Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa
File:                     94c2624e-44d2-3cbc-b242-94286db631a8.roa (raw, json)
Hash identifier:          L6nKp0cCC+zaUwIOOXfdIFRLTy2xwTnvfMgTQY407kI=
Subject key identifier:   18:C3:5C:3A:4A:8C:1D:66:D8:5E:7D:9E:A2:D3:41:D5:7D:5F:A2:16
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F43285849B57A16CDB24A919B2E169E80
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     397422
IP address blocks:        67.59.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:16:cd:b2:4a:91:9b:2e:16:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=7f134762-9e11-46cf-b53b-835f7570f307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:a8:d4:c8:b7:c5:cd:d9:d2:4a:68:ee:73:
                    9e:77:2d:f0:cc:59:b7:27:84:3e:f5:93:76:ea:c2:
                    45:a8:43:c1:d7:73:b0:8a:09:e7:d7:fb:0f:c9:84:
                    05:2e:8d:7e:02:48:c2:26:ea:03:8e:fa:a6:97:aa:
                    98:c2:ed:a1:7f:0d:34:bd:3b:34:ac:d4:f8:1d:c6:
                    dd:dd:1a:1b:a2:bb:54:2a:46:5e:78:7f:8c:0d:70:
                    61:bc:41:5a:f3:fe:2b:39:c3:44:f4:e2:ec:5e:9d:
                    ca:3a:19:7f:0a:7c:76:19:77:0b:15:2e:b7:39:b8:
                    df:ed:99:5b:e9:55:b6:b1:24:88:25:24:8d:b8:ed:
                    1e:79:38:d8:25:10:26:1d:e0:91:53:6b:16:e7:05:
                    b4:44:6b:d3:54:5a:08:67:80:2c:1c:59:6c:80:79:
                    49:79:d6:4f:de:cb:45:53:6b:9e:2f:0a:76:2d:b0:
                    d7:ae:f2:4b:83:61:11:04:96:6c:71:59:e3:a5:b5:
                    ed:b6:a3:ca:24:dc:66:dc:f1:0f:0f:30:15:b6:4b:
                    e5:1d:9d:c1:78:40:f4:07:a9:fa:32:20:fa:bc:8c:
                    53:2f:0c:ae:ed:55:24:a8:aa:39:ae:ba:28:1a:c0:
                    dc:d4:30:6f:0d:73:9f:04:85:04:9c:f2:2f:67:2a:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C3:5C:3A:4A:8C:1D:66:D8:5E:7D:9E:A2:D3:41:D5:7D:5F:A2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:96:a5:38:f0:58:35:fa:5b:17:b3:3b:95:e1:c0:f0:d7:
         61:1f:6a:41:d6:14:e3:4e:15:99:d6:79:be:3c:ea:62:4e:bb:
         39:55:7e:9b:fd:ef:92:ee:21:3a:81:69:7c:3c:07:4f:4e:d6:
         ff:dd:c5:27:7b:15:d5:d9:15:d5:d8:14:0d:e3:30:fa:77:22:
         7d:31:51:78:8f:c7:64:03:84:dc:29:52:56:91:2a:c2:c3:20:
         23:25:77:a0:58:6d:11:09:a0:9c:0e:de:ea:85:e0:16:34:fe:
         84:d4:a8:ba:5d:59:13:c9:ee:3c:ec:b0:c0:cc:c9:3a:bb:64:
         18:c6:01:b2:3f:56:66:03:58:e2:5e:aa:dd:fa:b2:8e:ae:a4:
         f5:a9:a2:0a:14:0d:83:7a:8c:76:6d:80:32:db:07:e7:16:6b:
         a0:ec:ff:a2:67:0f:36:aa:27:85:ed:e8:d2:80:50:25:a0:cd:
         db:0e:86:41:c9:57:33:1c:12:47:21:f6:cf:48:01:26:8d:65:
         f6:7c:63:41:cf:0a:c9:29:e3:39:88:4c:8e:44:85:79:d8:32:
         d9:60:1b:21:bd:40:6d:0b:29:c1:32:82:0e:2e:24:3a:27:0c:
         32:d8:81:a1:72:b1:9c:7c:c4:ae:2b:3f:c6:dc:f4:c2:6d:93:
         7c:52:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:43:17 2025 by rpki-client