Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/60fb16ff-2f8e-33d2-9559-388bab380853.roa
File:                     60fb16ff-2f8e-33d2-9559-388bab380853.roa (raw, json)
Hash identifier:          bF2YriCJvJQ9nX6uEJbapfxnimaXDishoRGcEsNDNAk=
Subject key identifier:   0E:0A:B9:9F:F0:86:24:26:A9:A5:89:86:4B:53:9B:91:B8:E9:F3:3A
Certificate issuer:       /CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Certificate serial:       010D0C9F432858494CC94DB92B3A785383DC4B00
Authority key identifier: DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/60fb16ff-2f8e-33d2-9559-388bab380853.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     40772
IP address blocks:        208.89.36.0/22 maxlen: 22
                          208.89.36.0/23 maxlen: 23
                          208.89.36.0/24 maxlen: 24
                          208.89.37.0/24 maxlen: 24
                          208.89.38.0/23 maxlen: 23
                          208.89.38.0/24 maxlen: 24
                          208.89.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:4d:b9:2b:3a:78:53:83:dc:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=1351bbde-3352-4fc0-a898-cdac5de34db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:31:97:30:4c:14:1c:8c:51:b6:7e:b8:94:
                    b5:08:3f:b1:87:09:1d:ef:b4:b4:9d:80:ba:d7:5d:
                    be:fe:d0:f7:ee:55:2f:08:37:48:83:77:ee:1e:22:
                    cf:2e:6e:c8:d1:2f:5e:b1:55:a3:3c:a7:24:ba:8e:
                    d1:a1:d7:a2:89:bc:16:8e:97:60:d2:94:a0:a6:3e:
                    d0:1b:d3:78:44:41:de:fc:a7:42:ba:c0:27:90:1a:
                    e0:5d:19:da:62:40:71:1f:4c:87:70:7e:cb:30:a3:
                    55:b3:35:de:73:70:b3:62:0f:a7:0b:b7:10:c8:a5:
                    9c:43:82:4c:a3:b2:e7:1a:f7:c7:92:75:93:db:ad:
                    0a:b1:9a:91:18:8c:a5:9e:fe:06:03:cc:6e:6b:7d:
                    1c:ee:a6:2d:c6:8f:e7:d2:c0:40:40:1e:5d:ee:a3:
                    98:92:53:33:3b:87:ee:8e:cd:23:1b:7d:77:1d:15:
                    58:36:0b:c9:6c:dd:d6:1c:dc:df:a2:bf:61:ad:c9:
                    16:58:70:f8:26:73:7e:ca:f4:0d:cf:01:a2:f1:3f:
                    0c:cb:51:f3:44:2c:01:fb:d4:e1:24:54:c2:8e:86:
                    35:2d:d9:df:20:27:c3:ac:a2:14:31:81:5f:cc:6c:
                    17:a9:f7:ca:e9:1d:e6:53:af:d3:87:18:c9:5c:aa:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0A:B9:9F:F0:86:24:26:A9:A5:89:86:4B:53:9B:91:B8:E9:F3:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/60fb16ff-2f8e-33d2-9559-388bab380853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl

            X509v3 Authority Key Identifier:
                keyid:DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:5b:e7:48:c6:3a:00:02:c4:e2:5a:ba:2e:33:25:2c:43:20:
         34:fb:b0:b2:8a:07:4c:c5:2a:ef:c5:7f:eb:4d:50:61:21:7a:
         fa:1c:f4:3c:c6:45:7e:59:eb:2e:86:b6:3b:4e:80:f2:60:40:
         23:32:2b:66:cb:96:36:e8:7e:95:5f:b1:48:af:5d:90:45:2c:
         29:09:d2:e4:b4:00:2d:2a:11:c3:f7:d0:a2:1d:9b:f7:1d:37:
         89:7e:32:20:e1:c0:85:88:6a:c3:f6:c1:00:50:9a:b6:15:03:
         82:e0:52:06:be:dc:e1:3d:56:c0:b6:a3:88:20:89:13:49:d8:
         7b:af:a4:cd:8e:33:01:1e:f4:b1:ef:e5:d6:37:80:9c:49:a0:
         56:51:71:2b:35:59:45:9b:64:98:9b:64:cf:64:e6:38:c4:c6:
         be:05:e9:51:db:c3:88:1b:e4:91:d8:fc:49:e9:92:19:76:f7:
         b0:96:60:a7:a3:15:3a:f3:5b:29:a7:c5:6b:b1:5b:06:c4:ba:
         f1:e9:2e:70:50:ee:0d:12:3d:8c:c2:0f:46:75:08:36:ac:89:
         3b:72:bf:7d:ed:d1:98:9b:8e:00:06:1a:22:7c:41:ab:30:34:
         dc:e9:5e:4e:ad:8e:fa:19:32:f1:9b:17:e1:21:e4:63:1c:60:
         01:bd:0c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:21:29 2025 by rpki-client