Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa
File:                     6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa (raw, json)
Hash identifier:          HoC5fpsH/QE8efT9J30Zre/jKcJiOkxayIAnb+x0Jyc=
Subject key identifier:   50:9D:8E:61:36:7A:AF:2D:CB:F8:23:88:0C:68:62:69:8D:E0:CD:BB
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584894A5E3B08E3E1875125D4280
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     64249
IP address blocks:        207.32.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:e3:b0:8e:3e:18:75:12:5d:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=7be2ea97-a985-4725-b16e-7d973d43cef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:fb:11:fe:da:b8:e1:ff:62:fe:40:ca:d6:
                    aa:d3:bd:e9:42:02:09:8c:b0:05:73:82:c1:5d:11:
                    d6:58:72:a4:5e:e0:e1:4a:0f:70:1e:f8:a2:73:9e:
                    7e:aa:8a:0f:4c:2e:d8:07:4b:84:c1:f4:9f:c0:bb:
                    4e:3f:58:a9:e5:10:4f:2d:33:6d:09:56:fc:70:64:
                    cf:f4:2b:5d:8d:f9:22:22:32:8b:4f:db:61:fd:2d:
                    ec:3c:30:33:0e:61:76:d1:16:67:b5:27:76:16:19:
                    f5:c1:7e:c9:37:8a:c2:ac:72:07:39:98:f0:f3:a4:
                    00:11:26:10:1d:7d:b7:c9:57:6d:62:e5:39:4a:ff:
                    ec:db:7b:4b:16:f6:96:20:09:dd:ae:0a:16:4d:ea:
                    6c:6a:e9:6c:cc:4f:c6:18:96:d4:c2:52:d8:d9:25:
                    59:b2:73:fd:04:8a:d7:d3:df:9e:bb:1c:52:06:08:
                    31:6e:b3:ab:93:db:66:35:15:30:11:64:64:04:29:
                    b5:8c:a6:b0:94:cd:b7:18:99:48:28:a7:4d:71:58:
                    04:b4:70:86:76:b1:d1:c3:5c:86:f1:d8:c2:90:e8:
                    1a:4d:da:7a:f0:4f:05:c2:fd:32:c3:24:55:3c:18:
                    17:bd:12:9e:2d:0c:43:4f:47:29:67:ec:04:9b:9e:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9D:8E:61:36:7A:AF:2D:CB:F8:23:88:0C:68:62:69:8D:E0:CD:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.32.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:e2:7f:aa:7b:d7:57:79:27:c3:27:68:82:55:30:d5:db:
         01:6b:d9:21:94:0d:c9:38:36:96:f1:60:26:19:7f:78:5f:ad:
         b0:dc:6b:c9:64:1c:e4:15:09:89:92:55:6e:4e:bd:18:65:d9:
         63:e2:40:ab:d3:5c:63:76:d2:f7:ec:c8:68:53:6a:d5:5e:99:
         7f:e3:1b:09:91:aa:1c:79:f7:ef:f9:ca:cf:08:0e:d2:ef:18:
         ad:e9:de:4b:74:4b:f1:33:28:df:26:34:d4:bd:47:7d:c0:d6:
         79:7e:5b:c7:f7:76:c0:0b:ba:74:d9:28:00:d9:43:6a:be:1d:
         b5:1b:0c:2f:a1:ee:7e:fc:cc:ed:28:9d:1b:20:23:84:8a:9d:
         18:20:e8:79:d3:41:10:00:e7:ac:dc:e9:d2:2f:46:5a:81:81:
         3b:73:21:ee:b0:61:c0:ae:46:ff:ce:33:60:3f:8c:ee:bd:7c:
         3d:b4:c4:e1:52:2d:f6:20:82:6b:59:d9:55:c9:57:07:31:97:
         43:8d:e4:fa:fa:ca:27:6b:b4:b7:c2:77:0c:b3:c4:e4:80:7a:
         69:fd:31:d3:0c:b8:b5:02:ee:80:9f:b6:55:90:54:21:9d:c3:
         b5:23:77:53:4b:44:73:47:96:91:90:d0:c3:f2:f7:b4:ce:7f:
         eb:64:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:22 2025 by rpki-client