Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/4b9b1710-12bf-3899-8a1f-3116005d14f1.roa
File:                     4b9b1710-12bf-3899-8a1f-3116005d14f1.roa (raw, json)
Hash identifier:          ET0HBAM2Tf5fBy+3EZWzG8Z46QzUJOOqZwth4XcL4Y8=
Subject key identifier:   08:2C:CD:8A:CD:B7:CD:BF:BF:E3:10:9F:7D:32:6B:E0:91:01:DA:05
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F43285849AA4F72DC5282A3DCF9AD8820
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/4b9b1710-12bf-3899-8a1f-3116005d14f1.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     16713
IP address blocks:        64.113.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:72:dc:52:82:a3:dc:f9:ad:88:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=41689e7c-cb04-4ac4-9ba0-b4c9bc124aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:95:ba:4f:aa:60:ff:a2:c9:d9:1f:4e:b2:
                    83:58:f5:1a:de:f9:36:c2:cd:2e:5d:35:02:b1:d3:
                    74:2d:79:87:51:18:d1:9e:20:b8:c1:dd:2d:e0:d0:
                    dd:20:72:8b:59:d7:da:be:42:b2:d7:15:97:ab:97:
                    41:59:9f:e0:a1:97:df:9e:b7:8c:fe:89:91:9f:e7:
                    b0:ca:bd:bd:ff:aa:39:f1:f3:72:14:01:7a:58:2b:
                    cf:df:18:18:bf:f5:d9:45:05:a1:37:f3:ce:63:b3:
                    47:dd:ba:db:ee:0a:1d:5f:17:7f:28:53:9f:e6:f7:
                    97:e3:e7:c9:b3:d2:c2:dc:6c:bf:0a:0a:ad:80:2a:
                    c0:8f:1c:f1:86:94:8d:91:a3:2b:82:b3:c5:c3:44:
                    ee:17:44:32:b6:9a:00:70:8b:9c:0a:f0:f1:c7:a9:
                    65:d0:c0:c4:94:39:ec:db:b2:be:85:de:d3:c7:04:
                    5a:ce:35:72:b3:96:09:cb:d1:40:06:63:d9:93:e2:
                    13:23:c3:72:94:0c:66:8e:e7:89:f3:2f:c6:d3:2f:
                    29:18:df:9b:f0:03:5c:1c:cd:7b:4f:a7:6d:b3:1d:
                    7f:a3:ce:78:05:bf:d5:45:d4:c8:20:6c:3f:95:78:
                    19:a2:2d:3b:cf:60:ed:26:7f:ce:64:81:69:4a:d7:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2C:CD:8A:CD:B7:CD:BF:BF:E3:10:9F:7D:32:6B:E0:91:01:DA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/4b9b1710-12bf-3899-8a1f-3116005d14f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7b:24:54:7b:9d:b3:8d:c2:d7:dc:47:bb:11:df:05:82:af:
         53:d1:eb:c2:53:b5:6f:24:9a:43:c5:a5:b7:17:6f:8b:fe:21:
         0e:d5:f1:54:f4:64:92:00:47:1e:2e:d8:75:74:2d:d3:17:e2:
         00:fa:4c:d0:24:1e:18:21:3f:5c:e9:66:46:c2:81:f3:db:d1:
         11:5b:7a:5b:8f:32:e6:73:c4:67:4a:d3:09:a4:73:43:4e:36:
         4e:70:42:1c:00:7a:3d:47:ef:78:eb:9d:f9:fe:a5:bb:80:96:
         97:cf:84:d3:a6:76:d6:2a:ad:76:f2:5c:ff:a4:12:ad:7e:a2:
         a1:88:2a:8b:1f:1c:e0:7d:42:a8:d6:1d:cf:25:67:f4:3a:a5:
         5d:58:83:e2:aa:5a:98:f5:aa:55:44:f8:92:bd:76:66:55:a3:
         7d:2b:ff:29:32:17:fa:79:a6:b4:07:58:ab:94:92:16:74:7b:
         ce:5e:26:b3:72:5c:18:ef:3d:6f:86:c5:6f:74:a4:9e:34:fa:
         c7:0c:40:ae:52:0b:a2:cf:99:c9:ff:08:e7:62:56:9f:b4:51:
         0f:c1:e4:f4:2f:d0:b1:a6:ab:7d:f4:a4:80:bf:66:df:d5:6f:
         d9:28:1e:fe:ce:42:c7:6c:7e:06:18:81:90:bd:e0:41:b4:ca:
         1f:cb:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:12:00 2025 by rpki-client