Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/78f75c07-98b8-327f-9eb8-938aefc7627c.roa
File:                     78f75c07-98b8-327f-9eb8-938aefc7627c.roa (raw, json)
Hash identifier:          R3dcpBya1I+eNw++hk6DrCgKFXoa6oJZ9c4L46q7Rlw=
Subject key identifier:   01:8A:B5:59:43:8F:93:1B:8A:86:0E:0F:FE:19:9D:99:3B:00:9E:DD
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F43285848B090B2FDB22B6604F4668320
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/78f75c07-98b8-327f-9eb8-938aefc7627c.roa
Signing time:             Tue 28 Jan 2025 02:00:39 +0000
ROA not before:           Tue 28 Jan 2025 02:00:39 +0000
ROA not after:            Mon 28 Apr 2025 01:00:39 +0000
asID:                     396422
IP address blocks:        198.212.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b0:90:b2:fd:b2:2b:66:04:f4:66:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Jan 28 02:00:39 2025 GMT
            Not After : Apr 28 01:00:39 2025 GMT
        Subject: CN=026a6886-70c7-4823-9782-7567ecfbfe9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:55:8a:cd:bb:38:9f:d2:79:f4:d6:94:f3:
                    95:31:1b:f0:54:44:3f:60:cc:50:81:35:75:de:97:
                    2e:da:ef:80:fe:63:a6:60:91:6a:4c:48:2f:b4:da:
                    22:73:3b:b5:44:71:07:c8:fa:7d:7c:8a:ee:04:a6:
                    7c:d9:89:be:7e:cb:82:41:d6:dd:8f:f0:05:73:42:
                    07:2e:78:b4:8a:a7:96:08:07:a3:96:c3:83:de:b4:
                    8a:d4:b0:6c:bd:83:f0:6b:b0:3c:b0:59:70:78:c6:
                    9f:6f:40:e1:ae:da:b6:4e:54:13:c3:2e:2b:3f:f7:
                    c3:8e:12:9a:35:93:80:99:0e:61:bd:c5:44:25:a7:
                    e8:ea:a5:f7:8d:c5:a3:ce:c2:dc:63:33:b3:99:2d:
                    8e:47:fc:7c:fa:04:a8:84:1c:f9:e4:91:b2:b1:d4:
                    de:1b:f7:ec:74:5b:12:02:f5:18:78:ba:16:d3:24:
                    80:d6:0c:63:79:11:86:b6:9e:7d:a5:ae:ca:ba:5d:
                    d6:bc:74:ae:cc:25:38:15:5b:a8:ea:14:07:a4:99:
                    1c:4c:88:73:97:0e:5e:13:0e:23:e7:8a:03:cd:fd:
                    1e:6b:98:2e:53:88:e7:3f:dd:d1:91:e3:ef:a2:5d:
                    69:d5:18:c6:01:7e:5a:bc:34:e4:96:8b:aa:cf:bb:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8A:B5:59:43:8F:93:1B:8A:86:0E:0F:FE:19:9D:99:3B:00:9E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/78f75c07-98b8-327f-9eb8-938aefc7627c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:21:5b:e3:10:cd:7d:98:49:65:3b:7a:ce:e1:e8:75:02:
         90:cb:c1:9a:db:d2:2c:82:2e:2a:a0:85:e5:a3:78:50:a1:78:
         01:fb:da:37:3b:24:77:b2:20:a9:d0:e6:9e:9d:85:96:00:6a:
         06:29:70:ef:ae:4b:30:58:b2:ba:6c:be:3b:c3:bc:c8:90:15:
         ef:51:d8:7c:f4:be:91:8f:f7:8d:6c:71:c9:e8:d5:d3:76:44:
         c3:be:41:cc:96:8a:98:85:92:39:8e:e5:88:63:45:04:ff:9a:
         3c:ab:c7:76:97:cb:2a:ee:0f:ff:1d:57:fd:f4:45:e7:60:b9:
         2c:a9:ab:ba:7f:0a:c3:8b:6a:be:ac:0b:6c:3a:e4:85:da:90:
         d9:58:60:01:ac:0c:25:1a:9c:6c:93:2a:2b:64:4a:2c:c9:ae:
         45:ac:ee:a3:84:94:04:9e:b0:1e:ca:66:e8:0d:d1:7e:e4:23:
         ff:0b:41:70:95:a9:4d:57:bc:ad:3a:d0:03:5f:d8:d7:32:59:
         bc:bb:fc:a8:dc:3e:91:c5:0f:b7:66:88:c6:4d:64:22:6c:46:
         cc:bd:6f:97:a0:9c:95:51:13:5f:3f:39:6f:be:20:31:54:f2:
         2e:ad:1c:78:57:8c:8b:de:27:78:95:c8:68:09:4d:81:d9:7d:
         c1:82:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:30 2025 by rpki-client