48:29:73:3c:90:c1:
         24:f1:60:fb:59:e4:a4:5b:5a:dc:51:e7:12:40:1c:9e:c5:1a:
         ea:65:10:f1:4d:4f:9e:9a:a5:9a:e5:6c:2f:2e:a4:c7:96:53:
         b9:27:9f:e2:94:06:95:1b:2b:62:93:00:2f:27:00:c3:55:d8:
         cd:be:35:a1:da:4c:89:c3:7b:1c:d6:5b:b0:d1:fe:58:37:42:
         a5:cd:1b:a3:11:0f:ee:9c:c4:42:bd:2f:df:97:27:56:4b:ce:
         d3:a7:12:a4:7d:90:97:bd:9b:e1:82:cb:fd:00:02:42:fb:56:
         f4:ff:10:af:b7:c1:f6:98:9e:47:a8:5b:cb:17:62:1e:93:01:
         f9:ba:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:45:46 2025 by rpki-client