Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/f83d4ddf-9590-3475-8e6a-fd8811200481.roa
File:                     f83d4ddf-9590-3475-8e6a-fd8811200481.roa (raw, json)
Hash identifier:          HA+xLPMQZaddJylR+k/MyA5yeyWNqmy15VDoNPYnbpU=
Subject key identifier:   9D:85:40:0F:B5:09:0A:3E:73:05:38:2A:D1:22:E0:CB:38:5C:DF:10
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F432858499829D1A876ACE53114AF02C0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/f83d4ddf-9590-3475-8e6a-fd8811200481.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     394437
IP address blocks:        64.190.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d1:a8:76:ac:e5:31:14:af:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=0ff535bd-29c0-4e36-9cfd-8f6117db5786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:15:09:a9:02:32:1c:f0:60:f5:a5:0b:a1:95:
                    17:1c:ed:12:ca:d9:af:51:56:77:c9:12:4c:2b:ee:
                    09:98:ce:d0:db:5b:92:be:bf:8f:73:d6:82:0b:5d:
                    52:14:f9:56:a0:04:e2:b7:6e:dc:e8:1a:46:50:ec:
                    82:95:bb:47:71:07:53:50:b6:68:82:13:85:dd:e0:
                    87:55:ec:41:08:e0:0a:05:0c:0c:90:f1:2c:1f:a6:
                    fb:06:43:58:80:02:14:70:d1:a5:46:18:eb:50:4a:
                    bb:9b:2b:ef:d4:cc:37:b3:26:b3:69:fd:ba:eb:c7:
                    dc:72:95:84:b3:c4:c0:72:21:cc:e7:b1:02:d4:71:
                    e8:65:4a:f7:85:a0:38:03:8b:3f:33:e2:33:f6:8d:
                    4c:2a:39:88:fa:63:3c:ad:14:13:b3:77:86:dc:0f:
                    57:72:33:1b:c7:68:92:7b:b1:73:b6:94:e4:e9:8a:
                    3a:eb:90:4a:e2:2f:b9:4e:a4:dc:f8:ee:db:c0:ae:
                    5b:9b:c4:c8:b2:90:93:91:6d:37:d6:b4:ca:25:38:
                    d3:c1:f4:e4:c6:4e:92:9a:30:8d:31:ed:4a:6b:2c:
                    f8:86:23:ea:6b:10:67:7e:50:2a:17:41:f8:3a:40:
                    35:95:ff:9e:c9:6c:77:a8:58:77:bb:76:96:dc:f2:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:85:40:0F:B5:09:0A:3E:73:05:38:2A:D1:22:E0:CB:38:5C:DF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/f83d4ddf-9590-3475-8e6a-fd8811200481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:90:e5:43:f0:5e:4f:c0:f3:bd:92:dc:ca:af:39:08:70:e5:
         b3:57:be:8e:95:44:80:b2:4e:d1:ce:7f:55:20:82:0e:9e:3c:
         d6:d6:ba:f0:f2:30:04:b4:b4:f6:be:33:74:02:48:29:06:ce:
         42:13:00:50:ca:9a:9a:24:29:9e:d8:27:e6:7c:37:5a:36:cf:
         71:d3:7b:b6:62:a1:ac:81:96:72:7b:13:dc:2c:71:14:c9:2b:
         7c:a9:44:53:5a:cd:b5:e2:ea:54:42:9e:87:95:9e:71:16:47:
         1c:36:67:09:be:5d:ab:b1:60:8a:2d:03:06:5a:76:f2:c8:63:
         4e:f5:fc:fd:64:f6:b6:7f:63:ba:98:98:58:ae:6a:58:cd:d8:
         72:23:58:9e:bc:9c:e4:b1:02:73:eb:5c:a5:05:05:4d:bf:d8:
         76:fe:d7:88:94:d3:ed:8f:2b:5f:f4:e0:fb:e9:4f:47:4e:f3:
         7f:71:84:99:55:d3:21:79:23:a2:de:b3:74:43:02:bb:a0:c4:
         ca:8e:b2:bb:aa:13:e6:9b:ea:00:be:af:c8:47:5e:c8:72:2d:
         65:65:1e:20:14:70:e5:11:11:5d:58:6d:dc:4d:ec:10:72:b1:
         c6:d0:be:43:e0:f1:41:07:6b:56:f8:05:c0:78:cc:30:08:b8:
         46:6d:c1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:24:45 2025 by rpki-client