Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/96dab03a-b775-36a0-ac5e-768b0dde2dd8.roa
File:                     96dab03a-b775-36a0-ac5e-768b0dde2dd8.roa (raw, json)
Hash identifier:          zMpQw65W8Y9ZSp9Q9zNgFpCMRL6cKVDP/uHWUe18HqI=
Subject key identifier:   68:F3:43:17:3F:A1:7A:90:F7:F8:04:CB:44:E7:6A:FE:71:09:D8:9A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A78534475B33B67D45A6C0A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/96dab03a-b775-36a0-ac5e-768b0dde2dd8.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        64.9.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:34:47:5b:33:b6:7d:45:a6:c0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=0a53ef6c-8d88-48d5-99f0-165bc393cdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:6b:a4:0a:7d:b6:2e:e2:89:6c:f7:7a:f2:
                    48:ab:ac:e9:38:ed:be:97:b0:e6:6f:f8:e9:60:49:
                    52:19:08:e6:33:20:e3:e3:02:58:94:73:f6:ee:a4:
                    a1:38:c8:58:ed:c3:4a:3c:c1:87:c7:94:93:21:37:
                    f7:59:7c:36:5a:ea:c3:d1:f7:3b:57:d0:88:97:d2:
                    ac:10:9f:1a:ee:a6:83:05:cf:94:f9:64:30:66:68:
                    95:5d:98:93:8b:35:98:33:79:8a:e2:0b:37:d3:38:
                    95:4e:56:0b:c6:dd:e3:0e:21:f6:9e:15:75:0c:93:
                    48:c1:73:80:2d:04:d0:d8:64:5f:05:bd:89:7b:15:
                    e3:76:e2:76:39:fa:fa:d9:bb:bb:d2:5e:c8:8b:60:
                    c6:ed:8e:df:17:09:d7:0c:87:c5:3e:cf:ec:dc:fd:
                    6a:27:76:3c:1d:4d:dd:01:01:ac:c9:c5:b3:4d:c6:
                    c2:ee:f8:31:a0:c1:93:69:d5:b4:81:0b:21:38:52:
                    81:50:89:a9:c9:e5:3a:49:96:42:73:68:f7:f6:fe:
                    af:db:b9:02:03:6e:65:c7:e7:98:b7:74:4a:d3:49:
                    9c:a6:a1:5d:cf:d5:f9:f7:79:6c:cb:bb:25:af:9b:
                    f1:e7:4b:96:f4:17:52:f2:48:4e:25:b2:c2:82:fd:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F3:43:17:3F:A1:7A:90:F7:F8:04:CB:44:E7:6A:FE:71:09:D8:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/96dab03a-b775-36a0-ac5e-768b0dde2dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:7a:2b:3e:d2:93:a6:ea:60:ab:94:06:ed:ff:ce:aa:12:
         4d:8c:1e:79:8d:59:d7:cc:76:7f:ef:7d:f6:89:fe:b4:07:cf:
         4e:03:3a:c0:8f:51:d2:b7:2d:70:33:db:5e:c1:46:ae:6b:7a:
         dc:7e:f3:61:07:20:2e:74:1f:e1:18:af:37:f9:b2:14:55:92:
         00:46:7e:52:96:cf:cb:a1:d9:0e:9f:26:61:2c:28:29:ba:54:
         7a:d9:b0:04:d3:f0:2a:cb:12:14:4c:b0:a9:42:24:f9:bd:c5:
         9c:6f:50:d2:2f:61:7f:a5:4d:21:01:5e:58:f9:8a:cc:fb:15:
         51:30:27:4c:70:c6:48:11:b5:4a:ad:b9:d9:53:b4:39:31:ca:
         ce:8c:e6:94:d3:b5:49:20:b3:1e:5b:f7:07:fe:0e:c2:e9:95:
         b2:67:ac:c7:b6:27:04:89:90:f0:c7:38:aa:db:89:23:29:cd:
         f4:54:f6:58:b3:83:38:ce:c9:e4:45:67:92:cf:be:b1:f0:f5:
         6a:65:dd:5d:cd:01:55:69:ca:ee:56:ab:4f:97:18:74:45:d6:
         d6:f0:86:6e:3e:38:28:89:82:67:48:1e:b0:7c:61:b2:98:59:
         5e:93:db:e8:2f:6c:1a:98:0c:c1:a1:1d:e8:05:9d:3a:02:42:
         54:bc:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:50 2025 by rpki-client