Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/1a7efd82-74e7-3612-8bea-ac62e2d4346f.roa
File:                     1a7efd82-74e7-3612-8bea-ac62e2d4346f.roa (raw, json)
Hash identifier:          6gZu9YrUu6skJUY6bKOJHs9Jpqvrr+JMp5mqyxR/XNc=
Subject key identifier:   53:31:C0:88:13:DA:B9:23:79:EA:6F:6E:34:2E:0C:95:27:6E:86:45
Certificate issuer:       /CN=66108100-1fc2-4d23-b89e-3e81cc652270
Certificate serial:       010D0C9F43285848EF6138CFD8E648D39326E400
Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/1a7efd82-74e7-3612-8bea-ac62e2d4346f.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     36614
IP address blocks:        206.124.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:38:cf:d8:e6:48:d3:93:26:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=69f6db30-4a7a-4344-86f0-63edec9f41ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e3:09:8e:e5:0d:a5:c2:68:73:1f:57:24:03:
                    3d:d2:9c:4b:2a:13:37:ba:20:66:f0:7f:62:94:88:
                    5a:00:76:d3:9c:b2:f0:e6:10:d4:ae:21:82:86:84:
                    c5:5d:fb:a1:90:68:92:c1:32:b2:c7:da:15:dd:05:
                    bd:82:48:56:c2:96:04:d7:32:d4:8b:42:4b:b5:1d:
                    c8:ba:8f:f1:7a:54:85:da:92:a3:a3:ac:05:9a:ba:
                    73:38:ed:60:57:9e:ff:16:53:9e:e5:1c:e8:28:83:
                    02:d6:9c:90:13:88:21:3d:ff:35:b3:89:c7:99:78:
                    35:1e:d3:fd:60:a0:b0:55:8b:8e:bf:35:bb:00:cd:
                    cf:81:75:02:a9:70:f1:16:8f:c4:be:2d:53:5c:e5:
                    b4:60:9a:5a:8a:47:e4:5b:ea:36:df:af:17:e7:8d:
                    b2:80:a7:d8:2c:7a:98:bc:4f:b8:e0:01:8a:45:16:
                    9f:52:81:20:2c:c8:32:24:bf:6a:9c:2a:5a:bc:81:
                    a1:a3:80:73:6d:59:97:f9:71:f8:8b:74:f4:94:33:
                    7d:1d:df:b7:27:ec:10:0a:5c:8c:38:fb:81:d7:25:
                    7b:51:3c:a5:ea:bf:7f:92:be:b5:81:2d:28:dc:8f:
                    76:60:88:89:25:1a:21:25:27:cf:c1:bb:6c:14:18:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:31:C0:88:13:DA:B9:23:79:EA:6F:6E:34:2E:0C:95:27:6E:86:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/1a7efd82-74e7-3612-8bea-ac62e2d4346f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl

            X509v3 Authority Key Identifier:
                keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.124.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ce:c2:df:9a:de:6a:0c:a7:e2:a7:bc:bb:4d:be:9e:7f:e3:
         23:6d:fe:32:84:e7:d1:3e:b5:d1:f9:ed:40:65:7b:f6:6c:a9:
         26:40:21:b4:e8:e2:64:0d:60:06:c2:0c:ed:db:7e:83:23:ed:
         8c:75:ed:36:1a:86:a5:f0:46:ab:a2:d2:fc:f6:a4:75:8a:31:
         a8:96:02:46:a6:f6:db:2c:1c:3e:39:56:f6:dd:08:b2:ed:12:
         31:23:2f:34:b4:3e:0c:6f:a3:e5:86:ba:aa:00:41:23:08:7c:
         1c:5a:cc:83:d6:51:37:b2:5c:e6:8d:13:a1:04:ef:8f:32:ae:
         32:f9:91:d1:57:79:ad:2a:79:e6:aa:d3:04:3a:09:82:26:dd:
         25:89:9e:5c:5a:4f:e9:3b:0a:66:09:cb:16:10:75:ab:08:a0:
         3a:ce:3d:1e:78:71:2b:fb:f4:43:15:84:2f:83:57:47:68:24:
         61:0f:e3:e9:53:5b:16:df:6d:79:f7:aa:71:71:bc:a9:ae:26:
         16:95:a8:b0:99:e8:96:fc:6b:02:25:a2:11:69:8a:a5:19:aa:
         71:ef:b1:78:94:c8:91:3e:3d:bb:38:c5:4a:f2:b5:c6:2d:ee:
         62:07:7a:44:a7:c5:d2:2c:95:7b:fe:bb:8e:0b:d8:3f:f3:16:
         1d:e0:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:56 2025 by rpki-client