Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c/8c4f70a3-f9fa-3c49-a880-055063c37bfd.roa
File:                     8c4f70a3-f9fa-3c49-a880-055063c37bfd.roa (raw, json)
Hash identifier:          nPytLOzUiVx4hkszTaxKFzvYezGEDwu9zJ5otx/5Gr8=
Subject key identifier:   16:4D:89:E1:82:F1:04:2B:E4:BF:08:17:06:A9:9A:80:A8:65:9E:7C
Certificate issuer:       /CN=af069eb2-6c16-4ba9-99c6-9975f320137c
Certificate serial:       010D0C9F43285849BB0F701B5CDE1E151BC2E2C0
Authority key identifier: F3:82:C4:21:02:08:6B:F2:28:0D:D0:08:5B:1D:23:E0:DB:1F:56:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c/8c4f70a3-f9fa-3c49-a880-055063c37bfd.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     399045
IP address blocks:        64.93.81.0/24 maxlen: 24
                          64.93.82.0/24 maxlen: 24
                          64.93.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c/af069eb2-6c16-4ba9-99c6-9975f320137c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c/af069eb2-6c16-4ba9-99c6-9975f320137c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:70:1b:5c:de:1e:15:1b:c2:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af069eb2-6c16-4ba9-99c6-9975f320137c
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=62737a69-a36e-4f9f-83a1-abbfebc4bfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:4c:ea:61:5e:09:ed:6c:b2:84:65:d8:88:
                    e2:2f:3e:8c:7b:c8:3f:6e:cc:d2:c3:95:32:2b:06:
                    d2:e7:f4:f5:8c:23:be:71:30:34:ce:08:5e:35:75:
                    d1:f5:29:b4:b5:0c:fa:2d:70:22:3f:12:3a:f1:fc:
                    2f:a8:f1:b0:2a:28:22:59:5d:f2:81:2a:a1:f8:19:
                    ad:b2:bf:a4:04:44:b8:02:3a:68:70:af:c6:01:ec:
                    82:7c:d0:20:b1:42:06:9f:68:3a:ea:4f:73:cf:be:
                    da:d4:4f:58:e1:c7:44:da:1f:c2:25:de:13:8d:b8:
                    ee:92:30:83:dc:c4:33:42:71:d7:64:ef:3c:07:21:
                    bb:ed:f2:d0:02:ee:4d:3c:e9:eb:0f:d9:1f:51:f8:
                    bf:82:b3:8b:31:ab:e0:c6:20:5b:96:64:e8:8b:b3:
                    1e:34:03:ed:8e:a4:66:a0:2d:08:df:1f:f2:ff:86:
                    e1:76:5b:47:a7:47:8f:c6:02:f3:f7:69:fe:1b:56:
                    de:62:cd:24:94:21:4c:ee:97:0d:5d:6e:aa:8a:d9:
                    56:65:88:97:f7:98:a9:b7:78:d9:fd:39:82:5a:60:
                    42:b5:0f:9b:04:ed:0f:15:61:31:1d:15:09:9b:d9:
                    78:12:ef:90:09:93:d3:9f:b3:8d:bb:7f:5c:71:dc:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4D:89:E1:82:F1:04:2B:E4:BF:08:17:06:A9:9A:80:A8:65:9E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c/8c4f70a3-f9fa-3c49-a880-055063c37bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c/af069eb2-6c16-4ba9-99c6-9975f320137c.crl

            X509v3 Authority Key Identifier:
                keyid:F3:82:C4:21:02:08:6B:F2:28:0D:D0:08:5B:1D:23:E0:DB:1F:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.81.0-64.93.83.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:02:e8:94:03:d0:a0:d8:30:9e:dd:30:a7:de:9a:b7:b9:ea:
         8a:f6:98:c9:97:ea:65:3b:d1:1e:fb:82:b1:69:4b:ee:b1:89:
         57:0b:c2:9a:fc:dc:3a:bb:08:f0:0b:7e:12:59:f1:d5:07:4a:
         76:06:9c:39:03:66:f6:6d:5d:ac:a8:27:48:6a:41:58:43:01:
         e7:3f:ed:97:24:ed:89:c8:3e:1c:84:2b:09:f9:58:82:db:22:
         14:8f:10:40:a1:18:9d:b0:24:c4:9f:1e:28:a1:9e:3f:96:b9:
         6a:69:74:0c:1b:64:02:61:3b:99:f0:8e:1d:14:d2:e1:08:09:
         82:f6:90:8e:0c:c2:11:c9:69:a0:9b:0d:41:18:9a:71:22:5d:
         52:fa:53:76:e9:0a:2c:69:33:7d:58:96:df:b0:c5:17:71:d5:
         9c:88:76:8f:2a:d4:6f:83:aa:9a:ff:f8:91:4d:b0:de:77:43:
         9a:c7:90:21:83:3d:99:71:eb:07:3b:1a:dd:b7:91:37:11:0f:
         5f:24:62:ed:58:82:38:2d:c6:d0:a1:ec:18:a9:f6:74:ff:d0:
         78:ff:5a:c0:c3:06:5f:cc:a5:ec:f1:e7:60:ce:73:ac:dd:53:
         93:bd:6e:9e:42:8a:4a:03:fb:67:95:22:f7:46:40:e4:0a:3d:
         d1:97:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:03:43 2025 by rpki-client