Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa
File:                     dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa (raw, json)
Hash identifier:          H63TLSdEsVC6Up+cbs4Wps2sKKTip2OSjNRn45YHMY0=
Subject key identifier:   81:A2:DC:B7:1B:A4:87:DD:21:0C:C4:B5:FF:C0:A2:AE:57:69:FC:02
Certificate issuer:       /CN=378928e8-c134-40aa-9858-3838053cbbe9
Certificate serial:       010D0C9F432858494733E67E9CA82F52D1D70780
Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     12261
IP address blocks:        208.118.192.0/22 maxlen: 22
                          208.118.196.0/22 maxlen: 22
                          208.118.200.0/22 maxlen: 22
                          208.118.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e6:7e:9c:a8:2f:52:d1:d7:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=3f53c461-78c0-443f-b237-8fd104c5034f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fc:c4:28:b6:d1:48:4f:e0:25:6b:78:7c:09:
                    eb:f5:fb:2c:34:f0:ca:d2:0a:f9:66:7e:9f:e0:aa:
                    3f:0e:70:a3:29:30:79:8f:3b:86:cd:74:3f:35:28:
                    8c:06:23:57:6e:b4:91:90:26:3a:db:05:fd:59:d2:
                    56:ca:d3:b4:ae:48:46:d3:b9:aa:02:d8:89:de:20:
                    98:35:60:9f:18:5e:be:b1:30:c9:43:ef:e4:8b:ba:
                    30:68:61:ce:c5:dc:54:f9:44:5e:78:8b:0a:ab:89:
                    01:c3:e4:29:61:b9:9b:fe:e1:1b:16:86:14:f2:42:
                    d3:69:27:b8:7f:90:97:55:05:e8:d8:2e:22:c1:f9:
                    8c:00:80:34:a6:0d:13:24:c5:56:c0:32:2c:f9:16:
                    c3:6b:b6:74:7e:58:35:8f:d7:5b:ef:11:fe:d6:4e:
                    e9:39:3f:dd:53:65:9a:71:99:0c:ca:58:f2:92:5f:
                    0f:74:a1:c9:40:70:7c:fe:f8:2e:50:8a:c3:bc:67:
                    cc:3f:31:f7:71:3f:07:70:9a:b7:5f:81:fa:35:ee:
                    1f:2e:39:41:39:f8:47:eb:ae:ea:24:05:61:44:dc:
                    ce:4e:39:93:20:79:0b:1c:5e:8a:2c:9a:5b:9c:92:
                    71:69:f2:da:8e:02:9e:13:87:eb:a7:56:78:d8:c9:
                    b3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A2:DC:B7:1B:A4:87:DD:21:0C:C4:B5:FF:C0:A2:AE:57:69:FC:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl

            X509v3 Authority Key Identifier:
                keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.118.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:62:22:f6:e5:8e:6e:80:b2:bc:fb:a1:fb:85:02:bd:0e:ca:
         b1:f6:7f:10:2d:7c:e5:2e:23:40:1e:2d:9f:16:1f:87:b8:d7:
         5b:cc:8c:af:1d:62:ed:56:d1:08:46:b9:45:ec:3b:f5:60:ba:
         e0:70:21:a8:55:0a:3f:3b:7c:20:05:eb:b0:14:b5:42:f2:9d:
         8d:20:d2:37:70:d7:81:24:be:96:f0:a4:cf:fd:e1:75:84:42:
         45:2e:82:a1:2d:4d:37:8d:80:4b:b0:5d:7e:c3:34:92:13:c6:
         6a:59:d9:59:0f:cd:29:e5:81:45:66:ad:88:e9:51:7c:3d:2c:
         8d:1a:9f:4c:00:b1:7d:21:96:ed:77:e6:d8:5a:4a:60:46:28:
         77:bd:56:35:42:e4:61:58:bb:93:ea:e2:59:9c:bf:d4:7d:31:
         c9:07:95:66:6a:1a:07:41:96:1e:8a:06:0c:35:44:44:f5:a1:
         a7:ab:aa:0d:b4:84:24:cd:8d:e2:03:1b:ba:e3:d3:3a:34:76:
         4f:24:e3:8b:2f:f4:ac:19:b7:72:46:e2:4d:7f:bb:d1:f8:c8:
         ed:15:39:19:76:2c:f1:5e:87:59:3f:80:b3:b8:10:84:d6:c0:
         07:d2:9b:f0:2d:80:c0:6f:03:8b:13:65:bd:e6:8d:09:b1:46:
         49:7e:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:19:35 2025 by rpki-client