Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa
File:                     0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa (raw, json)
Hash identifier:          Bi7+MByC746VyYiaE3e0kJByA8BtX0/D38SL93qAkzY=
Subject key identifier:   B0:A8:EA:B1:57:ED:4E:DD:BC:79:3C:60:01:54:49:A8:CC:1A:36:3A
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858496A19AE3089C550FEEDAFB040
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     109
IP address blocks:        171.68.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:ae:30:89:c5:50:fe:ed:af:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=4139ea77-b93c-4f9b-9d1a-1db16e125953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:bb:c8:76:fc:aa:e2:5a:22:68:09:30:60:
                    72:94:0b:8e:bb:64:dc:0f:45:e6:a4:1e:d1:4d:3b:
                    02:99:47:5e:1e:bc:ff:be:42:bc:92:4a:96:7e:6f:
                    d3:43:54:89:bc:fb:4c:03:b2:82:87:bc:da:21:1d:
                    0e:09:45:c3:de:69:75:a7:04:40:75:2b:17:e7:08:
                    3a:29:3a:32:f4:a2:f6:ce:1c:08:d0:60:ef:cd:8f:
                    68:0f:5a:83:60:e5:4d:05:19:41:34:ec:ff:58:07:
                    7d:04:00:04:ce:5c:ac:2f:5c:b9:94:ad:ae:8e:22:
                    92:5b:ff:ba:a1:64:ea:07:a0:4b:4b:1a:e3:fa:ee:
                    60:8d:3c:07:a3:79:2b:2a:eb:d9:43:a0:b9:be:1e:
                    85:14:c3:24:e8:3f:92:b5:3f:c6:ea:4d:e9:8d:82:
                    2e:a0:3d:2c:e1:2b:29:7f:9a:fd:58:5f:61:ec:62:
                    92:a3:56:b5:76:a9:c2:a0:71:5a:44:d0:ee:c2:9c:
                    f0:4b:05:31:1a:60:c6:97:92:4b:f2:a6:2c:48:0e:
                    a3:f8:4d:69:61:a3:5e:5d:ec:34:09:88:88:6e:55:
                    8c:28:99:a9:13:28:29:d4:b9:76:24:6d:d3:d5:d7:
                    0e:30:b4:62:11:29:a0:26:e5:28:3d:60:e9:15:7e:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A8:EA:B1:57:ED:4E:DD:BC:79:3C:60:01:54:49:A8:CC:1A:36:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.68.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1c:4c:e6:52:13:5e:9f:a8:6d:0d:28:92:a3:b4:ba:16:d3:
         e4:e1:e6:02:e4:8e:f9:b8:a8:3e:16:58:2d:4e:c5:7f:aa:81:
         ed:01:a3:91:51:28:e8:08:dd:9b:39:d6:8b:a6:ff:49:47:2d:
         6a:fd:c5:ae:f6:9c:03:a2:de:a3:be:30:e9:03:de:c5:25:91:
         fa:e0:ce:86:2e:10:75:57:37:e5:91:1f:7a:6d:23:b8:5f:dc:
         a5:63:8c:5f:2d:0a:64:b8:97:e8:23:a9:38:db:fe:a6:df:ef:
         86:3f:ef:16:cc:cf:47:d1:26:c1:5c:e5:5c:42:5e:4e:8d:a5:
         73:84:07:74:e4:58:33:22:90:d9:a7:be:46:fc:09:d9:c0:d0:
         8e:2b:1c:7c:e4:6b:61:00:74:c1:56:79:9a:19:86:00:c3:80:
         ad:67:72:ce:24:4f:c6:1a:f5:fa:6b:52:62:d6:36:2f:0a:62:
         fe:3e:79:36:47:2f:fb:31:ae:3b:6f:ba:a7:73:38:63:c2:88:
         4e:e3:08:4c:3c:ad:fa:eb:f0:ad:79:24:02:fd:3e:c3:e8:f7:
         0c:52:0b:bd:10:eb:aa:48:69:9a:ed:cb:70:97:83:27:d9:14:
         fb:e9:60:cb:29:21:ca:fa:08:65:89:cf:68:15:16:49:41:ea:
         86:40:2e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:23 2025 by rpki-client