Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/929b1821-59f3-3223-aec8-70e97cf4b508.roa
File:                     929b1821-59f3-3223-aec8-70e97cf4b508.roa (raw, json)
Hash identifier:          dX4iwEMTlqcWgfXlgWfJwdSIc+Q9w0wFP2qGb17DHIg=
Subject key identifier:   D0:7E:56:3D:15:7F:19:76:08:D8:78:7B:61:62:58:80:94:18:28:1C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858495C2468BC5DA4617A21F53E00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/929b1821-59f3-3223-aec8-70e97cf4b508.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     397220
IP address blocks:        64.6.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:68:bc:5d:a4:61:7a:21:f5:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=a9aef46a-039d-4e66-943d-114c8023923f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:c1:61:ce:a2:71:1d:54:1e:b5:27:37:e2:
                    26:fb:a4:97:76:e7:83:5d:ea:d2:cf:89:00:fa:16:
                    89:4b:d8:c2:05:43:5c:9f:c5:96:9c:40:da:7a:6c:
                    30:7a:fe:44:24:ae:70:37:23:3c:70:83:10:e6:31:
                    1e:4d:94:64:71:2d:54:4b:98:49:df:ea:09:6e:ce:
                    b9:7c:9c:30:aa:4d:2a:e4:6c:51:23:d8:96:aa:f8:
                    ab:58:11:23:f3:64:2d:d3:c5:dc:64:3a:27:2d:c5:
                    96:88:a2:2d:ee:5b:49:93:2e:5f:9a:81:a3:c1:6b:
                    3e:8b:42:3b:d2:60:7f:49:58:05:c4:0f:55:2f:43:
                    61:e0:b3:c6:b8:6b:3c:0d:f0:2c:99:ad:f8:61:0a:
                    46:e6:49:31:78:c6:1c:8e:a5:58:ce:cc:74:98:f4:
                    c6:22:43:09:52:7d:a9:c6:41:79:51:f8:6a:6d:2f:
                    b5:d4:cb:18:b6:b7:69:1a:94:3d:c8:74:a4:8e:fa:
                    f2:79:19:6f:f2:79:ae:41:d0:4a:16:51:17:fe:70:
                    ef:31:cd:49:e0:c5:29:0b:d2:eb:6a:3a:d6:b1:4f:
                    cb:4a:1a:73:cc:31:27:9d:c8:b1:dc:16:3e:cc:a2:
                    f8:16:92:09:f9:10:7d:81:c4:d0:5d:25:dc:dd:43:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7E:56:3D:15:7F:19:76:08:D8:78:7B:61:62:58:80:94:18:28:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/929b1821-59f3-3223-aec8-70e97cf4b508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:46:81:a3:fd:f5:25:12:91:8f:0a:19:8b:3c:ff:15:47:
         20:62:5e:59:c7:b5:18:50:25:fc:86:24:54:57:bd:4b:58:17:
         11:74:ca:89:56:2f:67:63:2e:58:2b:fd:05:62:23:36:a1:15:
         f6:56:e7:5f:08:2b:f1:00:cb:16:b1:76:1e:75:e5:ee:10:de:
         b5:b0:f0:d9:e1:33:5f:80:c3:3e:1d:8b:4a:fc:09:fb:8a:84:
         f6:da:c7:3d:11:91:22:ec:06:f0:b6:91:84:0e:7f:7a:8f:54:
         26:5e:78:5f:77:e3:c3:38:74:f0:d6:8c:ba:d3:09:80:38:8e:
         07:ae:f4:b9:6a:65:0a:3c:69:54:90:f4:be:97:cf:fa:04:d4:
         97:bf:a5:0b:fe:74:c1:e1:28:45:47:d7:46:ef:f2:fa:41:a5:
         34:a1:94:ef:8e:40:69:74:5e:81:83:b5:bb:c7:5e:c1:1f:d7:
         87:6e:d8:c4:28:41:14:3c:e5:5e:7e:fe:24:15:eb:5d:ed:bb:
         1a:b8:69:87:a5:4e:3e:6e:d4:2b:ba:4b:74:82:cd:9a:13:a8:
         56:74:7a:56:8c:2b:a1:79:75:8c:e6:16:af:b7:b2:d9:f0:8d:
         64:68:1e:b1:82:b7:21:a6:3e:bc:cb:f6:b4:92:68:42:ea:78:
         51:cf:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:49:03 2025 by rpki-client