Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/79564ee4-eb18-3835-b2f9-d01b825b8702.roa
File:                     79564ee4-eb18-3835-b2f9-d01b825b8702.roa (raw, json)
Hash identifier:          34bT/Ku9mKn7qobiE6815v2I5P0zDZXT+090aVonX5M=
Subject key identifier:   99:0D:DA:74:DC:6B:41:98:70:5B:4A:9D:F6:0A:B3:8B:52:39:73:17
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A78525409A8C96FF570ACBE0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/79564ee4-eb18-3835-b2f9-d01b825b8702.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        64.9.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:25:40:9a:8c:96:ff:57:0a:cb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=f6d84b65-bd0a-4e90-88ec-2e5605c4fdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:26:82:19:0a:3c:c7:5c:67:aa:fc:83:52:e3:
                    b4:48:73:48:ba:92:c6:16:e4:dc:4b:97:02:d4:fc:
                    7b:8f:51:21:11:b2:c6:ab:9d:b0:b1:3b:5d:c0:0e:
                    dd:4d:25:7a:0f:38:33:e6:1b:51:01:77:1f:4d:7a:
                    2e:0f:07:bc:11:91:91:53:c1:93:8f:ac:11:29:d2:
                    01:32:31:21:5a:0c:c8:1d:41:91:70:71:5a:4d:49:
                    3d:4f:a1:06:9c:a9:d9:7e:31:9c:8b:f6:02:a6:1b:
                    33:19:29:59:5f:b8:fa:86:43:eb:fe:e8:ce:a8:80:
                    20:e2:53:29:5f:34:64:6c:74:d7:cb:ae:e4:f7:8d:
                    5d:36:7e:2b:d3:c8:6e:70:b9:46:d1:0c:a5:63:1d:
                    d0:17:9f:a0:e6:52:bd:40:58:50:ae:52:1e:38:ec:
                    13:37:00:d7:8d:dd:f1:ae:61:3f:40:a3:1b:59:60:
                    43:49:db:07:fc:ec:6f:aa:55:0e:2c:3d:65:96:d9:
                    63:ee:b7:b2:0b:74:36:e5:a6:37:59:26:d2:dc:7a:
                    75:e5:4a:5f:e3:df:ed:86:1a:4b:a5:70:f1:5d:84:
                    25:46:df:38:b7:0d:d7:f9:c2:80:4b:cb:e0:df:5f:
                    24:22:6a:da:49:7a:0b:78:62:c4:92:ee:af:12:54:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0D:DA:74:DC:6B:41:98:70:5B:4A:9D:F6:0A:B3:8B:52:39:73:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/79564ee4-eb18-3835-b2f9-d01b825b8702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:55:59:71:6b:2e:b4:8d:b8:6e:2b:40:08:b1:61:2b:62:43:
         cd:b8:5d:02:f1:e5:f4:d0:54:c2:41:10:e5:c1:06:10:e5:c4:
         f3:90:fe:6f:5d:f2:d8:a8:07:d2:77:7c:8b:5f:8b:23:e0:ee:
         77:a0:27:59:d0:ab:47:84:d7:1d:08:ef:84:cd:d2:7c:f9:5c:
         d4:e4:ac:dd:d2:86:48:7b:24:77:10:c9:bc:b2:51:0d:1c:fa:
         d0:28:f9:8a:2a:bb:08:08:1e:7f:eb:1b:99:d8:a9:4d:90:8c:
         b4:39:f0:32:4f:8c:4e:45:87:28:34:2d:6f:4a:34:c3:69:77:
         df:e6:df:86:7e:8e:3f:dc:7a:fc:58:7c:9c:3f:c5:08:6d:86:
         3e:cf:71:56:c7:1c:ea:c2:61:fe:f4:8a:04:cf:41:b4:24:d1:
         e6:dd:95:21:b3:1f:20:46:b7:c0:65:d4:10:ae:9b:3d:15:c0:
         08:4d:f1:ba:81:8b:99:ed:b8:73:e5:ac:21:97:de:ea:bc:51:
         12:64:ca:53:bd:b2:ab:d2:f8:89:2f:e9:d9:16:4d:06:85:d4:
         2b:9e:17:a8:d4:94:24:99:93:03:3a:aa:5b:ad:a8:e2:a2:2c:
         76:cf:bd:5b:2a:4a:2b:a1:02:69:a5:84:a2:1b:7f:a6:4b:2c:
         c9:af:99:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:59:48 2025 by rpki-client