Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/49130ff0-be17-33aa-addf-13c1e3898bc0.roa
File:                     49130ff0-be17-33aa-addf-13c1e3898bc0.roa (raw, json)
Hash identifier:          XTiEYIsGbTHxqK2joMv01gSo+EHaZtYPEKGe4MpAIQw=
Subject key identifier:   F1:A9:25:7C:2D:9B:CF:64:70:9D:97:34:A0:C7:C2:AF:D8:DB:3C:AA
Certificate issuer:       /CN=20345bca-b793-4f14-a066-8653ac933903
Certificate serial:       010D0C9F43285848116FBE3E1F86162E1B47E400
Authority key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/49130ff0-be17-33aa-addf-13c1e3898bc0.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     8070
IP address blocks:        206.41.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:be:3e:1f:86:16:2e:1b:47:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20345bca-b793-4f14-a066-8653ac933903
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=95879a9c-c561-4819-a3e0-fe15ca36a6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:5b:2a:19:e3:e1:06:c2:1a:e4:ea:c2:e3:
                    dd:4e:99:d8:bd:89:04:33:d1:ef:ac:73:9f:c9:5b:
                    2b:b4:e4:a9:63:d9:a1:19:b8:eb:d6:e7:3f:98:34:
                    f1:59:b4:75:79:59:f4:a9:ad:3e:1e:08:45:9d:d2:
                    9a:fa:94:21:ab:f3:34:85:18:9f:51:c1:38:b2:41:
                    95:79:27:ef:1d:91:ba:ff:63:86:0f:13:b6:14:f7:
                    6d:c4:bd:7e:19:c5:52:d3:4a:c3:c3:10:24:56:bc:
                    81:74:25:a2:71:e9:9c:0c:13:36:cd:5a:1a:b2:74:
                    b3:80:99:8f:8b:86:8b:64:44:6f:17:ee:2c:db:bb:
                    60:f4:9f:e2:5b:de:a0:9c:d0:94:8f:a8:78:72:95:
                    fa:70:82:41:8f:a1:d8:0c:21:0a:f0:e1:c5:75:4a:
                    08:be:51:23:90:c2:ad:d0:72:ec:d6:51:88:81:dc:
                    69:69:08:70:4d:51:24:f0:ce:0e:8d:24:73:d4:01:
                    ac:42:f7:2d:96:28:46:43:02:07:e3:36:a1:7f:98:
                    be:ca:7b:9d:a1:e1:82:d1:53:03:0d:0f:d0:fe:50:
                    0e:53:d1:89:44:6a:9f:6a:ad:b7:e2:5c:cf:d0:f4:
                    1f:65:2c:aa:68:54:e8:0b:ee:c0:fa:d4:c9:a9:e5:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A9:25:7C:2D:9B:CF:64:70:9D:97:34:A0:C7:C2:AF:D8:DB:3C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/49130ff0-be17-33aa-addf-13c1e3898bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl

            X509v3 Authority Key Identifier:
                keyid:10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:63:e5:98:c0:93:4e:51:64:38:e1:a2:b6:81:be:d3:9c:79:
         c1:18:a4:0c:25:cd:b1:0c:f6:33:02:be:ce:e0:19:4d:4d:a3:
         19:5e:82:c1:29:7f:c6:af:87:85:4c:d8:10:89:b8:44:ba:4f:
         b1:dc:07:a8:86:45:3b:14:f5:77:b2:67:6b:31:ae:78:5c:e8:
         71:8f:fc:e9:63:ba:3e:8b:30:72:d5:fd:5a:0a:a1:8a:00:4b:
         47:d7:26:b3:5b:71:46:4b:af:aa:56:72:c9:db:7d:ed:f7:5a:
         06:39:e3:65:a9:df:51:0d:e6:40:e0:51:84:94:bf:33:b2:df:
         90:14:1f:78:78:e7:d5:7f:e3:69:42:27:ef:36:f0:7a:95:69:
         ae:ba:07:02:0e:40:be:2b:70:0e:88:d7:2e:56:cf:d4:4f:f2:
         02:e7:17:d9:79:92:be:6e:17:db:57:c6:f8:9c:a1:a0:1f:19:
         a2:a8:60:b8:07:03:50:0f:eb:7e:34:ba:f5:cb:b0:f7:97:e7:
         a7:f8:13:b4:cc:2e:f7:9d:8a:89:89:ca:c4:79:90:b0:76:e6:
         5d:5b:3c:7e:f4:2f:44:68:83:69:c8:5d:a7:4c:c0:15:b1:73:
         09:52:71:e3:49:2d:7f:cc:fd:29:7c:52:19:13:d7:c9:0c:04:
         f4:ee:49:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:42 2025 by rpki-client