Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/0b491f50-8f89-360f-aead-84ef892fa7f9.roa
File:                     0b491f50-8f89-360f-aead-84ef892fa7f9.roa (raw, json)
Hash identifier:          k7PtJAENPIxNqliRAVLMKsOfuZ5ivDpm/GHXyr90Mi4=
Subject key identifier:   B2:C5:3F:4D:53:DD:4A:BB:A5:8D:6A:4D:38:1C:DA:3E:EE:4A:D1:E1
Certificate issuer:       /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c
Certificate serial:       010D0C9F43285848C150D406CD6DDE9C1E7BC080
Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/0b491f50-8f89-360f-aead-84ef892fa7f9.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        199.15.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:d4:06:cd:6d:de:9c:1e:7b:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=9b69ff7e-f339-4af9-a1c7-c6aef5dd4d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:4c:a8:2b:ca:f6:0d:28:92:a7:af:2b:6d:
                    8d:b6:c5:39:b1:ef:6f:a4:e4:e0:f1:1f:f5:cc:41:
                    26:cd:2c:0c:59:c3:35:0b:a1:64:ff:5f:5d:f8:c0:
                    39:84:61:9e:21:9d:aa:7c:7b:06:0e:35:d5:f2:99:
                    54:e3:7e:d4:c2:ad:12:65:5a:69:ce:cc:31:ba:7e:
                    dd:66:8d:77:0a:f2:b7:29:39:07:6b:06:95:8a:e9:
                    77:75:8c:39:21:45:91:5e:ff:ed:74:d8:53:b3:e7:
                    ca:e1:86:b1:89:ca:6f:71:df:6e:bb:06:65:eb:86:
                    87:60:f5:0d:89:ad:37:8d:0a:e6:c7:12:58:70:b7:
                    0a:5f:78:62:3b:c2:63:df:c1:1b:45:ff:2b:fc:d6:
                    84:55:27:09:0f:13:64:ce:39:60:ff:b8:21:ee:67:
                    d9:a1:8c:fe:98:d4:0d:8b:22:88:a4:6a:ca:7c:78:
                    d2:a1:4f:a8:c5:1f:b1:b7:e3:c7:c5:20:a4:62:65:
                    f2:cf:09:5b:e8:d5:c2:92:e5:80:87:ee:64:ac:08:
                    48:61:14:68:79:03:1d:33:d8:de:6e:3a:25:16:b4:
                    14:b4:44:e2:62:bb:96:93:ef:6f:ae:d1:fd:73:18:
                    78:b8:58:91:c5:5e:27:72:fb:c1:74:30:e3:93:88:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C5:3F:4D:53:DD:4A:BB:A5:8D:6A:4D:38:1C:DA:3E:EE:4A:D1:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/0b491f50-8f89-360f-aead-84ef892fa7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl

            X509v3 Authority Key Identifier:
                keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:63:c6:92:f2:0d:7c:75:28:20:a0:99:a9:68:3d:69:1b:9d:
         55:db:88:5b:04:eb:20:82:63:04:cc:e6:e8:da:dc:2f:a6:e6:
         e4:cb:86:3f:57:22:51:46:59:b9:7b:77:c4:b2:eb:f7:f1:24:
         8f:8f:38:51:e2:4c:b7:aa:4b:4d:05:25:a0:c5:e0:38:06:81:
         db:03:f1:20:a4:39:a3:f1:f5:94:04:72:31:6d:32:24:38:46:
         02:49:1d:e2:94:55:7d:25:3b:70:28:9b:51:79:0f:05:39:61:
         15:d4:23:ff:8d:9f:02:4b:aa:c9:9b:e6:dd:fc:4a:fd:ff:ee:
         a2:66:d6:71:9d:b8:3a:0c:b0:df:e7:eb:3a:f2:6c:49:67:b3:
         47:59:cb:e3:0d:ee:3e:8a:9b:43:68:3c:66:98:10:e4:99:eb:
         97:c1:2d:74:4d:26:9c:a4:a5:b2:5d:6e:a3:38:27:16:1e:32:
         f2:ad:0e:df:4e:2c:7a:f7:79:3a:e2:45:97:4b:22:19:ab:5e:
         92:35:d0:bc:f0:ae:80:a4:3f:0d:e7:b3:c0:71:7f:61:db:3f:
         eb:f6:08:94:fc:2e:94:38:9b:6a:ab:31:ae:db:ff:49:07:2f:
         b7:4b:15:94:21:4a:7a:c1:e6:09:b8:65:c3:32:2b:83:b4:45:
         4a:e3:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:53 2025 by rpki-client