Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa
File:                     60ee8622-9109-33d6-910b-dbcc8263baa3.roa (raw, json)
Hash identifier:          mh/qA6E+4QhB46GeuSJhz2iipg/TofrpZ49xsIzDwrA=
Subject key identifier:   1B:69:F6:AA:12:6B:02:81:B0:7B:10:FA:5D:62:CF:AE:08:A4:A9:35
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F43285848AF2B7AB1D024098AA89182A0
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     396112
IP address blocks:        208.40.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:7a:b1:d0:24:09:8a:a8:91:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=5d6e7949-340a-4034-9945-d7b32f007cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0e:c7:27:29:b2:a0:6a:4d:ec:d1:09:c4:29:
                    b4:d9:2e:75:f4:b4:ab:a2:d6:2d:4e:07:01:57:fb:
                    95:65:dc:7a:9d:49:02:8f:f4:f9:90:bd:2b:5f:d0:
                    97:34:47:ab:e1:e3:71:58:20:9b:bf:de:26:2e:9f:
                    00:e3:1a:4a:1c:f1:a8:05:24:90:56:24:bd:dc:52:
                    3f:84:23:c8:c5:3b:ad:38:18:35:4d:36:5b:fd:43:
                    fd:e5:d8:ae:db:69:f4:33:8d:c2:b2:51:ef:b2:c1:
                    e9:e2:4c:8e:3e:38:99:4c:ee:8c:b6:27:44:0e:07:
                    17:92:9d:e3:1c:a4:39:2f:33:db:ce:5e:bc:38:e0:
                    cf:3d:e4:7f:6f:f5:4e:3f:dd:23:d2:81:41:60:3e:
                    82:6c:9d:51:ef:49:fd:59:a1:88:65:c7:19:af:4b:
                    d5:d2:37:2f:15:32:2c:09:cc:bc:17:29:8f:67:cd:
                    15:60:ba:73:a2:5c:a4:b7:d1:01:ed:43:77:d5:85:
                    53:ab:37:5d:f6:b1:2d:5b:23:95:0c:3a:a6:bd:a5:
                    0e:ff:70:68:c6:11:8b:c6:ca:2d:c3:06:19:c7:d0:
                    d3:5a:f2:33:2e:21:8a:49:28:de:ce:ec:c7:40:a6:
                    b0:a1:9e:9f:89:f3:04:1a:a7:21:4f:6b:3d:55:20:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:F6:AA:12:6B:02:81:B0:7B:10:FA:5D:62:CF:AE:08:A4:A9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.40.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:39:cd:18:91:a3:d3:90:ea:01:51:8f:9d:00:66:4d:49:cb:
         6c:ce:c2:59:2b:48:9c:62:ba:39:c4:d9:e5:ae:3f:88:1c:c8:
         7d:48:8f:4f:b0:b6:e2:1f:3b:d5:5f:40:27:9d:b3:21:67:72:
         4e:22:02:ea:ab:29:d8:c1:58:23:d9:4d:92:ea:2f:cc:91:bf:
         a8:27:dc:2c:e5:ca:07:4e:98:f3:8d:3d:5c:57:53:0a:ac:20:
         da:9e:6d:df:52:23:38:d5:c6:7b:fb:ca:47:3c:ce:f9:2e:68:
         19:9f:5b:44:5e:e0:43:44:6a:ca:de:83:4f:e1:58:eb:14:0a:
         41:a9:bd:63:e5:55:b8:d8:18:49:70:6c:d5:6b:b5:59:d2:b3:
         88:36:e9:6d:aa:1c:d1:30:0f:4b:25:a5:e3:bd:e4:e5:af:9d:
         25:dc:a4:c9:48:b2:49:49:56:df:88:fb:57:3c:9a:60:cf:0f:
         f6:11:b3:e4:34:c8:c0:90:ec:5b:86:91:75:19:e5:26:10:46:
         ac:1a:06:97:f0:17:f5:68:f6:73:9a:29:0e:84:c7:a9:55:f1:
         62:30:e0:91:b5:7c:8f:37:6c:ce:e0:82:00:72:84:a2:03:77:
         7c:86:41:70:4f:85:79:35:e9:78:9b:e2:36:29:83:16:4a:74:
         b2:7b:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:03:28 2025 by rpki-client