Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/1dc127da-370d-3c62-a526-2572cf53a784.roa
File:                     1dc127da-370d-3c62-a526-2572cf53a784.roa (raw, json)
Hash identifier:          gXl0RIQWf+v3d/hwEqgo/MjNh4Iaj6DWUzt6MY7Ckb0=
Subject key identifier:   8E:4C:31:42:2D:96:1A:41:CE:0B:98:B5:65:2B:E2:00:67:F3:23:51
Certificate issuer:       /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial:       010D0C9F43285848DD3BA770AE8D0A8DBA7DC1F0
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/1dc127da-370d-3c62-a526-2572cf53a784.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     395807
IP address blocks:        199.60.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:a7:70:ae:8d:0a:8d:ba:7d:c1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=05c9cdd3-563c-44d1-8e4d-dc64733789d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:af:9d:14:d9:5c:7e:b3:d4:62:ae:b8:c8:
                    60:8c:f7:6d:12:26:45:6b:17:8f:eb:ff:1a:50:55:
                    e8:e2:62:f7:78:f3:91:ca:08:74:7c:fe:4c:61:96:
                    23:75:98:c5:7d:8c:f5:cc:d3:2c:98:8b:57:24:da:
                    b2:51:eb:86:73:50:94:d5:9f:86:40:49:8a:de:aa:
                    4e:52:6c:7e:07:4b:16:c4:a7:27:85:4b:5e:10:57:
                    f7:2b:76:8d:78:a6:36:e8:8e:8c:b0:70:f8:de:09:
                    51:d1:32:47:95:47:d5:a0:14:1b:0e:a4:88:84:a2:
                    7c:c5:ec:73:4c:d0:7b:f2:1e:57:83:0b:f9:74:7a:
                    4c:85:b1:64:09:41:bf:0c:5e:83:44:2b:85:86:00:
                    3e:1b:0b:66:06:8e:00:ff:a4:08:93:a2:96:98:76:
                    a9:ae:42:a4:07:80:6f:0e:74:92:fc:0a:f7:92:34:
                    5a:30:bb:fc:92:d0:bc:8b:f5:93:7a:72:6f:7a:d5:
                    ed:b9:02:d7:92:c2:47:89:2d:41:7b:44:0d:7e:24:
                    d1:6d:34:e0:02:11:59:f7:ac:fa:37:07:67:98:e6:
                    2f:b0:4d:8e:96:b6:a7:65:6d:a7:38:df:97:5a:53:
                    9e:45:4f:0c:23:a7:7d:1a:77:0f:02:0c:ea:a1:e4:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:31:42:2D:96:1A:41:CE:0B:98:B5:65:2B:E2:00:67:F3:23:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/1dc127da-370d-3c62-a526-2572cf53a784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl

            X509v3 Authority Key Identifier:
                keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:38:1d:33:48:bb:e7:0f:0d:41:0b:d4:01:3e:cf:89:2f:80:
         0c:60:1e:e7:e7:d2:eb:7b:aa:21:10:99:d9:72:56:ae:bb:49:
         11:45:6b:f8:43:76:ed:c2:75:e4:83:34:de:b9:11:81:12:4a:
         ec:a4:e8:0a:50:01:22:37:27:d2:31:f7:48:37:b3:f0:09:58:
         e8:99:e6:7d:8f:78:a8:4f:e2:08:60:7d:1d:0d:8a:75:49:8a:
         88:ef:50:7d:bb:bb:40:fa:fe:29:03:59:96:7d:32:69:fa:58:
         84:21:3b:8b:74:5b:f6:43:d0:bc:c6:94:43:63:ac:0b:24:71:
         64:45:2c:98:1a:29:cf:de:53:a2:42:2a:57:da:37:93:9b:8a:
         80:b9:bb:83:cb:53:a1:32:25:dc:88:18:e1:d8:a3:20:3a:8c:
         94:3c:f3:cb:0d:02:12:4d:47:c2:e9:9d:d9:c0:2d:cc:06:0d:
         05:8c:c5:2c:7f:5e:0f:d2:c6:d9:9d:04:16:50:4f:e0:08:01:
         ce:75:8f:77:10:aa:53:f2:94:b3:4e:df:19:01:c8:33:c9:ef:
         a1:09:ed:e3:07:34:20:89:07:90:91:78:56:e2:a9:8f:b8:69:
         61:81:97:43:55:bd:9e:d9:bb:f3:4d:8c:0a:5c:44:ca:d2:c1:
         e6:a4:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:25:50 2025 by rpki-client