Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/889697ca-e8be-368c-b18c-6c8efb18f082.roa
File:                     889697ca-e8be-368c-b18c-6c8efb18f082.roa (raw, json)
Hash identifier:          7Uboo2KbjFLsnDCa/Oe0055Chc9ytOVgRCXzaNj7u7g=
Subject key identifier:   1A:86:96:AA:D8:BF:3E:63:C3:F6:AF:5E:41:CA:B3:48:47:04:BD:8A
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848DA70F5A73D649E0FCEB50440
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/889697ca-e8be-368c-b18c-6c8efb18f082.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     397422
IP address blocks:        206.192.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:f5:a7:3d:64:9e:0f:ce:b5:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=126ff44f-c72a-4985-a5ce-d7aaa8516a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3d:0a:6c:99:df:16:bd:f6:d7:3e:d5:b7:af:
                    cf:c8:6e:6c:e1:fb:70:00:1d:be:07:92:8e:20:23:
                    1d:cb:ca:47:58:93:7f:6f:f7:3c:93:5c:a1:ac:d1:
                    d7:ce:da:d7:39:ca:b5:54:41:42:b3:33:89:c0:45:
                    d7:d4:c1:fd:2f:93:65:1a:62:8f:b5:24:ab:30:7b:
                    2d:6a:c4:7a:ce:69:36:4b:7c:f9:0c:69:7f:b1:48:
                    e7:b5:a5:00:3d:b7:00:5d:ee:b3:97:34:3c:61:82:
                    44:51:19:ff:f9:4a:c2:1f:6e:15:3c:ec:c2:ee:7a:
                    97:f3:62:76:42:4e:d9:5e:aa:42:c5:71:90:d9:0f:
                    c7:53:53:2f:66:94:9f:e0:a0:55:ce:8f:a3:d1:79:
                    fb:fa:48:f8:9e:02:12:f5:a7:f7:a2:c0:7d:4f:af:
                    b4:3c:f5:03:da:c8:25:03:48:8c:77:2b:9e:4b:52:
                    eb:ac:b0:9d:7b:31:1b:fa:b7:4d:55:59:ec:d0:3b:
                    9e:85:c8:81:7d:80:80:a1:f4:4c:75:20:36:fd:81:
                    c4:49:01:88:f9:33:64:c7:2c:6a:8e:9b:30:c5:cd:
                    74:51:b9:ea:b1:35:cf:0e:0f:16:0e:ec:47:3e:a9:
                    34:fc:df:d6:4d:7e:66:44:2b:71:68:63:25:ea:10:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:96:AA:D8:BF:3E:63:C3:F6:AF:5E:41:CA:B3:48:47:04:BD:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/889697ca-e8be-368c-b18c-6c8efb18f082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e5:82:d9:c6:36:2c:dc:33:9e:50:5f:c2:13:4c:42:38:8c:
         66:ae:f0:c8:68:ed:2f:99:05:ab:0b:b8:9a:4f:f2:2a:c1:26:
         ea:cf:64:c4:35:d5:30:f9:35:16:a4:fe:be:1d:6d:08:67:74:
         80:8f:63:fb:37:96:5d:1a:d0:bf:ea:90:6c:9f:37:b9:9e:b5:
         1b:ba:8e:8f:42:cd:f0:cd:3d:fc:70:69:25:91:b5:99:20:4e:
         e5:06:36:aa:33:43:60:5e:37:c7:cd:e2:a8:0b:1a:bb:9f:16:
         d9:6c:15:08:4f:cd:fd:1d:67:0f:f3:7c:f5:6c:18:58:57:29:
         52:bc:6b:57:08:26:9d:18:ab:2b:3f:c0:a9:92:f2:39:90:59:
         6d:86:0d:1f:96:50:f3:03:9b:06:c2:f8:be:f1:03:84:bf:d4:
         df:4e:f2:19:9a:16:88:a6:c9:1d:d1:ca:3c:ab:84:b9:25:19:
         08:0d:ea:2c:10:3a:3c:40:36:4d:8c:c3:b0:5a:9d:72:a1:90:
         11:29:9b:b3:73:c9:75:6c:eb:7e:61:0d:ac:a0:c5:d2:a6:99:
         f7:db:3f:72:0e:a0:59:ed:4a:ec:f6:9a:2b:32:d7:05:6e:a8:
         d4:0a:19:cf:ac:f6:c8:c1:12:1c:29:ee:94:17:b3:af:fb:f8:
         60:53:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:24 2025 by rpki-client