Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/c6b94fbf-7bd3-314f-bcf1-5d23ba3ccd53.roa
File:                     c6b94fbf-7bd3-314f-bcf1-5d23ba3ccd53.roa (raw, json)
Hash identifier:          b+ixhBhfrWPx6vjxZ0ut+2zEQ1EwJ8xSl0EvjteGzIU=
Subject key identifier:   49:8F:94:C2:EA:C9:BC:5E:D3:8E:51:BF:0A:11:7F:59:CF:4F:26:A9
Certificate issuer:       /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Certificate serial:       010D0C9F432858480EA5124A27691444E626E200
Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/c6b94fbf-7bd3-314f-bcf1-5d23ba3ccd53.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     7029
IP address blocks:        167.253.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:12:4a:27:69:14:44:e6:26:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=9e0097d7-1fcc-40f1-beb9-1836cb3c27b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8e:f1:d8:1e:8e:e2:5b:b7:59:93:04:87:67:
                    9b:68:be:37:7b:40:b4:25:f1:e2:2b:50:70:e9:87:
                    ae:de:59:ec:9d:1a:06:6a:be:f9:a3:cc:62:6e:b7:
                    7c:34:98:0c:a0:98:0b:52:e2:97:db:f2:4c:01:61:
                    22:0d:39:0b:ca:c0:96:41:47:3d:c3:8d:b9:c1:b3:
                    93:02:b8:b9:36:70:1d:81:50:f6:d3:43:47:61:6f:
                    f9:3c:fa:1b:23:3a:d9:0e:15:f6:c9:23:bd:48:0b:
                    8a:23:92:41:5a:d2:5f:bd:01:57:b6:c9:2f:c7:72:
                    6f:c4:2c:15:a7:0d:c3:0c:02:5d:cb:87:f1:fe:9a:
                    f3:fd:f5:75:e0:7c:3e:72:c3:89:44:b3:01:cc:d3:
                    8b:3c:1b:f6:70:16:1e:29:01:23:2b:19:d2:5d:a2:
                    16:49:2f:8e:41:dc:89:5b:17:0c:23:67:cd:b5:ad:
                    8b:af:a7:17:25:06:ad:fb:68:58:50:27:e0:9b:cd:
                    8f:7e:6a:77:4d:0c:38:79:0e:9c:b5:98:41:8c:38:
                    ef:05:ae:e3:55:7a:a8:ba:3e:70:be:7a:1d:16:21:
                    f4:ee:c5:1b:5c:1b:e2:08:a8:6d:63:73:f1:36:b0:
                    69:55:7d:39:d9:29:f0:be:d3:b7:12:fd:5d:93:92:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8F:94:C2:EA:C9:BC:5E:D3:8E:51:BF:0A:11:7F:59:CF:4F:26:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/c6b94fbf-7bd3-314f-bcf1-5d23ba3ccd53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl

            X509v3 Authority Key Identifier:
                keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:45:b2:b0:a2:6f:80:e7:f9:94:0e:d5:c7:4c:43:f4:43:
         1e:f3:82:32:42:1c:8a:d8:c4:1e:6f:62:1c:7d:c2:aa:b0:13:
         60:15:56:cc:bc:74:7b:31:44:d0:d0:6b:cc:cb:70:8b:7f:12:
         a8:b5:22:27:f8:b6:39:51:19:98:ef:47:f4:db:97:d0:1c:95:
         7f:7f:91:33:e3:e6:96:67:30:0f:ee:ca:93:c1:91:c1:14:0c:
         3e:78:47:4f:82:7e:75:ee:15:00:ab:6d:57:9d:90:23:14:bc:
         72:7e:ef:39:d0:7b:28:e6:d5:f3:ad:ee:77:fe:ef:46:01:80:
         73:11:6b:f8:e7:9b:4f:ae:bb:14:dd:6a:d0:82:f0:12:30:88:
         b7:f2:26:d1:17:9e:07:86:82:83:8a:f4:2e:27:5c:d2:50:6e:
         84:44:69:18:62:ae:41:40:ad:8f:7d:f2:5c:ba:29:88:ed:76:
         86:63:1e:14:ee:f3:55:a6:61:dc:7d:ec:7d:1a:b1:98:74:6c:
         6e:01:5c:f3:ef:82:b7:fd:25:43:cf:6e:0c:60:f7:1c:f3:b5:
         a4:79:31:ff:b9:d6:7c:d2:4a:74:86:b4:a4:53:ad:48:6f:67:
         43:56:d7:ef:a3:bf:bc:97:56:d5:a7:b5:6b:46:76:5b:38:73:
         19:11:88:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:30 2025 by rpki-client