Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa
File:                     29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa (raw, json)
Hash identifier:          Om2VBp52xTYTRO8E94yzEuM9A5vfR2rVnNVY6aFxsVI=
Subject key identifier:   79:4B:ED:92:C2:96:9B:EF:62:20:EB:14:CB:48:79:C7:AF:61:56:0B
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F43285849A089D388EDE7985AEE9A9700
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     931
IP address blocks:        64.112.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d3:88:ed:e7:98:5a:ee:9a:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=d497f77a-af87-4825-bc73-a4bc216211d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:c5:f8:1e:cb:d6:67:8a:1e:dd:98:a5:55:
                    ff:e3:07:93:0e:e7:55:81:52:9d:29:da:2f:59:57:
                    d6:0f:eb:c5:57:cd:e5:94:c6:e7:94:8c:ad:0e:3e:
                    b0:2a:ab:46:9d:37:cb:17:86:55:cd:a7:36:5d:86:
                    99:9b:36:03:b0:0a:de:ad:63:30:59:47:d4:5e:49:
                    e3:a9:b0:eb:cf:06:f7:78:80:a9:28:61:a9:a1:f9:
                    80:cc:a1:b5:1e:08:cf:67:34:58:a1:c6:76:59:84:
                    5f:71:8c:16:fc:62:0c:c1:ac:49:63:f9:12:79:54:
                    9d:ef:01:cf:34:af:2c:2e:ed:48:af:15:94:fd:55:
                    80:d6:8d:b2:32:57:22:f7:42:61:6d:97:fc:69:76:
                    02:8c:5b:98:04:1f:04:b6:cb:ea:96:51:63:6d:66:
                    5d:64:75:55:63:38:29:cb:43:46:10:ff:0b:9d:09:
                    05:be:ae:84:d9:e5:9b:4c:b4:24:03:95:03:a2:d3:
                    9a:c1:29:b9:13:2e:62:1d:b4:f5:5e:07:b0:7c:84:
                    da:a5:f8:c3:4e:81:d5:aa:da:d7:33:5a:6b:e5:bc:
                    4f:94:96:6e:04:57:fb:b0:23:32:fd:63:a0:91:ab:
                    27:a7:1e:54:3a:f3:3f:b4:64:f4:c6:80:b9:22:6b:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4B:ED:92:C2:96:9B:EF:62:20:EB:14:CB:48:79:C7:AF:61:56:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a9:bf:2e:de:c8:58:d1:e5:32:62:98:44:1f:37:bc:c0:8e:
         93:f0:86:d0:12:86:17:99:c0:8d:e7:14:1a:a3:17:14:4e:ba:
         b8:78:ab:c3:9e:82:98:66:b1:42:8a:16:fe:d1:95:ef:f7:e4:
         3a:0c:be:ff:1e:2b:50:96:d8:43:f6:86:14:72:9b:87:43:f0:
         d7:7d:89:33:14:d2:6c:84:63:1c:d3:19:f1:59:1f:d2:90:64:
         ac:7e:98:8c:f5:45:83:88:83:f4:b8:6d:98:60:a5:0c:91:92:
         62:64:a5:ad:36:e1:4a:3e:dc:de:80:d5:a2:94:2f:e0:4a:83:
         f6:87:54:f6:19:bd:72:61:07:f1:e3:d0:f9:6e:93:92:0b:1c:
         60:71:8b:0f:82:09:e2:c1:c6:0e:99:b9:15:11:e8:a7:8e:b1:
         8a:54:ec:98:ff:ea:2b:5c:9b:92:d7:40:d4:d6:02:0f:86:8b:
         47:fc:ef:c2:f9:22:b1:f0:9a:48:fd:4f:79:28:d8:8c:0d:c1:
         b4:cb:27:e4:b1:a0:65:4c:2c:d7:c6:4d:96:12:96:23:02:d3:
         85:12:95:a7:c9:ce:da:8e:7f:7d:52:91:77:21:37:39:f9:0e:
         77:7b:23:6c:b7:d2:8b:95:ac:c1:ed:bb:68:59:3f:1e:ac:1d:
         b0:20:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:56:15 2025 by rpki-client