Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
File:                     6b20c6c8-b544-3233-9c89-ea3eead2913d.roa (raw, json)
Hash identifier:          p7ULHf4+pbk608fjg+v2hP+yQAW96hWhNU9zmJWw6AQ=
Subject key identifier:   E8:AC:42:4B:CC:05:D8:A2:1A:94:76:DA:31:3D:75:A9:86:A0:7F:54
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F43285848F4F69D03BD2F630601B4F400
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     18914
IP address blocks:        204.8.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:9d:03:bd:2f:63:06:01:b4:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=b8a426c5-e75d-40bb-bf9a-54058ae818d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:4c:b4:c1:c5:62:13:06:2c:58:f6:a8:41:
                    d6:4c:a0:77:e8:85:ee:d2:f2:d7:f4:0d:a3:72:39:
                    4a:8c:70:15:89:54:08:66:11:ec:33:05:d6:7d:ef:
                    fc:5f:ac:71:df:2d:2b:6f:80:c7:54:7d:64:46:1a:
                    13:5c:da:a9:b5:7d:95:f9:14:12:65:18:ea:d2:35:
                    3d:66:c9:4e:95:24:68:1c:ed:7e:1c:a6:6b:b1:f3:
                    d0:19:65:9f:a7:a0:a6:c6:57:44:74:99:2b:a6:a0:
                    43:e7:28:32:46:8e:8e:69:02:58:14:32:64:05:fb:
                    07:14:0d:5f:a6:9c:bc:07:18:71:2c:f4:8b:48:00:
                    96:0f:d7:ef:48:57:6f:39:b8:8f:42:79:18:7d:f1:
                    b0:43:5d:28:c0:a9:a6:b4:91:9d:ff:dd:3a:ec:35:
                    9f:0e:01:9d:f5:9e:ad:d9:15:2b:11:ab:4b:ef:ef:
                    68:f3:ed:b1:80:3f:44:f4:ad:18:ef:72:61:1d:10:
                    36:65:d3:9d:fa:47:f1:a6:3d:37:6d:e1:77:a6:4b:
                    10:a3:64:42:98:f3:ca:07:3e:82:b9:ef:8f:60:43:
                    79:a4:22:c4:02:11:29:ba:62:26:26:56:e7:8a:8e:
                    3f:b8:05:03:74:cf:58:b9:a3:3e:80:db:08:a8:50:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AC:42:4B:CC:05:D8:A2:1A:94:76:DA:31:3D:75:A9:86:A0:7F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:72:3c:d2:44:cd:a0:23:ff:77:d6:5c:05:dc:df:7b:fd:09:
         cd:0a:74:68:a1:c4:ca:30:4a:a6:64:57:a3:48:7e:4f:60:23:
         8f:59:99:f1:0d:dd:f2:7f:02:4b:23:63:6b:50:2a:eb:2d:ec:
         51:a2:62:7a:b5:97:09:41:6c:02:e8:cc:7c:8c:71:a1:3b:17:
         52:7e:8a:fa:28:cb:27:50:6b:ee:76:cd:9d:d5:8a:e8:51:e8:
         96:41:91:98:14:ea:65:19:b6:bd:9f:9b:7c:7f:f1:49:79:b7:
         e2:de:94:0f:67:fd:2c:a5:f6:a5:f2:7a:cf:8d:02:bc:8a:c0:
         92:a8:c5:83:bc:c2:c3:5b:4b:e8:04:27:b6:52:de:e9:1a:c9:
         a7:23:dd:97:70:10:10:4c:1c:a5:72:c2:eb:db:15:ca:0d:e3:
         3a:8d:a8:e7:0e:a1:3f:b2:cb:70:5e:2e:19:0e:aa:05:c7:c8:
         67:c9:63:d2:b0:6e:1e:62:d1:8e:25:af:bd:62:a1:48:35:6f:
         ed:fb:60:02:0e:96:eb:cd:c9:21:f7:e2:4a:0d:5b:14:8c:7f:
         0e:c2:30:82:7e:45:42:3c:ff:97:cd:18:3c:bb:67:54:8a:3f:
         3e:8d:2e:e7:1a:4d:05:c1:ba:55:d2:b3:53:79:bf:0b:98:c7:
         df:82:8d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:46:32 2025 by rpki-client