Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa
File:                     6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa (raw, json)
Hash identifier:          oZe2vYLO/tacAHqQqfYGIo0l4AGFVnvLbtJJluCw7Ow=
Subject key identifier:   01:75:B4:A4:38:33:8A:E5:BC:2C:0B:E1:1F:D0:56:2F:87:B9:E2:3C
Certificate issuer:       /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
Certificate serial:       010D0C9F43285848DEA119EA45F4862E317F7280
Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     53429
IP address blocks:        199.180.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:19:ea:45:f4:86:2e:31:7f:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=1a633733-c939-41be-b1f5-1256ad13b8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:37:64:84:3b:3c:f8:c0:93:24:e6:c7:ff:
                    50:10:f7:46:bf:52:21:44:88:77:32:a2:55:7c:11:
                    88:78:16:e0:21:04:1b:ec:ae:b0:71:b1:7d:31:66:
                    c0:0a:a9:5a:e0:ec:07:fb:06:9d:3e:78:2c:f3:08:
                    aa:92:68:36:89:90:94:21:10:20:38:8a:5e:59:a4:
                    be:9d:23:64:67:09:5e:dd:2b:62:36:44:35:ee:ea:
                    f5:ba:90:5e:dd:81:aa:87:7a:6f:9b:b2:57:b9:dd:
                    c0:ca:fe:2b:98:07:f6:ca:34:eb:15:96:d1:1d:dc:
                    7f:63:73:d9:3e:ba:4d:06:2b:4a:45:f0:d7:c8:4a:
                    65:1a:cd:c3:9e:cd:f3:fe:25:d7:fa:de:ad:70:50:
                    fc:ee:fd:dd:9c:7b:21:d6:14:d5:30:7c:b9:cb:3c:
                    47:12:3a:b4:60:f8:4d:87:6a:13:66:a2:c0:f7:e1:
                    66:65:6b:8f:43:e7:15:9b:bc:6a:46:21:40:6b:f0:
                    9b:62:98:a8:b1:41:35:2b:c2:e3:70:16:cb:07:de:
                    c2:6d:c5:13:7a:75:b8:0d:52:50:f5:89:12:3d:26:
                    07:ce:ca:4d:3e:e2:1f:e8:f3:97:0d:b7:f9:39:db:
                    c0:be:51:d7:8b:e6:28:85:57:bc:fe:e2:68:1e:86:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:75:B4:A4:38:33:8A:E5:BC:2C:0B:E1:1F:D0:56:2F:87:B9:E2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl

            X509v3 Authority Key Identifier:
                keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:2f:50:6c:7c:8a:07:82:eb:38:e8:f5:c8:df:4b:20:7c:cd:
         62:7f:d1:e2:d1:ae:30:e5:2b:39:d1:18:b3:45:fc:56:ba:46:
         2b:84:3b:7e:4d:95:b5:5e:76:b6:4a:d1:aa:f2:a2:42:a6:cb:
         eb:dd:29:90:ab:7d:7e:4c:10:6b:ff:9a:29:23:55:61:6b:29:
         49:8a:7e:21:de:e8:e9:e8:95:9c:32:91:71:2f:6e:1e:ed:22:
         dc:78:5f:f9:50:97:b8:3c:eb:8a:3c:a2:4a:26:3c:d8:1a:05:
         31:6a:b8:bb:91:a7:c3:d1:42:87:f0:ac:0e:85:66:3f:4c:9e:
         f1:ef:9c:44:1e:8d:5b:b5:54:f0:26:56:66:4b:70:97:5f:81:
         1c:b7:08:fe:ec:2e:fa:d6:04:26:d3:33:6b:d6:9a:50:a4:de:
         a3:d7:27:12:30:25:88:e7:c2:4d:90:46:3a:52:15:36:f0:14:
         94:9a:4c:dd:38:f7:a2:ff:48:de:00:a7:ae:2d:fe:70:db:7d:
         9b:48:29:51:e9:e2:e5:37:92:6e:ad:25:bb:2c:87:6b:d3:7e:
         c2:ab:1f:69:5e:8a:bf:7d:c0:fd:e1:9e:47:3c:ae:5a:b4:f7:
         65:bd:3b:20:f1:3b:87:15:0c:65:ca:65:9e:3e:41:26:46:3e:
         d0:e5:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:44 2025 by rpki-client