Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa
File:                     aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa (raw, json)
Hash identifier:          8Tucb+h2EQc3ODRVEWR7oPny9JfUH8ABY5migcvBoYA=
Subject key identifier:   9F:B4:6C:50:CF:09:D8:E2:50:A8:9E:EE:99:37:62:37:C6:A4:10:65
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F432858496FAF1255C6C02FF34B2A4FC0
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     46475
IP address blocks:        185.167.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:12:55:c6:c0:2f:f3:4b:2a:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=32c9e102-6a0f-4277-8c98-5f4f413e63e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:fe:6a:4a:38:30:82:7b:23:21:5a:4e:c3:
                    ef:cb:5d:b7:99:0f:da:e2:9a:a5:43:9b:1d:63:0d:
                    4b:2c:20:2a:52:b0:f7:75:a3:b2:0b:04:ae:69:ee:
                    6a:d6:ac:d3:b4:3f:35:8a:e8:50:67:fa:f8:4c:03:
                    9b:5f:3e:d9:91:63:a8:63:61:20:ee:e7:71:d3:a8:
                    d6:a1:a7:7b:04:8f:1c:69:8d:df:36:10:62:87:41:
                    b8:10:a6:87:ea:28:28:ee:4f:97:f9:61:1f:93:08:
                    ff:46:70:c9:d7:d3:3d:66:98:d2:00:55:27:f0:6a:
                    55:48:39:11:49:ac:c8:af:1d:51:8c:6e:2c:32:c4:
                    c2:2c:6c:9f:c7:02:ed:52:50:2a:48:05:2f:58:d0:
                    fd:7a:9a:77:2e:71:71:2e:f1:4b:9b:76:cf:46:6a:
                    7e:f8:6e:79:b3:99:94:f2:38:1c:36:24:77:36:07:
                    52:f5:4f:25:5d:dd:06:80:4a:69:a8:3a:ed:e1:e0:
                    4b:a3:df:53:ec:45:6f:e4:06:75:ad:eb:4b:f9:2e:
                    e0:2b:5c:76:f8:4d:42:f1:f9:aa:93:a1:5c:36:03:
                    ed:1d:f4:33:80:61:e8:36:32:1e:16:37:e3:20:f2:
                    14:0c:0c:fd:8a:1c:f8:f6:fd:f4:e2:d3:ed:8f:1f:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:6C:50:CF:09:D8:E2:50:A8:9E:EE:99:37:62:37:C6:A4:10:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:a3:3b:c3:88:7f:25:0f:f7:48:f9:e5:9a:d4:e1:98:a2:
         c9:41:7b:f9:7f:ae:51:a0:77:56:d5:4e:c2:ff:4d:2d:55:de:
         37:8b:7c:a8:01:6b:cb:88:6f:cc:11:aa:6c:37:f7:31:9b:0d:
         cc:ab:a8:29:ef:89:03:04:9a:1b:b5:72:69:97:04:7b:e1:08:
         65:88:13:16:36:26:3e:15:05:1d:2d:94:a4:d5:30:93:fe:60:
         01:7a:e4:22:0a:bf:31:1a:fe:82:11:66:af:d3:19:b5:6e:f6:
         1b:90:93:09:8d:06:10:3a:c0:86:c8:6c:6d:50:a5:51:af:c9:
         1a:37:1c:0e:ba:8c:21:84:05:16:7f:e8:48:d9:01:fd:fe:6c:
         82:b7:60:b6:7e:d2:d6:28:8d:7a:05:82:f6:ae:d8:5a:be:4b:
         10:2c:d6:e5:cf:83:18:b3:06:70:6d:c4:0d:94:1a:dc:40:9b:
         00:d9:f7:0a:dd:9f:15:50:1d:f1:ee:33:24:12:05:d8:92:35:
         91:13:c3:7c:5a:36:16:1b:2e:ee:2e:95:b4:ea:e1:cc:4b:9c:
         4d:ef:21:5f:50:d9:75:af:e9:4f:fd:fb:f3:7c:56:ef:16:33:
         47:ea:3c:bb:a5:a5:2a:b6:19:64:37:71:58:b7:59:02:38:21:
         37:6a:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:11:32 2025 by rpki-client