Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8ac09314-89b2-3409-b2f6-0aba32132aab.roa
File:                     8ac09314-89b2-3409-b2f6-0aba32132aab.roa (raw, json)
Hash identifier:          Tw4LAzcORefJXIRP8gjV+rkoekWCOFC14QlpONG16Ew=
Subject key identifier:   8E:11:AC:6A:1A:73:84:02:C2:C0:44:C1:CD:B3:DC:36:84:18:46:E1
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285849218410377DC417C822C3DC80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8ac09314-89b2-3409-b2f6-0aba32132aab.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        68.170.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:10:37:7d:c4:17:c8:22:c3:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=2d288abc-6cb4-4c3f-a931-56a27f080314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:94:4f:d4:51:3a:a3:7e:55:7b:62:08:a3:ef:
                    ba:7e:f4:ed:96:ca:82:b8:a1:d5:28:17:18:ae:40:
                    27:76:52:f6:bd:50:25:ba:e8:59:36:a7:af:97:5e:
                    e8:13:2d:e2:06:fb:50:c6:95:95:63:9f:fa:9e:34:
                    f6:d0:86:33:0f:1f:fd:ec:f8:6b:70:e8:1f:50:fa:
                    b6:34:1e:f3:cc:67:05:a3:cc:3a:51:98:0b:de:24:
                    f6:6d:8d:f0:93:3f:cf:80:9f:fd:fa:8f:e1:fa:fc:
                    49:97:1e:25:3c:82:42:85:4c:7d:7d:9b:31:b1:e9:
                    20:ac:13:05:6f:fe:a5:56:5c:22:db:66:26:4d:63:
                    e7:3d:58:5e:0c:42:c8:9e:a0:27:fc:6c:f8:81:75:
                    04:fe:b9:fe:a1:21:98:8d:21:a5:55:50:b5:3a:06:
                    34:15:67:8b:f2:c5:40:7b:45:00:49:0d:7a:b1:ef:
                    bc:af:60:b3:02:64:7d:19:02:ff:ff:36:4d:3a:8b:
                    78:cd:93:15:39:be:85:2b:f5:2d:da:74:57:e2:f6:
                    d8:c9:f1:db:8d:d3:a3:56:d9:01:14:af:69:e6:4f:
                    7c:cd:6c:06:65:62:87:8a:21:e4:96:65:1d:79:34:
                    51:1e:61:28:6b:d4:74:e5:51:b5:16:bd:b1:77:05:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:11:AC:6A:1A:73:84:02:C2:C0:44:C1:CD:B3:DC:36:84:18:46:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8ac09314-89b2-3409-b2f6-0aba32132aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:32:79:59:f8:b2:24:0f:53:97:c9:b5:c6:ac:c7:f0:22:
         61:0f:75:73:5e:48:ea:35:59:57:c5:e3:fb:61:f6:68:56:ff:
         ad:d9:52:0a:f3:cd:f3:5e:aa:d3:27:36:c0:40:81:e5:99:05:
         a5:9a:f0:da:08:83:34:53:39:1b:ce:3b:1e:ec:49:f5:8e:39:
         13:dc:4c:52:d5:fb:d4:4d:8f:7c:77:4e:6c:e8:2e:2b:0e:26:
         0d:0d:56:0a:42:6d:87:91:aa:24:9f:27:ec:e1:9d:34:b8:d6:
         d7:90:e5:24:93:74:c9:38:4b:f2:4d:a1:b1:c8:53:07:b5:4b:
         43:80:43:a3:c0:d6:7f:31:61:0d:7e:7c:f2:7d:b7:67:63:53:
         0e:7a:9f:ac:65:de:0f:df:1f:62:01:0d:e4:3f:69:e6:ad:f1:
         3d:a8:38:d7:0b:ce:1e:3b:38:78:3a:63:cc:2e:1a:e7:dc:d2:
         b7:c8:02:26:60:78:cb:eb:c4:23:55:75:4d:60:bf:db:17:2b:
         06:59:b7:85:96:57:76:2c:1e:36:29:87:87:86:30:c2:d5:e8:
         4a:b8:d9:5a:71:44:f6:1d:01:5a:d0:11:c6:63:1c:98:2f:87:
         37:27:90:01:0d:10:86:85:77:7a:c5:8e:9b:53:b1:2e:ad:b0:
         26:16:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:42:16 2025 by rpki-client