Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/1b2b05f4-2df1-3ec4-8897-6f456902ef2f.roa
File:                     1b2b05f4-2df1-3ec4-8897-6f456902ef2f.roa (raw, json)
Hash identifier:          1lX/20cg68EvPh/R80MCjeo4gE2sehGqecz6ys8+2IE=
Subject key identifier:   91:3E:83:5A:09:23:D4:56:C1:D4:09:20:E9:C6:DE:F5:9C:02:98:32
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285847E78F546F424A02BD1E273540
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/1b2b05f4-2df1-3ec4-8897-6f456902ef2f.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     401307
IP address blocks:        204.25.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:54:6f:42:4a:02:bd:1e:27:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=dbab610d-d6e7-42cb-8696-6c9fad994467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4b:ce:09:08:74:07:bf:b1:b7:49:e9:80:90:
                    d9:46:1d:c3:11:f8:c7:27:93:55:e5:1a:57:4b:a3:
                    8f:40:3b:99:10:7c:81:5e:c0:ce:ca:87:87:68:17:
                    51:11:c8:f9:20:4a:53:75:96:d1:c1:5a:26:06:e6:
                    05:ae:1d:a9:f6:c1:be:2c:f8:9b:c3:62:71:d3:99:
                    d5:7a:e3:50:b2:83:c3:71:d4:5b:3a:c0:c6:5e:d5:
                    e0:52:bb:8e:a2:8a:4e:3d:d1:c3:30:8e:67:5f:a2:
                    59:f6:e0:9b:d2:76:6f:84:c2:0c:5a:29:47:1c:22:
                    d1:bf:76:c2:18:60:52:07:e6:cf:c3:74:3b:fd:47:
                    53:2f:e8:9f:3d:4e:29:6a:d6:fa:d3:9d:a9:0d:5a:
                    e4:31:0d:f0:af:81:6b:da:29:6d:bc:62:72:b6:5a:
                    5c:0d:35:c3:d1:6e:87:5c:5f:28:4a:58:c8:f4:34:
                    9b:84:de:54:99:e3:29:83:a4:03:2d:b8:2e:55:f3:
                    69:8e:35:81:ba:55:64:25:cc:dc:82:bb:0f:21:4c:
                    85:3c:ae:17:32:11:da:b8:61:34:6d:0e:f5:cd:17:
                    4e:8e:d5:ef:ca:fe:3a:dc:61:77:b9:3a:69:e7:be:
                    dc:92:c3:d1:ce:54:ca:36:6a:86:84:49:cd:96:b9:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3E:83:5A:09:23:D4:56:C1:D4:09:20:E9:C6:DE:F5:9C:02:98:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/1b2b05f4-2df1-3ec4-8897-6f456902ef2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:3c:92:b7:2a:2a:21:ed:c9:88:7e:7e:8f:f5:70:0f:66:
         1a:b8:d1:65:85:5b:df:b8:2e:75:55:35:f5:a6:e5:64:d0:d8:
         6b:f8:76:e6:2e:46:c8:55:04:69:fa:72:7e:cc:9a:b9:2c:31:
         6c:c6:dd:b6:aa:44:f2:9f:72:f6:a7:b0:c6:20:a8:ec:2a:fb:
         11:6e:6d:7d:ae:e1:40:8c:59:b4:ba:ec:d5:d6:20:0b:32:2f:
         0c:d6:da:df:ef:0f:55:01:60:28:e3:74:ca:96:53:6b:5b:f9:
         22:91:f4:9c:6e:5a:60:5c:eb:67:3d:d1:de:c2:2d:18:51:15:
         b4:3e:5c:c6:dc:2d:9c:61:f5:3a:4a:0c:9a:21:c1:54:83:ae:
         bf:e4:bb:9c:bc:90:cf:68:19:a8:67:ff:d4:60:2b:ec:74:4b:
         00:50:d9:b1:67:f9:17:b4:d2:10:98:7a:1b:e8:06:7c:f8:2c:
         89:3f:d9:03:ce:92:ea:54:4c:6b:1c:29:d4:df:15:1a:2d:a4:
         11:49:7d:68:19:c8:22:57:34:95:f8:0a:df:de:cb:aa:76:c9:
         b9:e7:23:ff:5b:4f:71:d1:a6:b2:c5:3c:3d:c5:68:43:e9:29:
         ea:95:33:26:7c:a2:50:4f:5a:2a:2b:4d:e7:9f:c0:d2:6b:30:
         80:70:9b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:03 2024 by rpki-client on console-ams.rpki-client.org