Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/bec6e300-25cf-3a68-83d3-de08449e7404.roa
File:                     bec6e300-25cf-3a68-83d3-de08449e7404.roa (raw, json)
Hash identifier:          uT3s6pJ2lhuQHIyHA6RhDw4tany7Nqz6rFJNTshTX2M=
Subject key identifier:   15:BF:0A:96:E2:C4:E8:FD:77:79:BA:28:56:3C:68:8D:E6:00:24:6B
Certificate issuer:       /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial:       010D0C9F432858494303EE04A31904DC47A9AE00
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/bec6e300-25cf-3a68-83d3-de08449e7404.roa
Signing time:             Fri 21 Mar 2025 13:00:50 +0000
ROA not before:           Fri 21 Mar 2025 13:00:50 +0000
ROA not after:            Thu 19 Jun 2025 13:00:50 +0000
asID:                     142019
IP address blocks:        141.195.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:03:ee:04:a3:19:04:dc:47:a9:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
        Validity
            Not Before: Mar 21 13:00:50 2025 GMT
            Not After : Jun 19 13:00:50 2025 GMT
        Subject: CN=21c16c35-e5ca-4bf9-96d7-b875a0736148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:0a:7d:82:54:cf:f3:d3:ee:83:4e:91:4d:
                    bf:3d:a1:66:21:8d:41:dd:52:6b:9c:cd:eb:50:07:
                    24:b2:5b:1d:c3:b0:c4:d8:05:f8:30:ca:c5:8e:13:
                    67:d0:15:45:90:af:0c:7c:8c:86:39:aa:06:37:7e:
                    ae:2e:a6:ff:1f:26:ff:20:5e:cb:9a:fe:06:3c:9f:
                    2a:5a:0e:9d:22:db:96:b9:f9:ac:37:70:d9:90:c1:
                    02:d0:b1:29:b7:83:d2:ca:78:92:79:8a:8d:5b:87:
                    4c:b1:51:2a:9a:e5:09:62:eb:f6:0e:ed:eb:60:0e:
                    fb:31:5e:72:b9:74:ed:16:c2:4e:3e:0c:a8:8c:51:
                    18:74:5d:1f:89:53:22:18:28:0c:6a:aa:e1:e1:7a:
                    93:ce:b1:a5:28:41:6e:21:aa:14:aa:0c:21:ca:31:
                    68:07:72:0d:af:91:52:b6:d7:b8:d2:2a:bd:fc:1b:
                    27:a0:af:9d:41:c7:49:48:0c:28:d1:23:d8:cd:09:
                    8a:fd:c4:4d:11:53:ae:1f:df:e7:8e:79:5e:52:c1:
                    5e:fd:eb:7f:27:d6:3d:c9:5e:b7:6d:dc:fb:2c:70:
                    1e:b2:04:50:bd:e1:e4:6b:52:02:df:7c:a4:fd:be:
                    98:61:55:5d:f0:e9:c9:89:5d:35:a8:00:f2:c1:61:
                    57:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BF:0A:96:E2:C4:E8:FD:77:79:BA:28:56:3C:68:8D:E6:00:24:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/bec6e300-25cf-3a68-83d3-de08449e7404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl

            X509v3 Authority Key Identifier:
                keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6e:e8:9f:34:2e:b9:e3:fc:7d:e9:32:eb:db:98:02:86:bc:
         18:cd:e3:1c:64:22:0d:e3:f3:a4:bd:86:09:d3:fe:7e:43:3d:
         4d:58:2e:34:ef:75:6f:78:11:71:41:86:ae:a7:ed:c8:f7:6d:
         25:bd:c0:c2:1d:58:c0:2a:5e:11:99:de:40:af:5a:bb:4e:56:
         fa:5e:8b:d5:bf:8c:9a:ff:fb:5c:0e:5f:69:d3:9f:d5:79:38:
         75:66:f0:46:be:25:f2:84:e4:b3:39:58:7e:9f:ba:e8:55:69:
         b1:50:e7:ca:95:30:3f:f6:07:9f:ee:da:08:f0:b5:6e:fb:78:
         b3:90:37:a1:64:b7:16:db:7a:95:22:66:91:13:be:94:27:03:
         0b:0a:d2:8d:5e:9f:bb:e3:32:42:c5:e1:3d:37:06:b6:e2:d2:
         75:b0:d1:97:e7:3a:7e:a1:95:f8:b0:fe:c0:3f:8e:41:c3:7f:
         53:52:06:07:55:32:bf:3c:6d:62:4c:f5:fd:14:7f:8e:3b:97:
         36:dc:e2:90:c9:f8:c1:5e:e1:29:19:18:9e:ba:48:3e:8f:09:
         91:0e:a1:73:fe:f1:04:f5:de:99:8e:10:a4:1f:2f:03:82:c2:
         08:e0:93:4b:2f:20:75:50:58:8b:d3:d9:5e:61:20:8a:4c:11:
         f3:8e:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:35 2025 by rpki-client