Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/94cbee00-f90c-3b81-83df-909186d7a3e2.roa
File:                     94cbee00-f90c-3b81-83df-909186d7a3e2.roa (raw, json)
Hash identifier:          0CwCaTARFeU1+vgSrZws8SHqNyemh3PcFkZTTVi91po=
Subject key identifier:   0E:3D:33:12:4F:36:99:25:7C:14:9D:7C:FC:AC:5C:51:C0:2E:C1:94
Certificate issuer:       /CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Certificate serial:       010D0C9F432858482D5A8EBCFF45C4E9E9FC1540
Authority key identifier: 58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/94cbee00-f90c-3b81-83df-909186d7a3e2.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     7018
IP address blocks:        69.54.244.0/22 maxlen: 22
                          69.54.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8e:bc:ff:45:c4:e9:e9:fc:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b72a822-0e8f-45f9-a612-463da7164bf3
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=9914a19d-6a71-4272-8446-d99d6eb8c8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:71:e9:60:6e:57:75:c6:87:be:6d:3d:23:
                    33:2d:7a:ce:36:eb:21:c4:1e:f6:46:04:21:ad:4a:
                    58:17:b8:fa:0a:00:e2:45:40:dd:f3:49:28:40:6c:
                    bb:de:6b:d6:19:f8:8a:02:97:57:c6:85:2d:a1:af:
                    d1:25:ca:e0:e6:1c:43:44:3f:02:f9:55:cb:19:ac:
                    86:6e:31:de:0f:0f:56:55:b0:71:32:25:27:8e:fe:
                    8b:88:72:d1:8c:5a:ac:31:6d:9e:c1:f6:a0:7b:6a:
                    64:30:3a:75:47:2f:b0:5f:1f:94:ba:cd:a6:f7:6d:
                    d8:ec:7d:e7:1a:aa:d9:d3:f3:09:6d:63:fb:32:49:
                    21:6f:dd:42:c7:1a:ae:6a:84:61:1d:ff:a3:04:f1:
                    8a:03:5c:3f:3d:9f:89:71:1c:8f:0e:85:73:ef:2c:
                    1c:48:ed:72:bc:71:74:15:1d:07:67:88:72:0e:e9:
                    2f:fb:2d:73:1b:a3:19:15:4e:aa:f1:23:ad:55:ec:
                    6c:e5:f3:ef:ac:9b:7a:40:31:36:dd:54:87:4e:27:
                    9f:77:43:b8:88:bc:cc:51:9c:b7:4a:c6:f2:89:9a:
                    47:c1:ab:ec:17:92:fa:33:93:9f:65:dc:34:c5:a6:
                    e9:23:d7:76:9f:5d:64:15:69:57:7b:2b:17:2f:5c:
                    68:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3D:33:12:4F:36:99:25:7C:14:9D:7C:FC:AC:5C:51:C0:2E:C1:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/94cbee00-f90c-3b81-83df-909186d7a3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl

            X509v3 Authority Key Identifier:
                keyid:58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.244.0/22
                  69.54.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:58:9d:a4:cb:e5:b0:ef:ac:a6:9f:f6:a3:5a:9b:ae:45:
         96:f1:85:b9:21:7c:dc:19:e9:04:0f:c3:ac:51:29:4e:88:05:
         54:98:90:d1:9c:ba:f5:f6:ea:3e:ba:3b:3d:88:ec:f5:0f:90:
         13:4f:7a:57:18:53:7c:3a:2a:75:60:f0:b1:43:39:88:a4:af:
         df:8d:67:fb:54:96:8c:06:d4:18:3e:ab:e0:d5:86:c1:6b:fa:
         79:f2:6d:36:8b:21:70:ab:4c:ea:8d:27:a2:bc:8a:49:c6:3e:
         76:fb:dc:74:f0:39:80:f2:65:70:22:93:4f:58:96:28:0f:ed:
         33:43:95:b2:88:a8:64:9c:75:b2:22:6e:6a:34:11:f5:80:fb:
         6c:18:da:04:ed:50:9a:c0:c8:15:cd:33:5a:f8:68:5d:a0:34:
         55:1c:1a:46:7b:06:bf:d2:1b:1f:83:ab:4c:d7:10:25:d8:bc:
         ff:57:32:ea:5c:46:bf:50:16:92:ac:05:af:6c:87:31:1b:d8:
         25:ce:86:a2:17:e1:97:60:67:67:4a:4a:4c:3d:8e:b9:39:17:
         b5:ee:89:a3:e3:74:f3:b7:5a:28:17:60:cd:27:70:67:90:a3:
         16:d0:90:2b:9b:11:0a:6a:ba:79:34:1c:17:78:0f:e9:70:5a:
         1f:07:ad:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:24 2025 by rpki-client