Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/8dd28c05-4117-3fd1-8821-8081d349d8d6.roa
File:                     8dd28c05-4117-3fd1-8821-8081d349d8d6.roa (raw, json)
Hash identifier:          +gYIE5w2kH3mqadotqdcQzACVPQOOxNQKGt89O3HzG8=
Subject key identifier:   B0:B9:1B:EB:B9:2C:81:8F:20:11:50:BB:1D:9B:1E:33:9D:F7:AC:B7
Certificate issuer:       /CN=a6de61ac-9f9a-4bc7-884b-62b3c2848a5e
Certificate serial:       010D0C9F432858482BF54C30C97AF68E96767740
Authority key identifier: 72:EB:B7:4E:24:B9:99:5B:0D:41:BD:EF:ED:CF:0D:BA:63:C5:2A:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/8dd28c05-4117-3fd1-8821-8081d349d8d6.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     32148
IP address blocks:        206.188.60.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:4c:30:c9:7a:f6:8e:96:76:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6de61ac-9f9a-4bc7-884b-62b3c2848a5e
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=62d36e6d-69ab-4544-a8b2-8f3c81a6ae3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:ad:4e:f2:00:3e:3f:c5:60:54:f5:40:24:
                    03:c7:b8:19:54:a7:be:67:cc:3e:51:f7:be:aa:59:
                    27:58:e6:c1:6c:f2:c4:c9:2f:0a:27:c4:45:75:65:
                    62:fa:b6:15:51:32:24:e8:4b:e7:f4:46:07:38:7d:
                    9b:38:24:fb:33:bb:8e:26:27:2b:d9:a4:6d:86:72:
                    df:45:ef:78:90:30:29:f2:36:03:f7:78:3c:cc:68:
                    32:d4:a4:3a:1e:25:10:53:e1:0e:3e:92:59:7c:9c:
                    fa:79:28:68:f8:df:8a:dc:61:8d:7d:ca:de:ac:04:
                    3d:93:58:f6:20:3d:67:8f:f5:9e:90:68:11:9d:19:
                    6c:8d:b0:0b:0d:41:96:b9:ca:b6:08:00:56:e8:58:
                    4c:29:56:a2:80:93:90:33:85:ca:5d:a3:5c:e2:ba:
                    51:02:5a:f4:c6:7b:d4:52:c5:59:a6:1f:98:af:7a:
                    1c:e9:a3:bc:b3:cb:3b:5f:32:22:f8:0a:b1:66:f0:
                    1c:b5:47:0d:e5:e7:80:47:e0:a7:ec:a4:92:df:77:
                    39:b6:73:32:ac:48:03:e4:b2:da:6f:53:29:33:19:
                    38:a2:b3:8d:7d:e0:17:e8:88:1f:b9:23:82:3c:ca:
                    95:65:f9:ae:8d:89:36:99:24:a5:30:65:fc:06:0f:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B9:1B:EB:B9:2C:81:8F:20:11:50:BB:1D:9B:1E:33:9D:F7:AC:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/8dd28c05-4117-3fd1-8821-8081d349d8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.crl

            X509v3 Authority Key Identifier:
                keyid:72:EB:B7:4E:24:B9:99:5B:0D:41:BD:EF:ED:CF:0D:BA:63:C5:2A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:13:41:43:ee:8a:00:04:8a:43:35:db:74:10:14:02:19:
         58:cb:a0:d0:60:73:19:25:f6:10:a2:0b:a2:5d:97:2c:ce:b2:
         7c:28:42:5e:9c:37:e3:21:64:a8:90:3f:b6:22:e4:0d:e7:2a:
         25:a9:56:cd:92:34:9f:a1:13:1a:c2:67:1f:0b:f5:52:3c:02:
         aa:ff:3b:89:ae:9c:08:c2:a1:b6:98:29:53:38:54:d8:cf:66:
         a4:fd:4b:51:4d:48:af:2c:13:9d:be:76:43:22:84:0d:0e:e4:
         f3:c9:83:d0:b0:55:d4:6d:69:24:75:d6:83:62:c7:92:8b:04:
         8c:ce:e6:57:65:3a:a3:d5:8a:81:e6:27:75:89:0e:f7:29:32:
         2b:23:85:96:c3:7e:51:77:1e:db:66:76:38:10:06:9a:4f:86:
         0e:f4:d5:e3:73:64:89:e0:f2:fd:ae:17:75:e9:27:7d:b0:55:
         b9:df:0d:f1:a9:d7:c5:ac:de:e6:d2:bd:01:bb:be:7d:95:6b:
         0f:c3:02:20:5a:9d:c5:e9:3d:26:a6:0d:8c:4b:48:c4:8f:e4:
         7c:19:cd:f2:ea:24:d3:6a:31:f0:01:bb:e1:92:66:e4:ea:ce:
         39:d7:b3:ab:d5:48:13:19:de:fe:c1:1c:d6:9a:79:de:76:7c:
         e1:04:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:54 2025 by rpki-client