Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa
File:                     aec344a8-4f5c-3241-ae81-d26a1958ad45.roa (raw, json)
Hash identifier:          P4idr3uhTKCECAiVvJE3X8sSmYh90UKYTRoTlUzoLq0=
Subject key identifier:   8B:84:D0:D4:63:9D:21:B0:83:9B:EF:B2:68:D6:6E:87:1D:21:8F:67
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A7850424DF75B6DFE50EEF40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        64.9.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:04:24:df:75:b6:df:e5:0e:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=e5debd5f-267b-49f4-951e-67094b714446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e2:bd:42:5c:c8:86:bc:75:72:d5:30:e2:0a:
                    12:f3:e2:96:27:31:25:4d:20:15:1e:98:03:41:57:
                    bf:b0:bf:7d:fd:34:e3:f3:89:b9:77:a8:c4:7e:d9:
                    86:c0:15:b2:3a:2c:93:b4:1c:04:a3:32:60:8a:73:
                    00:d9:f2:af:52:b7:c2:19:6d:8e:a8:03:5c:72:71:
                    5c:7a:2c:90:e0:51:9e:70:3d:97:64:29:c1:44:ce:
                    b3:c2:b0:10:01:85:94:39:40:40:73:b6:80:07:d8:
                    0a:e3:ff:1f:9e:00:fd:02:77:e5:ac:b4:f6:17:f4:
                    8a:fb:e3:d3:3e:7b:9a:06:c9:d2:42:17:71:4a:70:
                    bb:d2:6c:38:98:02:9c:47:be:9f:2e:70:cd:9b:97:
                    b7:f2:85:7f:0d:b8:86:f3:f5:9b:ed:3d:8b:ab:6d:
                    eb:46:f4:23:ec:d2:13:f9:d3:ab:70:2d:62:f1:22:
                    c7:f9:fb:32:a7:5a:b6:48:d9:28:db:73:c5:8b:85:
                    96:3b:57:c9:63:d3:11:fd:52:57:6f:e2:a7:a2:09:
                    7c:a1:83:99:28:c9:fa:6d:14:2c:db:5e:a2:45:ed:
                    b2:0d:fd:1e:f6:2e:f5:f0:91:6f:f5:1c:01:e2:b6:
                    94:3c:c9:e0:2f:a9:84:b2:e2:73:6d:55:87:b5:f3:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:84:D0:D4:63:9D:21:B0:83:9B:EF:B2:68:D6:6E:87:1D:21:8F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5f:b2:4a:6d:64:e6:53:ba:e8:fe:dd:92:4e:17:c7:3a:56:
         9d:3b:69:9d:48:55:c6:7b:ae:c0:f2:3f:c0:42:50:ec:42:e6:
         33:a6:8e:28:0a:47:03:c7:fd:d7:5d:1b:7c:ff:fb:ae:0b:23:
         e3:19:15:b2:95:88:8d:90:93:f5:13:f4:61:df:44:2e:9f:c0:
         71:b2:c2:a8:45:76:20:0c:1b:93:18:2d:45:78:ee:06:40:99:
         d5:88:57:65:99:e9:15:61:91:ba:39:66:12:97:7a:4d:e5:07:
         a6:a3:f0:d1:71:59:7b:f4:c1:fb:a9:36:c6:f1:ed:c2:5c:c2:
         b0:ae:9c:b6:21:56:a8:52:47:20:8d:31:f7:00:df:14:6d:65:
         75:ce:7d:51:82:dd:11:78:4c:f2:64:dd:85:41:6b:15:b0:fb:
         13:dd:58:4f:55:28:26:5e:0c:9e:bd:79:3e:e7:51:07:de:a7:
         67:ea:d9:29:38:dc:97:e1:e5:03:9b:cd:32:d8:92:8f:d6:34:
         ba:59:50:9a:f7:1e:ab:91:e0:33:b6:2a:dd:b3:13:be:2c:2a:
         dc:e5:33:96:1b:89:2b:02:07:98:78:40:e5:8b:26:90:bc:6b:
         58:7b:4b:2c:4e:0e:e6:42:87:41:a3:36:b2:00:a7:a2:91:4c:
         1e:33:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:07:44 2025 by rpki-client