Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9dea587d-c710-37f6-a1c9-1259a41cb4d3.roa
File:                     9dea587d-c710-37f6-a1c9-1259a41cb4d3.roa (raw, json)
Hash identifier:          QyWD68xlkf4O8lEJxfHHsUQMuqwnJDVFG4C5wynHZsM=
Subject key identifier:   C7:7F:F0:DA:B3:59:A4:7E:33:4D:2E:38:E6:D5:64:16:6B:DC:37:6B
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858489075FA42C40904A55B7A4B80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9dea587d-c710-37f6-a1c9-1259a41cb4d3.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     16462
IP address blocks:        206.12.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:fa:42:c4:09:04:a5:5b:7a:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=99d4acd2-7f8c-416c-8805-abf48aca4ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:1f:11:ae:ea:0e:4d:63:7f:df:7f:3d:a8:
                    5b:d0:77:e6:df:5e:38:0d:b1:86:a9:91:89:4a:71:
                    4f:b5:ed:8d:b6:88:95:dc:04:b8:23:ec:ea:a4:df:
                    f4:12:55:b5:7e:a3:b7:f9:2f:11:df:39:06:a8:c2:
                    8c:80:c9:b0:00:2d:0d:74:50:25:7c:4c:f7:3e:53:
                    30:24:cf:fd:f1:62:ce:08:f6:05:e4:67:3d:ec:cc:
                    99:7e:ab:4f:cd:9e:5d:1c:14:6c:97:1e:55:fc:3c:
                    c1:41:ba:09:11:3b:4a:fb:58:5b:38:87:84:a9:a6:
                    73:1b:85:2b:88:6b:81:2a:61:cf:e8:17:40:8a:fc:
                    09:50:5e:74:d6:b6:77:8a:92:6d:32:0f:ac:f2:a4:
                    51:b4:4a:76:b8:fb:db:ca:c0:b7:0c:89:e6:14:01:
                    4b:87:5a:9c:81:f9:45:86:96:a0:20:bc:71:de:47:
                    ca:f9:84:44:c6:f8:d0:0d:f0:97:ad:c9:3f:03:69:
                    b3:2b:4b:3b:23:ce:24:58:79:57:b1:7e:36:01:da:
                    dc:ce:2c:27:81:c1:b5:02:4d:ee:ed:00:ad:cb:44:
                    b7:c8:bf:cf:3d:e2:39:39:20:72:b9:d3:70:2c:dc:
                    84:96:53:30:fb:18:c8:ea:7d:70:d0:08:bc:f3:1b:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7F:F0:DA:B3:59:A4:7E:33:4D:2E:38:E6:D5:64:16:6B:DC:37:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9dea587d-c710-37f6-a1c9-1259a41cb4d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:08:ee:45:84:a3:3d:7a:af:11:5c:72:3a:b2:27:ff:30:95:
         52:e1:65:03:36:71:f0:87:b3:0c:2a:88:1d:b5:82:3d:75:43:
         58:06:c5:55:32:47:9a:a5:21:a2:09:90:47:47:e1:39:b4:52:
         70:2d:3c:15:c3:6e:a6:00:cf:dd:c6:c4:d1:bb:d6:b5:2b:fe:
         ed:04:80:1e:87:84:2b:47:37:d4:7a:ca:f6:ce:9e:0b:00:cf:
         54:08:b9:08:31:c1:f7:a0:cf:a5:8d:ae:f3:9b:c4:32:f3:d7:
         f7:9e:b1:42:97:33:bf:76:b3:5b:ed:94:f5:c4:fa:f6:54:70:
         ce:30:df:fa:b5:56:6d:c8:8b:22:ac:59:62:96:bc:43:55:f3:
         ec:d2:e2:37:81:2b:7c:d9:b4:c9:f6:66:60:37:fa:95:1f:d9:
         30:95:34:fb:39:56:da:05:03:96:c9:ad:d5:b5:83:f5:2b:eb:
         ce:07:dd:c2:a8:74:a1:01:b3:7e:40:ea:60:f9:fd:bc:b1:e0:
         1d:0a:d4:3b:3c:d9:0c:72:4d:14:b7:73:08:a8:ad:bb:b6:6f:
         60:96:3b:64:49:07:7c:e0:c8:4e:1b:e2:55:87:0d:9c:42:70:
         8b:b6:19:a0:17:46:af:90:ee:2e:f5:c0:3a:d9:b2:92:48:fe:
         df:c6:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:16 2025 by rpki-client