Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e7e54ae7-5e65-3eb1-82c1-32e2b6dacd60.roa
File:                     e7e54ae7-5e65-3eb1-82c1-32e2b6dacd60.roa (raw, json)
Hash identifier:          pjnsuZdmbg8BQ26l3XiQHWqOoSXfVdWzZ3u9uBTkNjM=
Subject key identifier:   22:F4:A4:FE:AE:F3:2D:E9:86:10:1A:B7:59:82:27:31:9E:20:DC:0F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A7852A7B0E2B14A8BFBF0320
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e7e54ae7-5e65-3eb1-82c1-32e2b6dacd60.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        64.9.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:85:2a:7b:0e:2b:14:a8:bf:bf:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=27c2355a-44b9-4cee-b03e-24c2082fd8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:36:c3:1e:3e:9e:b3:3c:03:92:76:93:fc:ca:
                    1c:89:e0:3c:0c:bf:78:a0:44:c8:62:1f:61:f9:e6:
                    1a:a2:c3:9e:3d:dd:c7:d6:4d:f1:18:fd:14:fd:dc:
                    7e:05:f6:c2:3a:45:0c:11:d8:96:ff:9b:e1:59:07:
                    9a:44:99:59:64:f6:eb:35:26:3f:9a:fc:18:db:31:
                    80:e6:0c:ee:bf:05:16:1f:69:ea:fa:c8:6a:68:2a:
                    90:d2:14:58:28:69:b3:ae:41:7a:37:2c:41:86:98:
                    47:6f:3c:c4:f3:23:64:94:85:b8:b1:2e:32:d0:7e:
                    97:67:fe:eb:81:c8:88:f1:2a:d6:73:32:31:ef:77:
                    30:87:d4:20:3d:56:e2:c8:25:1d:46:f3:26:95:c2:
                    f0:7a:e3:ce:a3:25:6f:66:3c:5b:da:2f:c0:f0:12:
                    d2:97:83:55:ba:e4:73:58:73:cb:c2:59:57:11:69:
                    20:8a:b0:ca:13:91:89:fe:b8:fd:e5:12:bb:97:94:
                    78:15:4e:87:3e:be:c5:99:f4:bb:4b:cd:5e:09:dd:
                    d1:bd:d8:f9:c9:a7:e3:2f:0b:65:90:e7:78:ee:a5:
                    f7:1e:74:22:ea:26:b3:09:c9:d6:36:5c:19:dc:32:
                    7d:59:48:33:2e:9a:95:1b:3f:3d:dc:97:39:66:de:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:A4:FE:AE:F3:2D:E9:86:10:1A:B7:59:82:27:31:9E:20:DC:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e7e54ae7-5e65-3eb1-82c1-32e2b6dacd60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:b6:e9:57:b5:73:21:e1:8b:f4:6f:14:a2:e1:9d:eb:02:
         18:f6:4f:64:42:0c:a4:34:3a:9b:1b:2c:94:6f:52:7a:03:a3:
         d2:38:d5:d2:32:99:42:91:bd:71:7e:1d:d2:13:11:a2:60:5a:
         10:e0:95:1f:d4:09:3e:6d:e5:51:32:48:5f:1d:04:42:cf:34:
         ea:04:6a:62:27:47:01:a4:2c:7a:08:ea:5a:8a:cb:1a:15:18:
         b6:43:8d:b9:ed:a6:29:97:2d:09:e5:ac:2e:1a:ca:ba:47:a6:
         29:da:1e:fe:19:91:26:a9:24:25:13:73:d0:34:19:bb:38:78:
         68:33:df:8c:c8:c4:3c:80:59:29:fc:42:cd:19:52:9b:3b:cf:
         fa:e6:f3:c5:a7:47:99:48:c7:7e:d6:90:f0:f6:1d:4a:10:e7:
         fc:1a:fc:17:2b:8f:26:e8:4b:15:ec:81:97:53:f0:86:0b:e3:
         a4:b3:7e:1c:91:3e:fd:b3:4b:5b:ef:87:a1:4c:51:86:4a:7c:
         4b:a3:9a:58:ec:7e:19:5c:a5:ed:df:f5:2a:d6:92:20:3a:e4:
         50:20:3d:7a:8e:87:5f:0d:ce:3e:c2:2b:cc:c5:a5:42:8a:ca:
         b7:e4:ed:78:b3:0d:a4:33:2f:bd:ff:db:72:5f:3f:16:ff:30:
         6c:13:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:34:23 2025 by rpki-client