Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/627c057f-f967-3505-9f43-627a8af01c80.roa
File:                     627c057f-f967-3505-9f43-627a8af01c80.roa (raw, json)
Hash identifier:          95L5CPMjpqd5KC32AhMO2dY0sHpSM1L8qYqjtLIH6ts=
Subject key identifier:   94:C7:14:B2:68:48:1D:93:76:63:43:1C:05:74:39:A1:C8:19:FD:73
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F43285849A089D3AF6B58723117B18500
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/627c057f-f967-3505-9f43-627a8af01c80.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     931
IP address blocks:        64.112.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d3:af:6b:58:72:31:17:b1:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=912946a6-b622-4965-b3c5-b98fb598c6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:a9:d1:90:98:dc:e8:8f:2d:be:63:a2:71:
                    80:f9:3a:31:25:4a:2d:c3:6a:ac:9f:ab:6e:6d:e5:
                    63:ea:01:a8:b2:83:f1:fe:95:33:2a:ac:5b:50:a8:
                    27:24:99:49:fc:ae:b3:48:a4:25:15:5c:24:3e:1f:
                    cb:33:af:15:57:dc:13:56:6c:b6:17:b5:92:9c:25:
                    e6:c1:ab:d1:27:23:41:94:e6:a0:c1:a0:73:2d:30:
                    8f:16:a4:f1:4c:f3:33:ff:12:64:dc:1e:88:78:bf:
                    9f:0e:8f:5c:45:7a:50:f0:e0:b5:20:ad:c7:f1:8e:
                    92:b5:14:f0:09:d5:64:ed:a1:a5:3d:fa:7d:16:49:
                    9a:c8:55:9b:0b:3b:38:b3:11:00:d8:93:60:31:2e:
                    30:f8:f6:a3:77:f7:9d:b1:7b:c4:08:b9:88:a8:de:
                    ec:f2:4a:a0:a7:65:63:39:2c:49:74:38:08:57:b2:
                    a0:23:f0:b9:72:39:71:ac:c6:91:cc:65:99:f1:9e:
                    22:f4:07:09:f5:5b:c4:1f:96:0a:6b:ac:74:2f:02:
                    4c:9b:a7:2f:aa:67:06:07:e2:e6:11:6a:96:97:5b:
                    48:8e:6c:3e:9c:d2:d1:11:79:44:9a:17:4d:c5:1e:
                    ce:ae:2e:88:48:4c:d3:c6:08:46:a2:97:33:04:77:
                    4b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:14:B2:68:48:1D:93:76:63:43:1C:05:74:39:A1:C8:19:FD:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/627c057f-f967-3505-9f43-627a8af01c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:89:e2:5c:65:e7:73:4d:81:70:9d:28:5c:3a:72:70:8a:
         36:25:ce:98:26:0b:06:53:f4:f1:62:46:8e:6b:f1:37:75:30:
         33:2e:cf:2a:56:c7:87:bd:54:3b:f8:c8:62:d9:52:55:8a:01:
         f2:82:89:02:ea:05:f1:d9:54:26:64:09:38:65:eb:c8:f0:20:
         ca:f9:7e:5f:aa:7b:fa:2e:1c:2c:5c:19:d1:24:a2:8f:b5:30:
         79:de:f8:e6:f2:5b:ee:23:2d:40:bc:f5:4c:59:0e:7a:1f:73:
         12:5b:69:87:e6:87:04:e9:e4:91:4d:18:e9:65:72:ed:b6:cc:
         8d:ff:e4:6d:f6:ee:15:db:eb:fa:da:b6:fa:31:26:bf:23:7c:
         87:9f:93:ad:ac:85:6d:6d:5e:af:51:53:46:0e:3b:b5:12:6c:
         46:1d:2e:ab:e8:ff:bf:46:6a:ae:21:40:b5:f5:e1:39:28:55:
         b7:ed:50:6c:d7:69:1c:83:33:06:15:0e:cc:db:4c:32:d2:2e:
         84:4f:18:17:35:39:b2:1f:15:68:1b:d1:f3:4b:09:75:78:22:
         e0:0f:c4:ba:3f:df:64:0a:e7:4f:a5:7a:46:22:48:df:20:a7:
         a2:5d:d1:ae:e5:4b:e9:52:7a:d2:36:1c:70:d5:ce:8c:eb:0c:
         e9:25:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:35 2025 by rpki-client