Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/53691788-7df7-3281-b476-97cb21900b36.roa
File:                     53691788-7df7-3281-b476-97cb21900b36.roa (raw, json)
Hash identifier:          OtHbAgoy7GVVRwkokbzzQnd437beEeW1gcOqSIARhXU=
Subject key identifier:   A7:10:A6:C1:47:7F:7B:39:89:AA:FC:F7:E7:47:4D:DE:2A:7B:D3:A9
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285849CE9A67C8985D6D47A5BE6B60
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/53691788-7df7-3281-b476-97cb21900b36.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     31898
IP address blocks:        64.39.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:67:c8:98:5d:6d:47:a5:be:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=6ec8706c-148d-4b25-8767-d0b35279586a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fb:f8:e1:72:e4:1b:9f:2b:6f:13:43:56:dd:
                    86:42:55:44:62:3b:46:4d:d0:28:f2:76:a1:3c:46:
                    b4:12:a8:1a:5b:25:a1:47:a5:10:70:58:2a:d2:1f:
                    5b:ba:19:57:08:05:0e:78:c2:d2:10:31:56:35:a2:
                    6c:e3:08:dc:c1:56:54:a3:80:59:48:f6:fa:d4:43:
                    bb:78:5c:e7:fa:f3:58:a1:3c:6a:4d:da:2c:b1:54:
                    c9:a8:ad:7e:bf:5b:30:28:4d:3c:bc:ce:12:ca:f1:
                    13:16:1d:63:a2:e9:b4:4a:1d:08:c6:14:9c:1d:0c:
                    70:88:97:c2:60:bf:90:63:a9:2f:13:3f:95:29:ec:
                    c6:dd:d1:40:72:cf:b3:4a:12:a4:57:e8:71:41:22:
                    6c:97:f4:10:38:3f:29:df:f9:ee:ed:f0:e6:cc:1f:
                    6e:14:0f:f6:4b:eb:0c:97:5a:36:4c:a0:5d:a7:93:
                    d0:39:5a:60:de:3c:a5:71:5e:dc:c4:7a:bf:84:23:
                    85:d2:15:f2:78:9d:45:51:39:95:ad:5f:0b:71:cf:
                    6f:c1:e3:28:e7:18:b4:b6:53:fe:c8:5c:a5:08:ea:
                    2d:00:df:a9:07:d0:3a:a2:86:29:bb:db:7f:db:b9:
                    d6:d4:78:a3:e2:8e:00:34:92:f9:0e:66:0b:e9:7f:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:10:A6:C1:47:7F:7B:39:89:AA:FC:F7:E7:47:4D:DE:2A:7B:D3:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/53691788-7df7-3281-b476-97cb21900b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e3:e6:5c:84:c1:17:18:4f:98:7f:d5:3e:08:83:3d:af:f9:
         bb:f0:86:2b:38:05:39:37:cc:85:4f:57:79:ce:84:0e:19:bb:
         fe:b1:09:85:5e:98:ae:06:c8:fa:f6:c9:5f:fa:7c:bc:1c:72:
         4d:51:a2:44:7e:f8:c4:ca:63:17:d0:23:97:e6:2c:c3:7e:f5:
         91:9b:aa:2b:55:ef:1c:8e:5a:c1:c7:c9:35:aa:58:23:4e:60:
         e4:f8:11:a3:5d:63:05:9a:8e:af:09:2f:2e:2e:aa:3a:8d:05:
         70:d3:66:0f:4a:e5:ee:1d:a0:89:d5:38:cd:7d:52:75:16:84:
         83:db:d8:b2:85:f5:2f:3f:77:02:4a:0c:6e:78:77:28:2d:7e:
         98:b4:c8:40:0d:2b:1a:31:0b:d0:4f:41:d8:f4:5c:a2:e9:b1:
         c2:43:f8:84:c6:a9:25:29:0c:0c:b5:26:b8:57:36:32:30:b1:
         33:dd:92:6f:86:ec:ea:60:b7:31:ee:3f:a4:63:db:aa:22:4a:
         33:83:85:fa:e3:9d:a9:9f:db:b7:ad:cb:69:2e:05:f0:05:43:
         f5:3f:ac:2d:61:d7:ec:f0:c7:73:67:00:44:ae:7b:da:2f:bb:
         12:fe:b3:be:0c:02:e5:9b:26:ce:ec:24:6b:28:00:17:d7:19:
         22:25:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:50:45 2025 by rpki-client