Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/36342e34392e32382e302f32342d3332203d3e2039393233.roa
File:                     36342e34392e32382e302f32342d3332203d3e2039393233.roa (raw, json)
Hash identifier:          R6xeonGRfHBn3fncXTVB8mxM6w5PTgsrquJ0aqBXRdQ=
Subject key identifier:   BB:B3:77:F5:FD:BB:DB:2F:7A:62:8D:DA:A2:FE:90:5A:39:55:ED:76
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       60E58C1C0A57C5C580C4E20BF49A78D4077C3B0E
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/36342e34392e32382e302f32342d3332203d3e2039393233.roa
Signing time:             Sun 11 May 2025 08:43:03 +0000
ROA not before:           Sun 11 May 2025 08:38:03 +0000
ROA not after:            Sun 10 May 2026 08:43:03 +0000
asID:                     9923
IP address blocks:        64.49.28.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 06:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e5:8c:1c:0a:57:c5:c5:80:c4:e2:0b:f4:9a:78:d4:07:7c:3b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: May 11 08:38:03 2025 GMT
            Not After : May 10 08:43:03 2026 GMT
        Subject: CN=BBB377F5FDBBDB2F7A628DDAA2FE905A3955ED76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:a2:4f:10:ff:e4:7a:8b:93:3b:e2:d8:ed:
                    e2:69:f2:8f:87:eb:4e:73:9d:84:3b:71:38:0a:93:
                    a4:5e:47:48:3d:00:83:51:1d:dd:d6:8a:0b:f5:c1:
                    7a:08:6f:bb:00:f3:72:59:6f:5a:34:25:b7:f6:5c:
                    28:98:31:0b:cb:92:b4:36:14:11:79:f6:e3:c3:c8:
                    45:25:63:dc:b6:3a:2e:f6:01:94:fc:01:30:03:fd:
                    a8:ce:77:2a:40:0d:bf:ea:4a:d9:86:1f:d3:4b:b3:
                    0b:c2:dd:b8:06:46:23:5d:82:5a:84:d4:5b:da:8c:
                    a2:d5:8f:65:fd:c7:94:8f:b5:ab:6e:39:4b:20:a2:
                    8c:23:55:42:62:93:07:ac:d7:20:46:81:22:e5:e6:
                    ac:f9:09:8a:9a:71:e1:7e:00:26:54:12:31:68:a7:
                    f9:ba:24:4f:46:43:e7:5e:9b:de:c6:2d:a5:2a:7e:
                    e9:51:ef:b3:81:fc:9c:b8:c9:1d:7f:f8:3c:1c:05:
                    35:53:ea:2d:79:6f:be:7a:70:6f:c8:bb:96:24:c1:
                    ed:2b:91:d6:d8:29:0d:4c:92:23:30:f1:a8:a9:0e:
                    1a:ca:aa:78:08:a0:34:b1:41:69:f3:89:29:11:2f:
                    8a:85:c4:8f:e5:56:1d:98:92:dd:2b:1f:29:6f:0c:
                    4e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B3:77:F5:FD:BB:DB:2F:7A:62:8D:DA:A2:FE:90:5A:39:55:ED:76
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/36342e34392e32382e302f32342d3332203d3e2039393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:58:d2:d5:ec:e0:0d:84:99:24:33:ba:b2:70:99:2d:13:d4:
         62:01:b8:6d:8b:bf:ba:2f:1b:50:e7:64:1b:49:da:b1:45:7b:
         91:68:03:a1:8d:a0:7d:73:27:4d:01:2a:ec:fe:f4:c2:87:90:
         0a:91:41:f1:78:60:13:1a:26:45:c1:ff:41:f6:ec:8d:37:1f:
         5c:7a:8a:d1:2b:c7:0e:90:b5:d8:34:af:da:81:ae:8e:b6:15:
         71:f0:ce:75:40:b6:12:91:51:bf:0b:f7:b4:c9:cb:63:fa:df:
         c8:fb:94:b2:59:5e:de:57:bd:b1:8b:e1:e0:8b:55:f4:8b:ed:
         4d:66:6c:aa:0f:cf:f1:77:52:b9:2f:b5:c6:63:de:26:cc:68:
         fe:5e:28:80:60:93:cd:1b:79:a9:33:99:8e:4f:4a:b2:cb:39:
         98:91:dd:33:9a:20:2c:9c:a8:bc:9d:2e:09:72:90:e8:29:93:
         15:26:eb:1a:4e:9a:05:6f:3f:a5:22:cb:0e:7e:cc:9a:24:88:
         36:92:27:28:19:89:cc:b2:48:ea:4e:d5:d4:bd:52:64:09:82:
         0e:e8:b5:78:85:4a:3a:6c:29:2b:d2:d8:10:82:e0:a5:c6:92:
         e8:ae:72:a7:78:7f:1e:47:2e:cf:b6:c6:f7:ae:69:56:96:b7:
         eb:4b:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:02:22 2025 by rpki-client