Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/6b214c14-fbcd-3363-94e7-0375a83b95b3.roa
File:                     6b214c14-fbcd-3363-94e7-0375a83b95b3.roa (raw, json)
Hash identifier:          Ci98rWlkyUBSGPWc1CXyRjtVoDPAV1CJ/vttXFe8GG4=
Subject key identifier:   FF:00:F5:F6:71:BD:5D:E5:4D:85:1B:4E:FA:0C:09:01:53:F0:F5:1A
Certificate issuer:       /CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
Certificate serial:       010D0C9F432858485CD02F8F46AD50BED12F5B80
Authority key identifier: 7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/6b214c14-fbcd-3363-94e7-0375a83b95b3.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     397263
IP address blocks:        200.12.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:2f:8f:46:ad:50:be:d1:2f:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=7812848f-eb38-4c87-b79b-ee087f953a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:9d:6d:c1:8d:8a:8c:93:86:c2:aa:bb:6f:
                    c7:1b:3c:4d:0b:b3:70:b9:91:08:57:1d:80:b7:d4:
                    67:fc:63:24:76:79:ea:5b:a9:dc:f5:56:71:d5:c7:
                    0f:a3:c0:02:5d:89:ca:bb:89:3a:a4:a7:4d:b3:fe:
                    50:c6:b4:60:db:ba:4b:6b:be:5f:85:3f:0a:48:e8:
                    21:59:58:08:fa:ce:74:b3:2c:b2:ab:61:b5:89:9a:
                    79:4f:8b:13:d1:65:fb:7f:e7:db:ea:04:b5:de:d1:
                    a9:62:38:6a:bb:92:af:32:fd:6c:4d:aa:15:f6:dc:
                    82:26:f1:09:f7:3a:55:d2:e4:26:5f:d6:69:b9:ae:
                    6e:43:38:4f:c6:9c:a4:8a:8e:85:b4:0a:cb:85:51:
                    3e:13:a4:f7:ac:bc:61:6c:c7:ca:bd:bf:46:1c:29:
                    08:86:f7:ed:70:24:9a:38:b9:12:4e:f7:dc:d5:55:
                    36:a8:d7:ac:40:86:ee:09:b3:ee:68:53:09:7a:1b:
                    b3:b9:3d:d9:02:80:2b:59:d2:77:04:76:fd:c3:04:
                    67:fc:97:b1:a6:db:44:07:2c:a0:ca:64:9b:dc:a9:
                    f4:dd:19:9b:0c:2c:46:69:28:70:ea:07:01:6d:d7:
                    0b:39:61:bc:95:c7:3e:65:72:34:6f:ea:e8:f5:2a:
                    84:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:00:F5:F6:71:BD:5D:E5:4D:85:1B:4E:FA:0C:09:01:53:F0:F5:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/6b214c14-fbcd-3363-94e7-0375a83b95b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:25:ec:f4:c8:a4:97:de:82:a6:7e:7a:1e:40:5a:b7:36:
         ba:80:31:a4:6b:ab:da:f0:05:08:8a:a7:a0:41:42:31:36:58:
         65:98:09:c1:17:97:9a:31:be:b8:01:f6:e4:a9:28:1e:5e:6e:
         5e:2d:57:df:2f:20:3f:bd:35:d0:21:8a:9d:91:e9:57:7d:6b:
         01:3e:27:57:97:0b:35:55:49:11:9c:61:77:aa:83:97:a7:fb:
         b9:90:88:f9:d8:cf:3f:59:87:20:ef:3b:3f:9e:d2:97:aa:1f:
         2a:f9:8e:d7:07:a3:56:83:89:e0:bf:47:34:1e:a0:96:28:32:
         e0:53:92:28:89:22:da:6e:6b:0f:dd:b3:45:42:38:67:9d:53:
         19:5e:87:97:92:09:5a:0f:74:7c:61:18:ec:43:fe:c5:44:cd:
         e3:c3:71:01:ef:b7:67:00:05:76:f5:3b:56:08:72:bf:7f:b1:
         b9:c1:5c:2d:ef:f4:dd:1d:a7:3d:08:69:78:68:94:bc:b4:2a:
         bb:e7:f1:12:83:7a:32:57:d9:e9:df:98:b6:9f:61:5b:f2:92:
         a1:b7:04:86:3a:43:01:cc:05:4f:64:0d:e1:97:6d:fb:18:39:
         16:1d:a1:ef:50:b4:46:97:a6:45:19:d3:8b:16:94:c9:a1:cb:
         10:8c:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:08 2025 by rpki-client