Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/97476721-9327-3375-b808-56cd84523564.roa
File:                     97476721-9327-3375-b808-56cd84523564.roa (raw, json)
Hash identifier:          oOxsgeX3Y+Hg6Hya3g1C2OOgs5QKxiZ2jt+vLxAryyI=
Subject key identifier:   52:D4:7B:27:C1:2E:D1:8C:A8:A9:0D:BD:93:DC:61:BC:85:54:1A:47
Certificate issuer:       /CN=f8838580-1598-45e5-8353-b551ae78b110
Certificate serial:       010D0C9F43285849D85F87A071171111267B3810
Authority key identifier: DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/97476721-9327-3375-b808-56cd84523564.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        64.190.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:87:a0:71:17:11:11:26:7b:38:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8838580-1598-45e5-8353-b551ae78b110
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=09837b5f-3be8-41ce-8e8d-633fa5e98429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:e3:a5:f4:aa:55:37:c8:50:db:0d:7e:f1:
                    60:d1:e7:41:e9:dd:46:bc:c3:a1:c4:99:cf:b6:42:
                    1f:b9:e4:37:f9:f5:1c:81:0b:6e:4e:50:c0:b3:31:
                    66:30:8a:21:6b:93:a1:70:58:02:76:11:68:b5:45:
                    77:5b:3b:c2:71:d0:15:b7:69:d4:90:8f:79:95:b0:
                    e4:bd:06:a4:6a:94:ef:a3:4b:e5:fb:ac:dd:24:2a:
                    26:a2:6c:f0:14:3c:e0:50:88:68:a2:f8:2b:fc:46:
                    bd:06:4f:10:1e:9f:d0:b5:45:11:b8:52:3f:b4:39:
                    33:ed:6f:2c:20:65:98:70:03:62:b8:37:c6:08:d6:
                    1f:2b:e4:6b:b2:c1:fe:eb:00:73:32:4a:c1:46:e7:
                    22:82:28:91:b1:eb:40:25:21:95:38:2c:e5:69:9a:
                    0a:2a:0b:f0:2e:ac:74:77:41:a0:1c:93:92:01:d2:
                    87:e2:02:77:6d:86:86:34:d4:a6:52:69:2e:8f:4f:
                    16:66:7a:10:0e:b1:2e:fc:26:40:4f:76:08:0c:36:
                    3d:cc:e6:b7:66:80:ce:78:4a:05:5c:c4:8d:f5:11:
                    89:f0:cc:d9:a1:95:77:ec:f1:6b:cc:db:b4:ed:5c:
                    d3:58:37:c4:f9:c9:fa:cc:7a:12:24:31:0c:8f:99:
                    97:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:7B:27:C1:2E:D1:8C:A8:A9:0D:BD:93:DC:61:BC:85:54:1A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/97476721-9327-3375-b808-56cd84523564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110/f8838580-1598-45e5-8353-b551ae78b110.crl

            X509v3 Authority Key Identifier:
                keyid:DE:86:FB:F2:FD:F0:F5:78:BE:83:FB:65:0F:14:BB:E7:FE:75:7C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8838580-1598-45e5-8353-b551ae78b110.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d8:84:5a:9d:9d:f8:1e:dd:c2:09:7f:f6:61:0c:78:76:4d:
         6c:97:a6:dd:cc:ae:18:ee:28:b4:52:b1:9c:f6:53:8e:4c:8d:
         c9:98:c8:63:31:34:10:71:23:a3:9c:0f:01:61:ac:47:29:40:
         f7:0b:dd:85:5e:86:68:52:17:10:be:a9:cd:2f:3b:7f:29:3c:
         7a:d6:fc:cf:88:37:60:d3:ae:69:f8:8c:97:f5:ff:62:4a:92:
         ac:bc:87:0d:02:66:bb:e2:a5:c7:db:28:55:ea:84:9c:42:a8:
         f9:a2:cb:66:01:c5:bf:77:02:d7:42:8a:df:ff:a2:a5:00:83:
         ff:22:3d:6c:73:e5:be:52:2b:12:40:88:4d:d1:aa:eb:60:d8:
         ab:cf:92:98:e7:c5:aa:1e:75:56:b1:4a:90:f9:56:5d:20:5b:
         7f:74:37:e7:cc:5b:62:12:dc:09:aa:6a:70:45:29:9f:65:e0:
         fb:4a:ab:76:3f:8c:2a:7d:f2:d2:89:03:53:d1:e6:c9:4a:11:
         89:b9:84:bd:55:4e:6b:30:8f:1a:af:5a:77:4d:5d:ca:d8:7d:
         14:1e:4b:7f:f4:35:8d:f8:a0:2c:53:62:4b:12:be:64:0e:b2:
         4d:ed:23:75:40:c5:ec:86:9c:43:eb:e9:9b:79:d1:30:9e:b7:
         5f:cf:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:02:46 2025 by rpki-client