Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/271464d1-f8cb-3425-b761-d634ad58c029.roa
File:                     271464d1-f8cb-3425-b761-d634ad58c029.roa (raw, json)
Hash identifier:          XkYGYP9+/oyQspWdGT7xQh6XLoPEmVF05x46H6L2YrY=
Subject key identifier:   9E:0D:5E:9F:35:9A:6B:4D:D7:26:D4:6C:9F:02:C6:31:A2:1C:79:A0
Certificate issuer:       /CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Certificate serial:       010D0C9F43285849ADF14CE4E718F56DB59F6B80
Authority key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/271464d1-f8cb-3425-b761-d634ad58c029.roa
Signing time:             Mon 28 Apr 2025 20:14:52 +0000
ROA not before:           Mon 28 Apr 2025 20:14:52 +0000
ROA not after:            Sun 27 Jul 2025 20:14:52 +0000
asID:                     40755
IP address blocks:        64.49.96.0/20 maxlen: 20
                          144.89.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:f1:4c:e4:e7:18:f5:6d:b5:9f:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
        Validity
            Not Before: Apr 28 20:14:52 2025 GMT
            Not After : Jul 27 20:14:52 2025 GMT
        Subject: CN=05e42bdd-b364-44e5-81ed-75c697b0e2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:1b:7b:8e:61:a8:5f:66:01:8a:c4:fe:62:
                    bd:e4:10:3f:93:ee:37:95:c4:6e:ef:04:2d:e8:5d:
                    2e:6b:46:a1:c4:80:71:ce:2a:47:a5:b2:df:e2:a3:
                    40:0f:0b:bd:cd:f6:6f:83:f8:8c:7c:ed:c7:2a:4f:
                    88:0b:a7:ca:f0:2d:14:c8:eb:2e:87:99:7c:82:10:
                    c0:3a:47:2d:73:f6:f1:9a:0f:b9:91:59:03:b4:52:
                    23:5c:c0:10:37:c2:ef:cb:e0:8a:e4:a8:54:1e:0c:
                    c5:54:91:59:f0:b4:d5:ba:68:8f:16:a3:31:b4:72:
                    94:89:74:1c:75:36:f7:0c:8e:d3:80:f6:da:f6:74:
                    f3:64:87:2f:18:a0:c8:42:c3:a4:a4:76:f2:d9:d2:
                    bc:6b:6f:b6:e9:49:91:be:c1:6c:3a:41:cf:b8:ef:
                    3e:33:32:dc:d5:a6:eb:22:73:bb:56:a4:50:13:9f:
                    97:89:03:9e:4f:bc:13:b5:f1:ae:bf:be:52:4f:06:
                    c6:73:e1:ce:bb:e6:23:b4:dc:8b:e4:ca:18:2d:77:
                    e2:ec:59:8b:41:cf:06:c1:a5:a9:38:e1:a9:af:cf:
                    ff:c7:3c:ef:a2:45:59:c6:9e:16:6e:39:96:f7:70:
                    bf:87:40:25:e5:df:98:ff:40:13:4a:72:c4:15:74:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0D:5E:9F:35:9A:6B:4D:D7:26:D4:6C:9F:02:C6:31:A2:1C:79:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/271464d1-f8cb-3425-b761-d634ad58c029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.96.0/20
                  144.89.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:91:d0:3f:8b:29:0a:f7:23:53:e8:1c:37:f7:06:20:b5:
         d9:aa:21:89:2a:3d:63:f2:22:f8:87:20:28:35:56:7a:01:35:
         71:3c:be:3b:82:71:c6:d8:83:6f:8a:d5:b7:ed:e5:73:ce:ef:
         df:3f:b5:8a:8d:37:4a:76:f8:0b:fd:a6:95:3c:e3:d9:7e:e3:
         84:9d:b3:20:25:69:d3:c9:65:85:b9:6b:fa:d3:95:df:e4:ce:
         a0:09:20:6a:ac:24:ce:35:a8:7e:fe:64:c1:71:e5:4d:d0:75:
         60:7e:32:ae:38:d1:4a:bb:cc:5c:83:42:7d:f7:47:43:3d:62:
         1b:0b:a1:c4:55:17:f1:6a:5d:46:82:c5:be:f0:e1:09:35:e1:
         98:31:a6:11:ec:4a:c9:65:5f:e8:b6:94:de:8e:27:53:e4:d5:
         28:38:04:49:71:39:43:d9:36:fe:c5:77:30:58:10:01:65:4d:
         45:76:6f:53:e7:1f:b3:fd:bc:48:dc:8f:51:0e:b2:9e:24:2b:
         01:1b:73:39:69:66:be:56:eb:4d:d6:14:f3:39:e3:b9:4b:31:
         7f:b9:cd:73:1c:ef:4b:95:47:c1:5b:53:cb:42:ce:43:39:fc:
         87:ba:51:80:ab:5f:e6:f2:40:78:67:08:54:29:81:6c:c7:05:
         a6:a1:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:22:06 2025 by rpki-client