Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
File:                     60c05e3f-1816-3cff-8958-8504b17b798d.roa (raw, json)
Hash identifier:          5nEH2dm6UQp2pI6qmeRpUxs19zFzN/9ml9MtDtav1xk=
Subject key identifier:   9E:0C:DF:8E:70:19:99:DF:8F:D3:3C:B6:6D:56:1D:1F:CF:B4:89:36
Certificate issuer:       /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial:       010D0C9F432858487325B2B1605FFC1835AF6840
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     394745
IP address blocks:        170.75.160.0/20 maxlen: 20
                          172.81.176.0/21 maxlen: 21
                          2602:ffb6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:b2:b1:60:5f:fc:18:35:af:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=8c22a65d-85b0-4ed8-943b-91a349ab7a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3c:b5:3e:8a:2b:01:07:65:43:82:90:28:bf:
                    82:a2:5d:e0:93:63:a7:74:9c:e4:d1:76:45:15:db:
                    69:96:ef:28:9c:b3:e3:49:3c:32:cc:06:90:8d:67:
                    66:2b:e1:38:d8:bf:5c:58:0f:9e:63:d0:99:0d:17:
                    d2:db:e9:3d:25:99:d1:bd:c4:38:21:ca:01:83:d3:
                    cb:df:8c:31:ca:4e:3e:2b:8e:25:cb:2e:1c:e1:cf:
                    10:3c:16:49:db:0d:d4:ba:20:ef:0b:55:4f:47:77:
                    41:ca:01:c4:d4:d8:5e:f3:1a:b8:a3:e1:f4:cf:75:
                    75:31:3d:3f:3e:66:c3:20:13:83:10:be:0a:df:d4:
                    ae:7d:1c:76:fb:28:0c:d8:36:24:bb:49:6d:bb:eb:
                    95:66:37:a2:8c:9b:20:8d:2d:72:37:78:4c:2d:80:
                    fd:fa:7b:4b:df:d2:ba:48:79:c0:b5:75:3a:8a:5e:
                    0b:b5:c0:0d:56:a0:3f:c2:2c:d4:2a:a8:a2:3a:17:
                    0e:57:4c:5b:15:12:f5:8a:66:90:bc:db:86:ff:99:
                    e0:7f:4f:cb:fd:18:3c:f8:c3:ff:72:dc:1a:f8:e4:
                    26:d2:d8:70:ce:1d:3e:af:41:38:f5:38:b1:7e:18:
                    5f:bf:26:6a:e5:73:f1:c0:bc:b1:bb:a1:ac:cb:d2:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0C:DF:8E:70:19:99:DF:8F:D3:3C:B6:6D:56:1D:1F:CF:B4:89:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl

            X509v3 Authority Key Identifier:
                keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.160.0/20
                  172.81.176.0/21
                IPv6:
                  2602:ffb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:b9:11:e9:f6:a2:9a:ae:ce:31:6e:19:83:53:69:fd:ad:
         65:5b:5d:fd:f3:22:17:c4:e1:ef:a6:ad:dc:ee:48:b8:61:69:
         3f:e7:f1:00:2a:e6:da:51:af:5a:74:f1:c1:ce:bb:c7:cb:fd:
         f1:91:7f:f5:fb:d3:be:28:40:df:03:68:1a:24:ef:4b:3f:1f:
         65:1c:e2:92:9b:03:6e:3d:8f:48:05:ff:19:e1:8d:81:7a:a1:
         8e:3c:13:7a:f1:12:55:26:32:70:61:2b:df:9f:f2:4e:77:66:
         01:6a:24:bf:22:cd:2d:b5:c3:61:4b:a6:6e:64:9b:4b:31:03:
         ad:40:75:d3:96:02:56:5a:78:dc:9b:c7:84:9b:e3:41:52:c8:
         30:1d:23:35:1d:1d:46:a1:37:1c:cb:61:b7:c1:b8:ec:01:7b:
         e3:32:82:f3:16:62:a9:85:cd:82:39:84:11:36:c6:48:37:a0:
         67:f4:14:ba:d5:9d:2d:ee:e6:7d:83:26:cf:c8:c1:c4:cb:7c:
         2c:cb:57:de:35:05:81:af:ec:6f:5c:28:ac:63:ad:96:0b:d6:
         a5:f7:6c:03:45:af:eb:66:cd:69:89:33:13:ed:b4:7b:b4:3c:
         0a:dd:d8:c3:07:b4:69:5b:b8:1a:1e:57:80:c1:92:b6:53:64:
         23:d6:e0:fb
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEhzJbKxYF/8GDWvaEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZhNjA0YzItYmQ5Yy00ZDBlLWJmYjAtZGFhYzhjZDFj
M2ZjMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
OGMyMmE2NWQtODViMC00ZWQ4LTk0M2ItOTFhMzQ5YWI3YTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTy1PoorAQdlQ4KQKL+Col3gk2OndJzk0XZF
Fdtplu8onLPjSTwyzAaQjWdmK+E42L9cWA+eY9CZDRfS2+k9JZnRvcQ4IcoBg9PL
34wxyk4+K44lyy4c4c8QPBZJ2w3UuiDvC1VPR3dBygHE1Nhe8xq4o+H0z3V1MT0/
PmbDIBODEL4K39SufRx2+ygM2DYku0ltu+uVZjeijJsgjS1yN3hMLYD9+ntL39K6
SHnAtXU6il4LtcANVqA/wizUKqiiOhcOV0xbFRL1imaQvNuG/5ngf0/L/Rg8+MP/
ctwa+OQm0thwzh0+r0E49TixfhhfvyZq5XPxwLyxu6Gsy9JJbwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFJ4M345wGZnfj9M8tm1WHR/PtIk2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2
MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFjOGNkMWMzZmMvNjBjMDVlM2YtMTgxNi0z
Y2ZmLTg5NTgtODUwNGIxN2I3OThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWZhNjA0YzItYmQ5Yy00ZDBlLWJm
YjAtZGFhYzhjZDFjM2ZjLzFmYTYwNGMyLWJkOWMtNGQwZS1iZmIwLWRhYWM4Y2Qx
YzNmYy5jcmwwHwYDVR0jBBgwFoAU6uuVQNAUCiOlEBgO4kiYg3XNvEgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFj
OGNkMWMzZmMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQEqkugAwQD
rFGwMA4EAgACMAgDBgQmAv+2ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATpbkR6faimq7OMW4Zg1Np/a1l
W1398yIXxOHvpq3c7ki4YWk/5/EAKubaUa9adPHBzrvHy/3xkX/1+9O+KEDfA2ga
JO9LPx9lHOKSmwNuPY9IBf8Z4Y2BeqGOPBN68RJVJjJwYSvfn/JOd2YBaiS/Is0t
tcNhS6ZuZJtLMQOtQHXTlgJWWnjcm8eEm+NBUsgwHSM1HR1GoTccy2G3wbjsAXvj
MoLzFmKphc2COYQRNsZIN6Bn9BS61Z0t7uZ9gybPyMHEy3wsy1feNQWBr+xvXCis
Y62WC9al92wDRa/rZs1piTMT7bR7tDwK3djDB7RpW7gaHleAwZK2U2Qj1uD7
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:18 2025 by rpki-client