Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/88fa68b5-1bfb-3036-8fdb-75b76e78c0bb.roa
File:                     88fa68b5-1bfb-3036-8fdb-75b76e78c0bb.roa (raw, json)
Hash identifier:          w2Omcx/UZ+rSQlQH5Yp1ah7MmW9xfcsZra6RryiRos8=
Subject key identifier:   B1:05:D8:52:0F:7F:7A:1C:46:3B:F3:03:C4:05:4C:53:51:13:ED:4B
Certificate issuer:       /CN=d3a00337-0fdf-42e1-9343-424fd474da93
Certificate serial:       010D0C9F432858481C9A8A537EB4D04F8E0BA900
Authority key identifier: CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/88fa68b5-1bfb-3036-8fdb-75b76e78c0bb.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     27398
IP address blocks:        206.81.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:8a:53:7e:b4:d0:4f:8e:0b:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a00337-0fdf-42e1-9343-424fd474da93
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=70ea2dce-8ef8-45f1-8f60-964f87b7297d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7c:b7:96:8d:fa:e1:cd:c7:de:4a:19:ee:75:
                    6f:7e:89:a1:f5:b1:d5:99:89:4e:f8:72:32:6c:29:
                    00:24:1d:0c:a1:95:fc:bd:47:13:d7:bf:e5:36:1d:
                    10:ff:9f:df:9b:bb:35:e1:2c:d7:1a:29:6d:04:48:
                    52:4c:69:3c:d9:9e:34:94:12:bb:a7:43:f9:ab:33:
                    c9:a5:37:58:30:dc:25:f2:1e:7c:26:ac:25:02:de:
                    56:2e:df:97:a6:62:c9:a7:aa:bb:5e:83:04:96:ab:
                    71:b1:01:2f:b9:8d:3a:f7:9e:59:ea:08:01:14:81:
                    9c:7b:cd:23:76:e5:a7:b6:c5:16:d3:a0:bc:6b:cd:
                    32:4b:65:ff:d6:97:0a:6e:8f:fb:51:05:1e:a5:26:
                    5e:78:6e:69:ce:ee:1b:1d:d0:1e:75:d6:ad:65:65:
                    e4:44:2d:eb:16:74:da:ba:fb:09:86:26:e7:f5:d9:
                    98:a6:02:1c:55:80:a7:79:4d:6b:6d:54:31:d1:8c:
                    a9:5b:20:2d:7a:a2:8c:ac:ea:62:34:2c:7f:91:93:
                    e0:92:fa:a4:18:bb:dc:28:00:b5:d2:7f:39:e7:4c:
                    8d:f9:f4:5f:47:f4:a8:12:1d:ac:44:62:32:62:0a:
                    aa:e3:4a:cd:7b:9d:08:20:3b:35:27:69:31:4f:12:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:05:D8:52:0F:7F:7A:1C:46:3B:F3:03:C4:05:4C:53:51:13:ED:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/88fa68b5-1bfb-3036-8fdb-75b76e78c0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl

            X509v3 Authority Key Identifier:
                keyid:CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.81.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:52:34:40:d7:aa:1b:ed:d3:b1:32:9c:c3:b6:b6:f0:85:8b:
         a6:5a:3a:bb:86:2c:be:14:96:28:64:fb:9c:bd:99:fc:30:db:
         ef:02:6f:33:15:1f:b1:1e:d8:eb:96:ed:17:85:43:a6:08:12:
         79:3a:e5:2b:37:2b:db:5c:6c:f9:5e:8e:aa:10:4a:a1:a5:b7:
         54:f3:a0:a9:ba:b5:19:34:df:54:81:47:2a:c0:df:60:47:ef:
         e3:71:d2:6a:ea:f5:99:76:88:88:38:24:88:34:0c:bf:51:a4:
         59:54:ec:59:53:9d:f4:db:04:76:c4:22:3d:13:fc:7a:10:07:
         b1:17:7d:56:0b:ef:f5:6c:77:f4:fd:50:86:91:6f:43:38:b6:
         7a:19:ce:da:eb:f1:34:c2:b7:74:8d:b0:34:86:a2:0f:de:8b:
         45:84:b7:45:5d:d0:82:6e:68:cb:28:21:f4:1f:8b:9a:d5:d8:
         b9:f5:8b:f0:85:0f:05:07:84:09:3c:67:f6:04:df:fe:4e:7d:
         f0:28:04:1d:0b:d5:5e:98:86:26:fa:f0:c9:2c:49:f7:f7:9a:
         19:3b:09:d0:d7:bd:6d:00:f3:a1:23:2b:d7:ac:34:e6:35:1f:
         cd:a5:af:f9:a6:09:86:2d:e0:6b:d7:70:f3:7a:28:ee:3c:cb:
         fb:a8:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:42 2025 by rpki-client