Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
File:                     35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa (raw, json)
Hash identifier:          IQduRnpCoaTISZu8YSbYE7Oo0qfltW1I9aZMbhJkfR4=
Subject key identifier:   53:60:26:5C:CC:2D:00:53:14:10:1E:4A:60:E0:C2:1D:39:91:CC:49
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F43285849CD34C2196E078C3FDA865180
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
Signing time:             Sat 10 May 2025 01:00:47 +0000
ROA not before:           Sat 10 May 2025 01:00:47 +0000
ROA not after:            Fri 08 Aug 2025 01:00:47 +0000
asID:                     15830
IP address blocks:        64.112.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:34:c2:19:6e:07:8c:3f:da:86:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: May 10 01:00:47 2025 GMT
            Not After : Aug  8 01:00:47 2025 GMT
        Subject: CN=6709d94a-8abc-401f-94fd-4b942f7e0c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:ad:36:ec:73:6c:d2:6b:04:c4:9f:87:27:
                    18:da:b6:f9:bb:5a:16:c6:3c:9f:c0:01:a7:2d:6a:
                    54:3b:4b:50:05:cf:f7:b7:26:8c:50:0f:39:95:8a:
                    a7:30:b7:ed:79:77:f0:94:4d:d7:4d:8a:09:ef:8e:
                    5c:7e:74:31:f1:ea:4f:b8:ce:e1:94:57:32:3e:a5:
                    b5:a5:0f:99:c8:e2:36:b7:60:f0:1d:40:ec:50:f2:
                    ed:e9:fa:a6:65:c0:15:ce:27:21:a1:a2:3c:81:89:
                    91:66:24:f3:86:21:36:12:c2:83:98:b5:32:9f:2e:
                    ee:d1:6e:e0:94:82:cd:3f:30:36:71:3c:35:e4:c8:
                    ed:ef:5d:74:76:51:97:c5:94:f8:ac:01:23:94:4b:
                    89:69:d8:a6:78:ba:8c:66:6b:90:5a:de:17:a2:9f:
                    a5:9b:88:69:61:63:f5:5e:d3:79:fb:7c:3c:a7:fd:
                    e4:6a:cc:7e:58:24:c8:d7:c7:73:83:ce:46:1c:15:
                    f0:14:d3:f3:ba:4e:34:b0:f0:bd:59:a7:64:71:dd:
                    68:ce:df:b7:96:06:31:d0:f1:1e:37:77:a8:89:9a:
                    fb:fe:81:2b:67:ea:bb:5c:23:74:8b:bf:ea:47:43:
                    54:f0:71:4b:20:aa:e4:cd:33:96:4e:f3:05:03:c8:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:60:26:5C:CC:2D:00:53:14:10:1E:4A:60:E0:C2:1D:39:91:CC:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:41:77:63:03:04:ea:ad:b4:aa:57:14:27:79:ba:00:29:
         1f:ba:f7:f0:29:e2:4e:6e:56:51:4d:86:55:29:72:ec:96:2f:
         b7:45:5c:30:33:e8:f0:6f:4d:8d:3f:31:e5:5a:e6:47:2b:84:
         71:0d:be:7b:70:a7:93:55:3a:59:da:29:0a:ee:52:84:ad:e4:
         fb:aa:08:51:b0:c9:e8:15:6b:8a:86:98:16:f2:db:be:d3:f9:
         dd:06:f9:ad:6d:01:8d:e6:d6:07:c4:bb:6a:de:08:6c:48:5f:
         8a:6d:f3:c9:21:68:c5:e4:55:68:df:65:c3:a2:96:cc:4f:f0:
         1b:0c:29:8b:8a:db:7b:79:53:c0:65:21:42:46:b6:89:19:10:
         fe:a6:f2:08:d5:c9:28:02:3f:15:5f:3d:0c:b6:ec:a5:9e:89:
         cd:23:e6:e0:45:6e:f6:69:9b:43:d3:8d:ac:62:01:fb:6b:de:
         fc:f6:b4:65:cd:04:a5:71:24:db:e9:3f:a0:37:e1:76:b1:fb:
         6a:4a:4b:8b:80:09:3f:15:b3:b8:30:db:14:d2:7b:b8:5b:9e:
         22:cf:0c:a6:88:df:1e:cc:ea:0a:81:26:e8:6b:8b:a6:83:7e:
         9c:e4:a7:07:03:0d:be:78:74:c4:e6:b3:62:f1:bb:d4:a9:34:
         9d:57:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:13:24 2025 by rpki-client