Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/97f890fe-71d3-33d7-957d-44290971906e.roa
File:                     97f890fe-71d3-33d7-957d-44290971906e.roa (raw, json)
Hash identifier:          XX60xZx+JQTxk8PoYyq/uiSwRCBeMu09mNBqn4kZg6s=
Subject key identifier:   B7:7D:97:E6:76:C3:9D:C0:71:C0:F7:67:96:16:B6:88:9B:96:D7:4F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A78539BF988C2CFD1C28C530
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/97f890fe-71d3-33d7-957d-44290971906e.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        64.9.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:39:bf:98:8c:2c:fd:1c:28:c5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=280570e0-0e91-47ee-ad64-a702247465e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:74:1a:99:6f:65:a9:fc:61:a6:75:d1:20:
                    51:25:62:b6:7c:78:e1:48:1a:47:e9:58:ec:9f:6a:
                    55:bd:d4:6f:54:dc:71:3a:1a:b1:9a:05:ef:b6:d1:
                    1c:2d:dc:da:8b:5e:17:b0:4c:56:57:68:ff:7c:72:
                    ef:b2:f2:d4:67:3e:3f:e4:4c:59:2f:51:c6:d3:db:
                    86:33:e0:ac:df:79:2a:d9:55:67:4b:23:4f:57:c1:
                    c8:49:9b:82:8e:a2:42:94:20:f9:7f:70:ac:1d:8d:
                    f6:d7:f6:50:94:5f:05:8f:fe:da:d5:01:95:20:07:
                    7c:44:68:a4:31:5f:0e:55:ab:20:e9:41:92:35:83:
                    52:2a:58:12:2a:95:43:c5:20:85:a6:05:1e:29:77:
                    e6:dc:2a:dc:75:a0:29:8a:af:58:5c:c5:29:cb:43:
                    1b:46:58:f6:b6:18:bd:07:a5:1b:b7:33:e2:f7:54:
                    37:95:35:d0:87:be:4a:80:a2:2d:1f:fa:3d:0c:30:
                    fe:24:6a:8c:76:16:de:55:2a:ec:72:ff:6f:7b:3e:
                    24:26:0b:98:ab:df:ce:d2:65:47:18:0a:7e:6b:a8:
                    1e:c5:6d:4d:b1:fa:3e:b1:3b:d5:b1:61:d6:af:09:
                    06:72:d2:a0:3b:13:de:48:f2:2f:18:69:f9:74:d2:
                    ee:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7D:97:E6:76:C3:9D:C0:71:C0:F7:67:96:16:B6:88:9B:96:D7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/97f890fe-71d3-33d7-957d-44290971906e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:fc:db:55:ac:ba:39:38:6b:5b:cf:59:c8:42:1a:ab:a8:
         8e:7b:00:38:ff:5c:1e:52:02:0b:b4:ca:09:f5:d4:7c:53:2d:
         21:79:30:b3:56:04:b0:09:31:4c:89:39:ed:b7:39:b4:0a:f3:
         68:58:c2:18:f8:15:f3:80:24:1b:a1:34:10:86:8f:3b:78:7d:
         28:65:fc:80:d0:75:a3:04:a8:38:e6:93:fd:7f:73:14:4e:b5:
         55:a4:52:d5:a5:56:c3:cb:6b:16:75:cb:10:ed:b8:9e:ad:43:
         5e:97:09:a0:39:3f:47:d3:76:7d:41:f9:64:99:7e:72:a8:41:
         f6:bb:66:0a:bb:38:77:6a:50:ec:0d:d4:d7:cd:35:51:f5:a7:
         36:8c:32:48:04:28:d5:75:cc:80:33:2e:09:6b:99:43:18:43:
         eb:45:95:6a:53:b3:52:84:69:07:b5:5b:c6:38:53:0d:f3:f4:
         c5:d9:f4:be:ce:76:91:b9:f7:9e:97:84:b7:72:00:0f:8a:db:
         e1:97:78:2f:48:c2:9f:02:7d:27:54:a2:61:e1:80:be:44:54:
         6d:bc:d4:9d:a1:0f:58:d5:45:fb:25:06:28:8b:58:84:cf:45:
         00:a5:e2:64:5e:88:ad:e0:6a:c3:85:4a:5e:ec:7e:d2:3f:20:
         d0:4d:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:39:37 2025 by rpki-client