Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4f8195af-8745-3dd6-ba31-6179805f3998.roa
File:                     4f8195af-8745-3dd6-ba31-6179805f3998.roa (raw, json)
Hash identifier:          +o1hAdxIg68kY2rzhvoMSB/wQtN2LF9Z+hqIyipi2gQ=
Subject key identifier:   C3:5D:51:5A:CF:5E:54:DD:34:27:FB:F5:3D:C8:E5:F2:3C:D5:50:71
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F43285848EF6156CF3F73CA11B7A8CB00
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4f8195af-8745-3dd6-ba31-6179805f3998.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     19197
IP address blocks:        69.41.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:56:cf:3f:73:ca:11:b7:a8:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=38d7f735-21cf-4121-96f1-a955779a9d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:0d:fd:01:a9:d5:ac:7d:e3:81:da:9b:3d:
                    bf:cb:4a:c1:16:cc:87:cc:cf:4b:31:34:19:c8:bf:
                    43:13:0e:ee:76:c5:a7:1f:ea:c5:09:39:9b:fc:bb:
                    0f:c6:65:c3:85:9e:59:c8:66:72:70:89:73:79:49:
                    f9:16:c7:47:6e:4a:b7:f3:49:1f:1f:67:76:82:86:
                    50:3d:df:c7:82:0c:cf:22:07:d7:ef:ca:7b:0e:dd:
                    a9:9d:3a:83:ee:ee:4d:36:4f:63:a5:22:44:d7:34:
                    4a:86:07:b7:62:95:1d:43:6b:d8:fa:4d:d2:6d:6a:
                    17:d5:07:cd:71:32:be:15:26:bb:90:0d:60:14:d3:
                    6a:3c:0f:58:28:c0:ca:d6:68:9f:03:80:93:50:ef:
                    ab:a2:36:1e:ee:77:ac:51:0d:24:f1:1f:9b:da:d9:
                    31:49:72:47:2b:fc:9c:e8:6a:6d:e0:94:e9:85:52:
                    98:a7:8b:ca:85:e9:2c:b1:f7:3e:1b:cf:d8:cf:90:
                    dc:6e:ee:1b:d0:60:42:ee:e1:83:d9:f8:0d:39:94:
                    7a:a6:61:60:77:76:dd:56:9d:b9:ec:dc:24:44:c5:
                    74:4c:3a:23:e7:16:e4:97:43:b9:3a:7c:ff:c1:5f:
                    3a:e1:d3:5d:f0:56:f6:2f:cb:72:0b:9e:1d:ba:c1:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5D:51:5A:CF:5E:54:DD:34:27:FB:F5:3D:C8:E5:F2:3C:D5:50:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/4f8195af-8745-3dd6-ba31-6179805f3998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:e9:56:fa:15:15:a8:59:7a:a7:1d:76:b9:fc:04:05:82:6f:
         11:6c:86:9e:10:d8:57:26:52:b7:08:47:09:9d:02:59:25:d0:
         f3:85:4d:31:18:97:fe:60:0b:de:e8:99:99:97:03:de:92:90:
         60:e6:8b:b7:27:32:0d:e9:28:2c:b9:56:fc:b0:e0:bc:ec:41:
         04:44:82:4f:70:db:ab:e0:ad:1f:02:a9:5e:cb:7a:a4:4b:90:
         57:82:12:51:c3:2d:62:b1:1e:5d:0f:25:4b:19:b2:0c:6a:52:
         e0:fc:98:69:12:8b:4f:f8:5e:40:6e:be:eb:15:2d:07:61:9d:
         e3:96:4c:d2:17:6c:64:bd:5d:b3:de:20:f1:d9:93:76:fe:3b:
         f1:e3:b9:fa:cc:ba:1b:f3:3a:da:ea:c8:4a:fd:25:1e:58:68:
         31:b3:93:d8:07:79:c4:f1:d6:c0:74:60:2b:ef:51:a2:dc:43:
         f8:0c:f1:c7:b8:a5:5e:8d:94:a4:92:47:6b:f7:4c:fe:dc:5c:
         7c:aa:6e:11:c1:42:18:52:3e:c5:8b:23:76:d9:d7:4f:5c:bb:
         e2:fc:d9:ec:e7:57:b2:e7:a7:c7:25:8e:47:cc:68:c8:b7:a1:
         6a:21:13:51:bb:20:6c:c0:b9:47:d4:11:97:fe:6b:c2:99:f3:
         a8:68:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:05 2025 by rpki-client