Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa
File:                     6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa (raw, json)
Hash identifier:          H6TzAAqq9JnefandPKx5SHn135HSJ6YmBbbjL1MYkT4=
Subject key identifier:   D3:B7:08:F9:37:60:7B:AC:F6:7E:15:30:86:F1:BC:87:76:C2:67:ED
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F432858486D9059184FEADE2F9DC7A070
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     3464
IP address blocks:        199.88.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Mar 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:59:18:4f:ea:de:2f:9d:c7:a0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=67f14aff-22d1-4a95-afe4-6f4222348781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:02:1d:9b:5e:e5:8d:7a:27:3f:f3:da:07:
                    eb:66:73:d8:9b:d2:51:08:c8:90:ff:cb:c5:2a:60:
                    0c:5e:4a:29:ca:26:27:7e:c6:52:99:57:63:5f:45:
                    dc:cc:f3:e8:4a:74:ea:6c:7a:ac:32:a8:22:70:4b:
                    40:7a:33:39:62:61:2d:d8:ad:b9:ff:f3:fd:fe:94:
                    9f:dc:41:0f:9d:08:b5:ae:74:3d:0e:9d:ff:ef:f7:
                    f7:bf:8b:b4:f1:9b:15:3b:30:7c:86:c4:1d:dd:b5:
                    1c:44:10:e2:ca:de:ea:37:74:4d:35:a0:c7:4d:c8:
                    77:c9:30:9a:11:f5:86:1c:b3:74:8d:30:ac:dd:d2:
                    76:f8:a9:7e:ef:36:4f:17:26:5b:c9:f9:df:be:e2:
                    e2:85:6f:8f:8e:46:40:67:22:d7:21:b3:ef:69:18:
                    7a:3c:f9:24:df:43:86:8f:be:46:9d:34:83:2b:8a:
                    58:b4:8b:53:93:82:69:21:5e:ae:ed:67:e8:a4:69:
                    55:5e:73:23:8b:b8:e5:80:f9:a2:ac:8e:45:64:eb:
                    fa:dc:d0:af:3d:50:03:80:cd:7f:04:5e:b9:82:db:
                    cd:cf:1d:ac:3e:b7:d0:8b:87:5e:b4:72:b9:7a:a1:
                    37:22:45:65:69:0c:2e:22:54:91:42:c2:f5:8c:8a:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B7:08:F9:37:60:7B:AC:F6:7E:15:30:86:F1:BC:87:76:C2:67:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.88.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5a:f6:67:c4:52:31:cc:e6:e8:9e:ca:89:6e:2b:45:38:e5:
         28:da:da:82:59:57:05:b0:d5:93:10:48:43:73:8b:fc:98:bc:
         f7:40:49:d7:0d:96:97:13:d3:4e:4c:59:77:72:fa:76:88:72:
         99:32:ac:59:f9:b4:dc:25:46:9b:94:31:db:1c:78:95:25:52:
         9f:96:b9:c4:fa:e8:7c:9d:63:e8:74:ba:eb:e9:8a:02:ad:d5:
         93:0e:2c:d6:8d:52:2c:0a:17:5d:b7:ac:1f:18:1a:ca:2f:35:
         c2:20:8e:bb:c8:f7:64:8e:e2:08:91:0a:6c:c5:b7:87:ed:56:
         8d:01:8e:54:96:9b:23:9c:39:15:fb:78:74:74:29:b7:c1:6c:
         a0:05:8b:e3:89:5e:f1:40:b3:c7:cf:29:cb:30:1a:d2:80:a4:
         fd:56:bd:1a:dd:8e:9a:88:60:de:93:34:1d:7e:7e:57:1b:c5:
         2d:28:52:fd:45:d9:7c:2c:20:8e:f4:1a:15:00:b2:f2:21:f6:
         a5:dd:1f:90:3f:65:94:26:6e:3a:df:5b:96:77:1f:1b:4e:5f:
         a4:7f:c3:0b:d7:4e:fe:a4:7a:b7:0a:77:2e:83:ba:9b:9f:e2:
         28:c3:86:89:15:07:5a:a5:e2:8b:6e:74:27:c4:f0:a5:f1:b3:
         35:b2:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:01 2025 by rpki-client