Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/329dde8e-623f-36ee-ba20-f94b526c14c1.roa
File:                     329dde8e-623f-36ee-ba20-f94b526c14c1.roa (raw, json)
Hash identifier:          iGUum+vFZnDLI4kcJvGsTrQ6iLeRZJwiG4O8Unl9HYo=
Subject key identifier:   56:59:9F:9C:8A:B2:10:00:7E:76:D5:B6:F2:46:A0:08:C5:93:28:5A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849BB0F7AAC7770CD79A34BD480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/329dde8e-623f-36ee-ba20-f94b526c14c1.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     214314
IP address blocks:        65.49.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:7a:ac:77:70:cd:79:a3:4b:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=c9976c2e-a017-4977-9333-a42b69fbb834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:96:ca:76:30:b4:91:13:92:1f:bb:d0:b7:
                    e4:c2:46:cd:ef:26:55:d9:7d:ac:21:45:bf:b0:98:
                    10:06:c5:0d:70:c4:7b:61:a1:fb:1e:27:c3:ee:67:
                    b4:4b:97:24:4f:42:4c:55:ea:b1:42:4c:2f:a2:7c:
                    ea:85:dd:ab:84:70:2c:fb:75:08:9f:c3:19:96:f6:
                    58:bc:27:1e:39:bd:5f:35:0b:6b:c8:c9:c7:17:31:
                    db:17:17:9a:56:b3:cc:59:a8:ed:41:47:f9:c6:80:
                    c4:89:df:a6:ff:d9:7a:60:d8:fe:05:08:c0:81:01:
                    b4:19:a6:5f:8b:36:1d:25:ee:14:d8:2d:01:18:73:
                    ae:12:5d:28:c0:86:e9:46:eb:d2:33:ad:e9:38:86:
                    11:8b:40:1b:04:84:6f:69:2d:76:19:11:57:60:d9:
                    1b:e5:e0:a7:e4:64:dc:78:c8:74:e3:8e:d0:7d:89:
                    04:a2:25:38:5f:2e:f3:d1:2f:57:16:c2:84:f6:5b:
                    fd:f7:19:44:0a:da:56:df:3c:b6:99:b4:ca:89:b5:
                    03:6b:e0:15:9c:d7:00:d5:ad:43:08:5d:75:bc:6d:
                    7b:2b:e7:5e:ca:df:14:71:c7:5f:29:8e:e2:53:61:
                    67:c9:f5:a6:d3:2d:87:af:b9:00:ce:d6:5d:29:a6:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:59:9F:9C:8A:B2:10:00:7E:76:D5:B6:F2:46:A0:08:C5:93:28:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/329dde8e-623f-36ee-ba20-f94b526c14c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:bd:05:25:e6:7d:0d:b1:55:50:cd:1b:c1:41:71:31:2c:98:
         52:13:8a:0d:a4:d3:88:64:55:13:d0:fb:c3:2f:18:93:21:78:
         b7:55:af:5b:b8:d0:3b:1b:dd:8b:87:8b:1b:5d:44:c8:73:0a:
         97:e8:b0:75:12:6e:f8:7a:6d:7d:f7:6a:39:ca:2c:a3:ff:42:
         34:11:c5:67:be:0f:29:c2:87:d4:8c:41:30:05:e8:0a:04:cf:
         27:c2:d1:dd:67:d1:e8:02:d1:9c:47:5d:a2:8e:40:c7:8c:82:
         b3:e3:36:39:3b:d7:43:ed:f7:a9:e2:c5:96:5a:f8:28:6c:e6:
         44:8d:20:f2:af:7f:1f:1d:21:c2:2e:b7:ca:a3:01:49:3f:61:
         c6:a3:f7:9e:4a:96:57:d3:d4:1f:6a:8d:35:eb:ff:34:df:6b:
         1e:de:66:31:83:25:3d:5b:d7:01:e9:ca:60:2a:3f:c7:68:8b:
         19:70:f7:38:d1:1c:fe:be:64:6a:0c:97:3d:f4:28:9a:36:64:
         6d:aa:f6:6b:c7:2d:3e:4b:35:a2:c7:4d:43:79:47:b4:e1:d9:
         5f:95:2f:fa:9f:b2:0e:fa:30:09:ca:ea:65:60:63:86:b4:d4:
         cc:51:5d:8a:b6:6a:a6:c5:e8:4a:ff:f1:ed:32:0e:6b:fe:69:
         ab:3a:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:53:12 2025 by rpki-client