Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/53439614-12e1-3c60-873a-f162a78df0cf.roa
File:                     53439614-12e1-3c60-873a-f162a78df0cf.roa (raw, json)
Hash identifier:          Yq7kY/CK0hTaRRE2gF9i/ZLjhl/uSCRd1fF5f67OKKE=
Subject key identifier:   23:29:96:D6:DE:A6:98:44:76:77:E1:0A:97:B4:CC:0A:1E:CE:2E:DA
Certificate issuer:       /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial:       010D0C9F4328584957F40C56C625A05E03BF08E0
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/53439614-12e1-3c60-873a-f162a78df0cf.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        64.42.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:0c:56:c6:25:a0:5e:03:bf:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=a4b12316-62af-4924-86e0-d6faed0bf13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:54:d6:54:1f:6b:1d:fe:c0:b0:df:d4:af:
                    00:3e:64:1c:12:30:7c:6d:d6:96:e0:e3:e8:75:34:
                    8d:a1:ad:6e:09:bb:4b:fb:33:c3:65:2d:87:65:34:
                    61:04:7e:5d:2f:2f:63:23:3d:1a:ed:9a:30:fa:06:
                    d3:c2:1b:37:77:3e:be:fd:a7:b6:7d:d9:01:1f:ac:
                    5f:c4:ec:f2:7c:b1:6d:0c:ee:c3:e8:75:5f:9b:6e:
                    9a:7c:50:25:6f:7c:76:4c:07:c1:c9:12:cd:82:b7:
                    0f:e6:4f:56:73:6c:42:f2:96:fb:38:b0:2e:94:c9:
                    bd:6e:3e:2b:c2:ef:ea:00:ad:2d:d3:d7:49:89:91:
                    ce:57:c3:46:cb:76:e1:53:ea:49:3c:9d:60:26:b9:
                    7d:c0:56:db:98:d1:ee:77:c0:2b:5e:71:fc:36:49:
                    1d:cf:db:40:34:b3:65:a8:cd:07:2b:9f:88:85:90:
                    85:71:e0:9d:84:21:01:db:55:7a:77:9c:28:be:41:
                    26:e7:89:60:41:ec:94:0a:3b:78:b2:bc:76:5b:90:
                    9d:6a:e5:2b:74:ac:e1:df:bb:b2:5a:26:d6:b4:28:
                    47:45:53:e5:f8:34:0d:c7:22:bc:a3:a8:82:27:3c:
                    6e:54:8c:e7:0b:8a:30:09:4d:74:bc:69:c0:10:3b:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:29:96:D6:DE:A6:98:44:76:77:E1:0A:97:B4:CC:0A:1E:CE:2E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/53439614-12e1-3c60-873a-f162a78df0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl

            X509v3 Authority Key Identifier:
                keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6f:ef:b4:43:ef:22:b5:46:47:e6:53:88:9d:0c:a3:fb:df:
         94:cd:e0:6f:af:a2:e5:63:f6:51:13:6e:cb:99:ae:16:e0:c9:
         44:b3:74:eb:02:74:1f:8e:e3:16:14:f9:c6:fe:b1:10:f9:14:
         7f:26:5a:42:1f:e8:f0:a3:16:de:91:bb:ad:37:74:d5:92:02:
         b3:bf:97:d1:7a:47:56:9e:a5:37:29:25:94:d6:89:c6:f8:9d:
         c9:ee:59:7c:18:83:ff:98:3a:c7:4e:a3:ea:c8:27:6c:80:43:
         d4:39:e8:39:c1:ba:2e:8c:13:1f:07:3a:c7:d2:3f:a3:73:59:
         e4:32:f2:d2:61:9f:15:26:5a:26:8f:ac:b1:9f:cb:72:7f:64:
         0f:f9:84:c2:62:51:82:03:5a:d6:07:2d:9d:4e:e8:fd:61:b3:
         ef:28:9d:a7:19:1a:05:10:9c:77:d0:3b:4d:cb:4f:f5:97:b5:
         fb:d8:a9:6a:c6:0d:0d:aa:a3:c8:2c:3f:d4:39:d6:28:f6:bc:
         1c:4f:af:79:c4:ba:18:ee:77:dd:75:5a:1d:20:d7:94:d3:5f:
         ad:36:2a:d6:95:61:ea:bb:d3:a4:84:81:5b:53:e2:e9:d7:15:
         6e:0b:22:76:e5:bc:35:76:e4:cd:85:03:08:87:bd:24:f0:08:
         fa:df:70:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:57:24 2025 by rpki-client