Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa
File:                     048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa (raw, json)
Hash identifier:          p5/LFQtwRPjOsz2047MOm/Nkj7+OciwSl45q0IGqP+4=
Subject key identifier:   3C:35:93:FB:88:FC:C8:B3:41:05:C0:92:25:B3:25:10:4F:47:7E:83
Certificate issuer:       /CN=71fff491-7667-44b2-bd66-cb5aeb51a394
Certificate serial:       010D0C9F432858498FD289531E2D99C68CF41680
Authority key identifier: 05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa
Signing time:             Fri 18 Apr 2025 01:18:37 +0000
ROA not before:           Fri 18 Apr 2025 01:18:37 +0000
ROA not after:            Thu 17 Jul 2025 01:18:37 +0000
asID:                     8075
IP address blocks:        64.52.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:d2:89:53:1e:2d:99:c6:8c:f4:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71fff491-7667-44b2-bd66-cb5aeb51a394
        Validity
            Not Before: Apr 18 01:18:37 2025 GMT
            Not After : Jul 17 01:18:37 2025 GMT
        Subject: CN=7cbb3b57-290f-43dc-93d9-956856966190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dd:4b:b1:b0:51:04:66:86:84:3e:9a:7a:57:
                    84:3f:63:75:23:b5:34:0e:31:1e:de:72:b7:35:83:
                    e9:2a:7c:87:85:0c:75:d3:c5:25:fd:66:be:fa:38:
                    95:d5:52:93:da:ff:48:3e:8c:91:b2:66:13:da:3e:
                    e2:e3:7d:eb:98:a4:10:36:05:63:c4:4d:66:4e:63:
                    b8:34:73:c0:29:30:75:45:da:30:46:29:3e:7b:97:
                    c8:fc:4a:2a:39:8e:71:a8:3a:ec:d3:2f:db:e4:fb:
                    6d:4f:84:56:f7:ae:56:93:83:ff:71:ec:40:84:c9:
                    be:2b:45:cb:7c:92:a8:64:8f:ba:2c:27:cc:24:3c:
                    f3:e3:52:fa:b9:f3:12:aa:bf:6f:c2:52:61:16:21:
                    4a:87:3e:8f:48:16:5d:7c:9f:84:f0:a1:3d:36:f8:
                    e3:2f:95:80:4b:38:62:f9:ee:bb:9c:21:39:ee:47:
                    e2:0e:bf:50:8d:44:2b:f6:f6:53:7b:38:a3:28:e7:
                    55:e9:d7:8b:00:36:76:22:d5:2d:53:35:7b:0a:7a:
                    02:90:83:f9:f0:01:db:bc:5d:4f:c7:cd:b2:a7:c8:
                    74:1d:b1:58:72:bd:98:9f:ad:b8:60:3d:bf:40:63:
                    60:a2:c9:d8:97:53:16:a1:a5:8f:4b:6f:de:34:2a:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:35:93:FB:88:FC:C8:B3:41:05:C0:92:25:B3:25:10:4F:47:7E:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl

            X509v3 Authority Key Identifier:
                keyid:05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:22:b6:65:99:d2:10:b7:b5:a8:e6:d7:d8:49:04:f6:a0:60:
         5b:14:08:b4:c4:aa:95:09:08:ba:4f:4b:2d:5a:3a:95:09:c3:
         4c:d5:12:1d:ca:cc:a4:a3:80:bc:72:e8:5d:71:ed:cd:40:41:
         b6:be:fa:b5:04:c1:2b:84:b3:d8:c7:b2:d2:54:f1:34:59:6e:
         b9:ad:8f:23:77:15:6f:1a:f4:2e:c2:e8:b2:38:08:b1:27:30:
         b6:05:a7:b7:a7:49:0f:7f:a5:d6:ef:2d:da:62:35:2b:7f:ee:
         0d:fc:ce:40:56:35:2e:f9:2e:3c:54:16:05:5c:ba:20:b8:57:
         73:40:d9:fa:d0:37:94:9b:5b:47:78:09:c6:6d:0f:5d:ff:37:
         0f:30:83:34:b3:a0:fa:d4:a9:6d:88:f2:e6:50:e0:c9:6f:3e:
         25:69:f9:f2:8d:2c:7c:23:8c:82:41:16:7a:26:74:f0:cd:fe:
         5b:36:1f:79:31:d2:6b:3f:7a:72:f9:15:7e:49:b1:ad:c8:75:
         1a:8d:98:fb:a1:26:56:0b:fc:e6:5b:db:71:8e:18:a6:47:d8:
         34:d4:51:ed:27:a7:7f:66:8e:ca:d9:0a:22:ef:74:ea:19:40:
         95:9a:58:af:a8:47:20:d9:ee:8a:f2:00:27:a2:99:be:02:a7:
         14:f3:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:56:54 2025 by rpki-client