Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/eda2ab9f-76c5-3e22-bbaa-483c72d025c0.roa
File:                     eda2ab9f-76c5-3e22-bbaa-483c72d025c0.roa (raw, json)
Hash identifier:          jG43tDynZ59P3UG52pQfq/JHO9DEoGMA6TAA1n226+4=
Subject key identifier:   25:D4:DE:86:75:E1:EF:7F:82:BE:4F:04:76:6D:56:49:59:88:E3:56
Certificate issuer:       /CN=b60fd368-cb50-418b-8840-57c8491066b3
Certificate serial:       010D0C9F432858490F7C012F493A8537841491C0
Authority key identifier: 8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/eda2ab9f-76c5-3e22-bbaa-483c72d025c0.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     398754
IP address blocks:        140.106.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7c:01:2f:49:3a:85:37:84:14:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60fd368-cb50-418b-8840-57c8491066b3
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=c399f281-6d3c-4cc4-9422-96369d4ee4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:36:cf:da:b9:a7:2c:94:b3:cc:1c:e4:91:
                    55:a4:72:f5:b3:0c:0f:ea:8d:f9:5e:51:b2:00:f7:
                    c4:af:ee:9f:38:9a:41:65:a3:e8:e3:b9:39:f8:8b:
                    39:c3:b2:3c:ad:de:9b:27:11:42:cb:19:df:59:f5:
                    87:66:82:ba:2e:50:40:dc:46:70:62:f6:dd:27:ea:
                    50:54:c7:ca:d8:03:a4:ab:20:3d:5a:a0:d3:e1:ab:
                    c0:05:20:59:9b:fb:3d:ac:54:e0:bd:5f:0e:96:aa:
                    e2:38:fd:b0:f4:03:7a:88:bb:30:ff:0e:a7:cd:d9:
                    62:7c:ab:5d:63:05:ee:b3:9d:e4:89:ac:7b:2e:25:
                    8b:ba:38:03:fb:04:fb:fb:8b:6e:7f:fd:a4:08:25:
                    56:c3:fe:f8:75:07:37:13:fd:73:1a:f7:22:dc:70:
                    c7:f5:b8:74:cc:d4:10:78:87:89:18:ca:d9:60:90:
                    11:ab:35:83:30:be:36:90:b2:c7:a0:8e:e1:58:d2:
                    99:09:b8:ad:ee:aa:65:53:d2:01:e5:6d:29:33:ca:
                    16:d0:d3:42:2e:7d:4c:1c:44:fb:27:cf:29:cc:86:
                    a8:56:71:be:51:ae:5e:22:2c:0d:69:7f:4c:e8:81:
                    4f:de:9d:65:e5:11:c1:4b:fe:66:41:03:67:01:41:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D4:DE:86:75:E1:EF:7F:82:BE:4F:04:76:6D:56:49:59:88:E3:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/eda2ab9f-76c5-3e22-bbaa-483c72d025c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl

            X509v3 Authority Key Identifier:
                keyid:8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d1:dc:b3:f4:9a:67:5a:a4:04:8f:f7:64:e8:ea:00:1f:d6:
         95:50:c2:17:2a:3b:cf:d4:bb:b7:c3:df:f4:c6:d6:06:78:79:
         96:0e:99:44:07:a3:78:7a:95:17:6f:75:7f:3f:b9:45:00:6c:
         e6:53:d0:15:2e:1e:88:32:0d:af:0d:6d:e9:6a:27:ce:bd:18:
         fc:0b:fc:20:3e:23:9c:db:42:a7:a6:1a:e5:59:e2:5f:17:ad:
         e9:60:05:1f:a5:ba:72:e5:14:f5:f0:05:2e:1e:ee:42:09:18:
         d6:bc:e1:7a:61:4f:52:d8:12:15:4e:03:56:8d:7d:9b:47:24:
         74:e0:1c:a9:0b:12:21:33:1c:14:fc:2f:1e:4b:f3:d4:8d:fd:
         1c:fc:a6:ad:98:7a:3e:50:90:5e:ea:84:54:b7:7d:14:56:8c:
         06:7c:1b:af:b7:8c:64:71:ea:9e:a0:f3:a6:cb:e5:24:96:b7:
         8d:e2:bd:84:38:b8:e7:b1:b8:50:ee:84:57:5a:5c:e8:fd:9b:
         af:ac:96:5a:74:6a:ec:c8:39:25:a1:ed:d9:9b:ce:63:67:6d:
         2d:0c:5d:dd:f3:bd:86:07:32:22:c3:fa:32:b3:8a:36:dd:65:
         18:fe:09:16:b3:63:a1:34:c2:a1:86:b3:d1:6e:cb:ad:e2:59:
         14:86:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:17 2025 by rpki-client