Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa
File:                     abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa (raw, json)
Hash identifier:          Wd1K4H5Jxcut59rfhBDebSaCcotNUmo0bNEkKrtNy1A=
Subject key identifier:   5F:CF:DD:C4:47:6F:4D:77:99:FC:63:78:43:77:43:43:44:98:0D:EC
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F432858490CB16D22076B125FE76668E0
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     6505
IP address blocks:        200.30.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6d:22:07:6b:12:5f:e7:66:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=c09694be-4020-48f1-a487-1b3bf06365fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:39:86:f1:a2:d7:4c:f0:7e:9e:75:98:ae:
                    58:04:f7:a3:b9:2e:2f:dd:f0:a5:a4:b1:e3:a4:bf:
                    45:c7:8d:0e:c7:62:cd:07:66:27:e9:27:09:2d:f1:
                    e2:14:9b:04:6f:ee:e8:49:68:a3:4c:71:b1:e6:69:
                    ca:b6:26:ff:2d:0c:9e:fb:b0:d6:7b:30:32:a7:88:
                    dc:c1:17:ee:bc:88:70:6c:26:84:9b:c6:05:d6:82:
                    3f:74:61:8c:d4:a4:b8:5b:a4:fb:f8:37:56:2c:47:
                    5a:ae:24:c4:78:ce:5a:7b:97:b4:86:b3:5f:67:5b:
                    1f:e8:d1:7f:23:ad:c9:46:7a:08:46:35:e4:c0:78:
                    da:a2:23:a6:31:49:fa:35:60:c6:cb:36:f1:3b:b0:
                    47:7a:93:53:bd:47:d5:09:42:3f:4d:85:35:09:f8:
                    fc:6f:19:b3:f4:72:0d:a2:a9:cb:6e:6d:6a:a3:ef:
                    f9:5b:0f:6b:71:a6:d4:3a:38:5d:4c:c2:33:50:4e:
                    26:33:27:37:e5:1e:0e:0a:74:cb:83:1b:6b:5d:c0:
                    f1:ce:25:47:d9:58:ba:34:55:77:58:58:98:0b:61:
                    c2:a9:51:6b:81:de:39:89:61:c4:40:3c:91:c0:63:
                    41:71:f2:b3:18:a5:90:ae:7b:4c:fb:72:9a:05:0c:
                    73:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CF:DD:C4:47:6F:4D:77:99:FC:63:78:43:77:43:43:44:98:0D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:6d:ff:44:31:8e:f7:f4:72:64:c8:f9:ff:41:29:c9:48:c9:
         85:3a:8a:70:fc:5d:a6:2f:a3:ab:6b:23:df:27:b8:07:c6:88:
         47:e0:fc:9f:29:ec:50:a0:08:a4:f4:91:23:52:42:3b:81:aa:
         33:ea:ba:71:e6:4b:b1:2b:0e:5f:b4:86:b2:8b:f7:8c:02:3f:
         ea:2d:03:48:af:27:63:84:1b:af:3a:3d:a6:d2:be:82:01:13:
         66:51:23:3b:64:85:8e:4c:6a:46:ca:dc:56:f4:32:2a:d6:d5:
         41:68:0b:9e:79:29:b1:5c:f8:96:23:f0:cd:b9:29:27:08:38:
         4a:3c:46:c4:28:91:52:2e:d4:07:d9:ab:65:a4:94:ef:31:ad:
         3f:a8:da:bb:00:a1:0d:c3:7a:69:dd:1e:35:42:96:f4:0a:45:
         cc:af:5f:31:c5:d3:c3:4b:a5:65:98:5b:79:e3:b5:da:69:5a:
         86:3a:ff:1f:21:da:d1:6a:68:43:2f:38:8f:eb:b8:1a:bb:70:
         d7:04:ec:1e:89:2e:c7:fc:f3:29:55:2d:56:9e:f6:31:f6:8d:
         46:b2:c2:a4:90:a9:85:c6:c6:bb:59:b5:1f:80:2d:cd:72:3b:
         6b:1d:01:7e:85:4b:a8:4a:8e:d9:4f:54:3a:28:b4:85:8e:2b:
         61:8e:08:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:00:54 2025 by rpki-client