Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa
File:                     2b05d93a-3505-32a8-9778-a907ed424baa.roa (raw, json)
Hash identifier:          UPirKDAeyVDvbmS1dtEZYMCfOGP5vrRZc5tswRDJ5HA=
Subject key identifier:   40:95:81:1F:76:39:8E:24:AC:3C:5F:CB:F4:5C:7E:6D:D9:FF:1F:A3
Certificate issuer:       /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial:       010D0C9F43285848828085142AEA4C09474DF200
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        209.126.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:85:14:2a:ea:4c:09:47:4d:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=018063e6-5b2b-4134-a9bf-8c9babb589b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:10:40:11:ef:2d:16:a3:c6:2e:71:de:a8:24:
                    b7:e4:e8:fc:8f:e9:81:e5:98:8c:11:59:48:b1:73:
                    08:7f:6f:c4:73:b4:c5:5a:03:9d:67:d8:86:a9:bc:
                    a9:1d:68:c6:65:ea:49:25:8d:b9:f8:0d:0c:f0:56:
                    ae:e1:7b:b6:e1:5a:b2:7c:51:4b:30:15:3d:95:59:
                    df:9f:5f:48:31:43:96:42:47:df:4a:c8:f0:2a:72:
                    f8:18:ec:ee:cc:72:78:95:44:a8:f8:3f:d4:e0:fb:
                    d7:e7:53:ab:23:8b:e3:6a:92:1c:a6:2d:d5:99:b0:
                    35:4d:3b:16:b6:b0:94:a0:ed:2d:8b:b1:e8:6a:01:
                    d1:53:14:25:6d:fe:73:fe:41:c8:4e:a1:eb:8c:3d:
                    5e:d8:63:78:a7:19:34:fc:76:2d:2a:3a:04:83:17:
                    52:17:f0:eb:05:eb:96:c7:b0:e9:dc:89:22:e4:fe:
                    0e:3f:4e:c1:39:f1:d9:94:ce:4e:5f:9c:84:d6:73:
                    e1:fa:e6:1e:5a:12:86:53:8f:c7:17:ff:ce:78:f8:
                    af:eb:87:fe:6b:c9:df:54:fe:66:f3:ec:9f:55:f0:
                    4c:d7:1a:35:af:66:03:79:68:82:cd:1d:5e:01:c4:
                    af:f4:20:d5:a7:72:ef:ce:57:4c:47:7b:f0:e8:8b:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:95:81:1F:76:39:8E:24:AC:3C:5F:CB:F4:5C:7E:6D:D9:FF:1F:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl

            X509v3 Authority Key Identifier:
                keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.126.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:25:63:dc:f7:10:b3:8b:d7:2f:da:34:c7:10:e3:ec:17:
         36:84:8d:f8:f7:a4:9d:5b:8a:1d:5a:64:58:92:05:d1:04:de:
         2a:3f:f6:c1:fe:ab:e5:47:a6:6a:60:99:c1:cf:a7:ed:ee:6e:
         49:76:bc:1a:f7:75:1c:52:6f:ec:a6:10:bd:f5:e8:d7:5d:ca:
         4f:9b:d7:fa:9f:d4:d4:2e:3e:5b:b9:dd:a2:9b:14:ef:53:9a:
         7b:d2:1c:e0:a0:26:8a:b9:e3:d7:e6:2e:dc:86:e4:67:3f:19:
         9a:46:29:79:94:de:1c:07:fc:c1:00:56:b0:52:11:ab:4f:ae:
         b4:bf:9e:ec:6b:3f:9e:2d:7b:54:79:f5:e4:13:fd:06:95:b3:
         0c:c4:1a:fc:ed:bd:b8:f6:9c:08:26:b3:f6:6d:15:66:1c:97:
         3d:3c:86:a6:42:b6:4f:f5:22:cf:ea:f0:a9:01:ca:30:5c:dc:
         41:43:93:32:94:47:df:08:d2:68:46:df:99:8c:30:80:8a:45:
         bc:66:fa:f8:a2:8d:ec:9d:3b:49:97:1e:91:2a:05:bf:16:a4:
         a4:f7:00:cc:20:c2:04:68:db:f8:9c:78:c5:60:6c:25:44:d3:
         6f:12:cf:d2:49:a9:f7:ec:1c:37:f3:06:b4:4e:ac:14:d9:51:
         64:08:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:28 2025 by rpki-client