Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa
File:                     69e7bb45-303a-3a64-b6aa-813f620b77b9.roa (raw, json)
Hash identifier:          pJVIO+RyZ/FNHJq9uYEfX/p+c3ggfMArMQxU092c3F8=
Subject key identifier:   2D:48:4D:2D:07:D2:99:6B:49:C1:4F:E4:01:8F:01:87:5A:71:BA:93
Certificate issuer:       /CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
Certificate serial:       010D0C9F43285848222FD30128FA5F44B615A480
Authority key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     11260
IP address blocks:        67.58.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:d3:01:28:fa:5f:44:b6:15:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=2e5ffdf4-1a92-4858-bde2-b69dda5e7ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:f9:4a:56:fa:75:bf:01:59:09:bc:2c:2c:
                    7f:af:88:12:1f:9b:a0:e5:7a:58:21:17:66:6d:f5:
                    c5:a7:aa:65:55:32:65:36:11:85:25:56:62:18:e4:
                    86:64:5c:ef:a1:1b:04:a6:67:9a:8e:5f:fa:b5:9d:
                    45:ba:5a:00:dd:87:ba:54:31:99:5f:90:27:b9:2b:
                    e7:fc:bd:b6:81:2f:11:fa:ac:85:e0:2e:d3:d3:1c:
                    ed:a8:d5:db:78:ec:c5:97:fb:9a:a0:8a:d1:e9:18:
                    e7:25:e0:0c:0a:57:48:ab:95:cc:b6:ef:02:55:d7:
                    67:f6:5e:b9:fb:0d:a2:3a:e6:75:60:82:7a:95:25:
                    bc:1c:90:3e:44:66:0a:46:0e:41:17:75:b1:57:08:
                    eb:0f:a0:e6:c2:90:b1:2f:91:9b:25:81:69:27:be:
                    a3:94:69:eb:6e:98:d8:b0:bb:31:c1:c7:b6:c9:e2:
                    2f:70:81:03:d7:90:4e:c5:ea:c1:b5:f0:67:db:7e:
                    39:66:4c:2d:df:b7:e9:4b:65:2d:57:28:63:48:67:
                    df:52:e2:d7:62:e1:da:28:06:eb:1a:2a:44:b3:f2:
                    1f:23:87:c4:2f:8e:ce:58:2a:b4:94:fd:25:e1:35:
                    32:b8:fd:6b:d9:56:03:f0:5e:a3:73:76:ad:a2:4a:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:48:4D:2D:07:D2:99:6B:49:C1:4F:E4:01:8F:01:87:5A:71:BA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl

            X509v3 Authority Key Identifier:
                keyid:95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.58.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:58:cd:89:d0:2f:82:06:c8:06:fc:66:66:0a:7e:9d:40:60:
         a3:3c:78:73:1a:a6:77:b9:d8:db:36:81:fe:30:86:70:b4:b7:
         d0:ff:27:e0:e0:5b:d9:3a:5a:aa:2c:d1:3d:4e:af:2c:1e:77:
         db:b5:54:50:5b:fa:d8:3c:32:fd:a7:06:1a:68:0f:6c:e6:8c:
         29:22:4c:a5:7e:8c:7a:16:4a:af:a6:3d:9e:0c:6c:08:6e:9d:
         49:79:e4:17:47:57:2c:c6:4d:19:2d:ec:c9:37:a5:69:7b:6f:
         5e:5e:a6:ce:f0:34:c8:ec:59:8d:bc:24:cd:53:44:4b:61:44:
         8e:f5:44:d4:85:cd:cd:0f:ba:de:5c:3d:52:60:22:ab:fc:da:
         74:33:ec:cc:3c:fc:c4:11:1e:fb:54:27:ea:73:65:86:6e:4f:
         1c:47:88:98:86:65:a5:42:0e:37:f3:b2:e7:06:fe:2d:ba:16:
         db:d4:f4:6c:59:04:c3:27:28:f8:e5:0f:06:90:88:c7:d6:09:
         df:8a:79:59:91:a5:f8:f9:5b:98:91:05:5f:4c:58:1d:f0:e7:
         aa:02:92:31:ca:ee:12:bc:a5:b0:7f:c0:39:d2:e3:5f:50:6b:
         7c:a5:3f:ad:42:77:af:ce:2e:da:a0:9a:be:14:a9:2a:ca:46:
         98:4c:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:59 2025 by rpki-client