Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/064a5c52-51e9-3a09-8b2c-8d86e42bdb8d.roa
File:                     064a5c52-51e9-3a09-8b2c-8d86e42bdb8d.roa (raw, json)
Hash identifier:          QdIhwfhqjvVK8oQNz8FmN7dqSK+3o03rLNkDTnfOIA0=
Subject key identifier:   68:5F:A9:F6:02:9D:F4:08:8C:5B:AE:5E:CC:F2:F3:0F:E3:36:85:51
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F432858498FC9BFC534ED1BFDB4C0F400
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/064a5c52-51e9-3a09-8b2c-8d86e42bdb8d.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     2055
IP address blocks:        76.165.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:bf:c5:34:ed:1b:fd:b4:c0:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=86877307-ab83-449d-b444-f3f58b6f67f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:cf:e9:14:53:9d:0e:32:d4:be:dc:d1:59:
                    05:72:fc:c5:73:dd:b3:c3:b6:5e:e5:46:75:46:b8:
                    32:98:58:81:77:4b:4f:eb:5d:b7:46:84:09:d7:ac:
                    06:30:37:7c:06:4f:0d:9a:3c:fa:92:86:f3:9c:69:
                    9d:4f:95:2e:81:d5:ec:87:63:c8:40:20:12:d6:e8:
                    8a:e8:6f:24:fb:18:ae:5e:0c:66:be:16:f4:81:71:
                    d9:70:0d:93:b3:d5:e2:d7:ad:c9:fa:ec:5f:86:c8:
                    f8:09:cb:12:86:40:0c:47:6a:30:31:dd:94:1d:d2:
                    e3:1e:18:6e:a2:8e:87:4d:10:ff:6c:14:1e:c4:57:
                    37:66:71:56:e2:97:e0:9f:a6:03:b9:c0:11:e7:de:
                    07:8b:75:e0:57:2f:f9:aa:7d:f9:98:88:3c:f7:2e:
                    7e:fc:e3:f9:e6:b6:e5:25:c0:0a:42:8b:78:29:13:
                    c7:48:9d:8b:48:aa:4b:b7:82:90:67:16:48:82:7e:
                    49:a0:89:91:a3:ae:01:93:14:7d:d1:2a:0f:90:42:
                    b6:be:af:27:21:6c:fb:f2:b6:78:c4:02:12:54:13:
                    e1:45:a2:61:bd:db:74:25:61:54:50:6d:7f:49:e4:
                    cb:f5:e8:75:3e:36:62:65:b9:d3:86:c6:1f:23:cc:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5F:A9:F6:02:9D:F4:08:8C:5B:AE:5E:CC:F2:F3:0F:E3:36:85:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/064a5c52-51e9-3a09-8b2c-8d86e42bdb8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.165.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:73:74:27:a7:b1:48:7b:98:37:1a:0f:89:35:4c:7d:6c:9e:
         34:ba:c4:22:9a:33:18:6e:4c:c8:55:e1:76:1f:d9:ef:e7:e1:
         08:ab:69:1b:c1:ce:07:95:bd:2c:72:6f:d7:3b:a2:8b:60:46:
         bf:66:44:b6:fe:3e:a3:df:53:af:ce:55:5c:43:e3:47:65:58:
         82:b2:f0:6f:60:8d:da:67:29:92:94:84:60:32:6f:db:8d:31:
         08:1e:80:0b:33:8e:ac:47:84:37:c6:d4:f7:33:bc:fa:45:9f:
         23:60:e2:8d:f1:ce:b9:67:42:0a:73:9b:7e:8b:1d:9d:f0:1f:
         ea:d0:3a:dd:78:cc:de:b7:32:d5:b3:57:5d:8d:19:f2:76:9e:
         fa:a2:6b:a9:79:11:ee:81:8b:4e:41:dd:6a:b5:f8:7d:0b:e0:
         ef:b8:84:e1:4a:ec:e2:06:66:53:d2:ae:01:6a:52:28:be:ff:
         22:da:81:3d:aa:91:56:c8:37:03:e2:a2:f2:c9:a3:29:3d:75:
         f2:fd:4e:55:06:93:2c:31:14:95:b3:86:ad:e6:6d:a2:ae:27:
         54:6a:39:3e:fe:ac:ac:eb:bb:9b:33:f4:c7:73:6a:bf:2b:f3:
         f4:98:10:f0:59:9d:94:31:55:4f:3c:9c:7f:43:01:45:56:df:
         bb:f3:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:09:39 2025 by rpki-client