Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa
File:                     8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa (raw, json)
Hash identifier:          uxZwHjGe+LfrvIYYuwVYjlpk8iaYxsn4ojf/6gWVRes=
Subject key identifier:   57:8F:17:13:71:E6:F5:3F:C4:5C:37:A5:1D:43:8D:5D:76:A5:78:BB
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A785137D7ACD32F671DB7200
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        64.9.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:13:7d:7a:cd:32:f6:71:db:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=c39176b4-9389-47b0-a3a4-0c98bf0979bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:44:e8:47:f4:1e:c8:84:90:2b:27:56:7b:
                    97:67:22:49:e0:65:ad:e3:ce:7b:00:a0:b8:ca:77:
                    0b:be:dd:d8:8a:a9:3a:a9:42:8a:70:6d:b9:af:1e:
                    fb:45:12:30:b4:83:63:2f:5e:dc:12:1d:aa:65:b6:
                    3f:42:e7:ca:2f:78:06:29:e9:b5:7b:cb:99:4d:d0:
                    14:7b:0b:1e:80:d6:a2:38:d6:a8:50:f6:96:50:09:
                    7c:ee:2c:51:ca:08:0c:c2:a6:fe:70:1d:ee:99:0c:
                    9c:2b:e9:6c:e6:95:0b:09:fd:d6:ed:14:7d:4d:0d:
                    3b:ea:69:09:f0:ee:4e:4d:c4:11:9a:74:a7:1e:f9:
                    22:64:73:10:3e:66:bf:bd:06:c9:66:38:66:0e:21:
                    c5:ec:bf:7a:a2:b2:a3:03:d3:78:df:39:92:62:ce:
                    24:c7:dc:31:f5:15:0b:f3:ff:73:7e:94:cd:79:9a:
                    4c:36:a0:4f:f7:4b:66:b6:8e:c7:54:1c:ff:ff:cb:
                    39:d5:6d:a1:b6:9b:d2:c6:a8:49:a1:95:8a:45:bd:
                    e5:ee:56:7f:e2:03:5b:c7:05:c9:56:36:95:62:77:
                    63:1c:df:87:00:94:c8:a1:91:e9:28:31:8b:6d:bd:
                    70:bf:b3:5d:ce:32:0d:3f:ce:dd:f2:b4:4f:66:d6:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8F:17:13:71:E6:F5:3F:C4:5C:37:A5:1D:43:8D:5D:76:A5:78:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8b4a594a-b3a1-37c6-8f71-5cb118c83c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:05:9d:0e:20:82:4f:05:ae:54:16:78:ab:c3:b6:86:34:
         01:88:a3:34:7b:44:26:1c:0a:49:2a:06:11:93:bc:5f:f2:9f:
         44:b7:c0:7a:3f:76:63:98:23:33:d3:4d:b6:e1:15:4a:89:c7:
         de:2b:f5:48:ba:eb:92:28:69:bf:a1:9b:47:a0:5e:1d:26:b1:
         63:b3:53:ee:89:78:06:76:f1:22:ad:69:eb:07:30:c5:67:e4:
         64:7b:34:1e:c1:1f:39:e0:94:ea:10:99:8c:f8:49:7f:9d:ef:
         cd:7b:a0:47:a9:96:fe:c9:84:4b:c7:32:bf:77:92:08:34:00:
         23:5d:66:fe:e6:0b:83:da:30:24:77:88:09:3e:a0:3f:18:a4:
         92:8f:31:fc:4b:ad:97:62:46:c3:04:4e:79:fe:64:d9:23:fc:
         c3:85:6e:9b:91:c0:20:2f:23:c7:ac:d5:6f:44:57:4e:0a:eb:
         85:25:e6:85:78:9e:4d:1e:c5:12:5f:87:a2:c9:34:8f:b1:e8:
         2e:99:78:e1:6b:87:30:66:b6:bf:9c:36:55:82:5c:d1:c4:27:
         2c:98:db:09:ab:69:ce:5d:56:c9:0a:2f:4a:24:27:2a:c5:3b:
         ab:c8:dc:7e:8c:29:69:93:31:f6:a4:dd:a8:95:59:84:d2:b8:
         29:32:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:12:28 2025 by rpki-client