Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/04fa2c84-1de0-3787-83b3-78af88443cab.roa
File:                     04fa2c84-1de0-3787-83b3-78af88443cab.roa (raw, json)
Hash identifier:          r7F6ulihj6e7xecoBtGx3gW6smJIYN6msiHgbtQrxWc=
Subject key identifier:   67:93:6C:38:CC:E2:27:37:22:A2:01:D4:47:9D:CF:CD:09:82:B0:75
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848A565F5A0763CAD14969CC140
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/04fa2c84-1de0-3787-83b3-78af88443cab.roa
Signing time:             Fri 24 Jan 2025 02:00:39 +0000
ROA not before:           Fri 24 Jan 2025 02:00:39 +0000
ROA not after:            Thu 24 Apr 2025 01:00:39 +0000
asID:                     11233
IP address blocks:        69.1.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a5:65:f5:a0:76:3c:ad:14:96:9c:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jan 24 02:00:39 2025 GMT
            Not After : Apr 24 01:00:39 2025 GMT
        Subject: CN=7450905e-527a-454b-b794-e31932f3b1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:0d:7a:f8:aa:17:dd:73:b2:73:80:62:62:
                    61:f5:2e:e4:df:82:8d:53:df:71:d2:93:de:a8:4a:
                    c7:ae:53:8b:5e:ba:88:27:e1:7b:84:de:66:b3:87:
                    ce:a6:5a:ac:d6:3c:71:b9:7b:35:3e:c9:d7:93:d6:
                    7e:17:4a:1b:25:b7:48:78:cc:b6:8b:d3:7b:32:49:
                    4d:e5:dc:90:a6:0c:d7:46:5b:02:a1:b7:f1:39:6e:
                    0d:46:ec:ba:f1:8c:b2:7b:32:a1:9a:f4:31:25:e4:
                    6e:87:12:28:7f:16:9e:97:c0:d2:27:b3:db:49:7f:
                    40:99:73:c3:52:d3:03:df:54:91:e7:d3:96:42:f4:
                    b4:35:5c:83:9a:93:dc:af:9e:a9:08:51:13:e1:d6:
                    89:7f:d7:6e:04:f9:62:bb:24:03:5f:e0:b8:02:29:
                    bc:1d:5a:06:11:cd:de:94:a6:70:b7:df:fc:c5:8c:
                    65:13:ca:d5:1e:17:6c:21:8e:e7:80:7f:80:0f:f0:
                    cc:e4:56:fe:4a:0e:0f:c0:07:32:47:36:0a:0a:0c:
                    ac:6e:2a:ed:2b:ab:76:7f:41:98:c8:32:90:59:07:
                    ed:2f:87:66:1b:c7:e6:c4:97:77:9a:d2:94:9c:e9:
                    4f:40:58:f1:ab:3d:90:64:55:3d:91:fb:5d:a1:df:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:93:6C:38:CC:E2:27:37:22:A2:01:D4:47:9D:CF:CD:09:82:B0:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/04fa2c84-1de0-3787-83b3-78af88443cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:ba:49:be:ac:f4:86:c1:c8:3f:41:b4:94:86:d0:a0:9c:
         df:4b:80:00:fe:d9:e5:61:d9:8d:ef:93:eb:80:48:3f:4d:e8:
         48:df:21:cd:f0:6e:ca:7b:0c:26:0c:83:2b:f3:fc:d7:32:8a:
         dc:ed:8b:4a:ed:3e:c4:2a:11:f8:f8:58:b5:af:9c:31:e3:dd:
         f4:0a:07:39:f7:9a:e3:b9:86:26:3b:b8:a8:d3:37:d7:dc:2d:
         bf:c0:58:60:2f:34:d6:96:27:82:80:ff:18:41:e2:46:a6:73:
         ac:2b:ea:51:0e:9b:55:b2:b6:39:f1:fa:7b:10:e5:c2:12:a7:
         ab:7f:9a:a0:7e:04:33:68:7f:a2:eb:b3:48:83:39:dc:c0:c9:
         40:34:08:7b:c1:27:ba:df:96:6c:37:4a:be:6a:a1:28:d5:fe:
         bc:fc:69:62:87:f3:5d:98:fe:7a:6c:26:70:ea:b9:0f:93:6d:
         3f:5b:52:f9:4b:f0:9c:a4:23:66:d6:76:02:22:76:fc:02:a4:
         72:a7:6c:a4:7a:f6:90:b6:26:21:29:07:f0:cb:52:0c:9d:1a:
         d1:a3:bd:9a:ee:35:0f:18:f6:44:6a:bf:75:e0:0f:61:23:67:
         74:be:bf:ba:65:cd:7b:f2:2d:62:d0:bb:74:01:c3:7b:49:d4:
         f8:b2:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:11:15 2025 by rpki-client