Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/6be9e0e2-cc84-3298-9831-8eaac9957de9.roa
File:                     6be9e0e2-cc84-3298-9831-8eaac9957de9.roa (raw, json)
Hash identifier:          7xWkdPOUP9qQGAAEyIvujnXmGMbZQFdCuE4vPkUfPeI=
Subject key identifier:   D6:86:39:E6:7A:53:FF:39:19:4E:CD:51:54:88:C6:45:C4:B4:D2:3F
Certificate issuer:       /CN=31671c23-3278-409b-837d-7dfe69606940
Certificate serial:       010D0C9F432858490F7BFBFB55ACC3DFC4A135C0
Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/6be9e0e2-cc84-3298-9831-8eaac9957de9.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        170.62.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:fb:fb:55:ac:c3:df:c4:a1:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31671c23-3278-409b-837d-7dfe69606940
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=af871c79-53b5-4b63-9d7b-ba85392c78fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:99:09:38:39:a4:f0:3a:45:9b:46:8a:38:e8:
                    66:a1:b8:08:be:88:2a:a6:45:e2:c8:f5:3d:f1:3c:
                    e6:7e:66:83:7e:13:16:3e:50:4a:f2:4a:a5:a0:4b:
                    e5:97:df:38:09:eb:59:03:f7:5c:99:90:bb:33:3b:
                    71:ef:78:e4:39:13:02:f2:31:db:71:f3:8d:fa:7b:
                    0f:c8:a7:80:02:6e:2d:36:12:e3:26:b8:c4:ce:cc:
                    9e:4c:c9:95:fe:22:86:96:91:a3:8b:bf:4c:82:17:
                    1a:4d:27:c7:7b:88:d7:a9:c4:f8:1c:9a:aa:80:52:
                    2a:d6:59:10:88:6c:ca:f2:15:06:c3:6c:cf:45:19:
                    ff:f8:3f:1d:11:4e:eb:74:54:46:76:88:95:ba:71:
                    8b:fb:68:80:44:b0:23:e6:94:5f:c3:c8:a8:1f:0e:
                    03:1d:dd:92:16:b8:73:0b:4c:5f:74:f4:4b:11:83:
                    8e:d8:5f:0c:73:2a:fd:7a:ec:3e:3a:2b:18:bd:5a:
                    56:e7:b0:d5:80:40:23:b9:35:b4:51:fa:e1:04:ed:
                    88:83:ab:77:c6:d1:cb:c4:15:9d:f5:62:5e:d1:6e:
                    1e:bd:e0:84:79:22:92:2c:31:4b:fc:3e:87:d6:b4:
                    c5:83:8a:75:b5:30:1b:09:6e:22:f1:ec:67:43:ef:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:86:39:E6:7A:53:FF:39:19:4E:CD:51:54:88:C6:45:C4:B4:D2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/6be9e0e2-cc84-3298-9831-8eaac9957de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl

            X509v3 Authority Key Identifier:
                keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:22:14:ba:37:55:3e:51:46:7c:45:0a:b6:3e:3f:e5:0e:87:
         9e:0d:9d:38:c7:df:06:e2:ad:af:ab:1b:27:ac:10:3b:7d:34:
         10:5b:04:93:ee:3d:ab:f3:18:ce:40:9e:ee:0a:c9:83:1b:0b:
         ea:4f:3c:f0:c4:31:8f:d2:98:2e:1a:9c:79:9d:de:c8:35:00:
         7d:8e:8c:df:f4:2a:4f:88:88:80:f8:22:e6:af:c8:69:e5:4b:
         76:aa:74:54:96:46:d5:2f:8f:5f:bd:ac:7e:ce:52:ab:ed:9c:
         2b:22:6d:ad:85:ed:ed:0d:01:da:8e:a9:a4:16:ea:4a:49:9d:
         24:77:1d:b1:0c:38:39:25:ef:0b:34:1d:c0:9a:e0:13:2d:4c:
         ed:cf:91:85:35:05:5b:1e:a6:c7:a5:c5:1b:47:ab:6f:fd:73:
         b9:de:ad:bd:3a:60:70:db:de:bc:d8:75:4a:8e:b2:e7:af:55:
         31:ee:35:26:28:5b:e3:c2:ab:bb:d3:48:62:08:cd:77:f9:16:
         8c:32:f1:b8:76:53:a3:3a:41:95:46:f7:bf:6b:cd:6b:68:6a:
         77:0f:92:9f:b4:07:f5:4c:e7:89:6f:a8:28:7f:07:58:2c:56:
         66:1a:67:3a:bd:e0:6f:74:8b:b4:c6:b4:a1:82:34:56:f1:dc:
         74:69:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:53 2025 by rpki-client