Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa
File:                     8baa5710-3903-3a6d-8148-fec2d5a33c00.roa (raw, json)
Hash identifier:          HM4vuL4JYcf+KwL52Gdz06xUToCIyttyI8na/T7FLPU=
Subject key identifier:   25:CA:23:0E:C5:59:AE:22:93:25:C0:47:0D:C9:F6:DC:55:62:94:BD
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F43285848100A7DFC6FC90AC56362B7C0
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     19197
IP address blocks:        69.41.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:7d:fc:6f:c9:0a:c5:63:62:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=d30e4297-440b-40bf-be29-ad39a6bda4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:eb:55:14:af:92:16:55:ed:3d:b6:0f:1d:18:
                    59:16:46:7d:43:d9:64:58:34:c2:e4:7a:8d:71:64:
                    bd:4b:1c:f8:9c:62:04:eb:03:d0:e2:bd:d3:88:46:
                    25:b7:7a:7f:83:5f:76:3b:a9:5d:ad:20:8a:a5:1e:
                    66:97:74:03:2e:90:df:b2:18:a5:78:76:5e:5c:64:
                    da:4e:81:57:87:5f:6c:3b:e7:58:f7:06:25:b3:92:
                    a2:ea:51:c6:e5:c3:69:a9:47:59:6b:d5:81:ea:46:
                    69:6a:d3:0f:24:eb:44:d5:7d:4a:a5:ae:12:fe:95:
                    01:24:71:23:28:3a:ff:ad:94:92:cd:c9:1a:c2:9b:
                    1d:66:be:a7:c2:0f:45:5c:1a:47:b3:f0:60:a9:3f:
                    ce:34:03:67:0c:76:16:6f:41:c9:2e:f4:42:6c:b2:
                    33:91:4a:f9:06:73:72:a9:32:45:23:a7:df:ea:38:
                    c2:c5:8c:91:c4:22:63:5e:89:80:9e:bc:55:a1:6c:
                    9b:b3:fd:60:27:e9:17:cf:66:a7:af:db:15:b9:ba:
                    ef:d0:40:81:69:f0:1f:d4:d5:a1:fe:81:80:e1:c8:
                    2a:83:50:8b:ae:19:6d:de:b5:cc:41:cc:65:8f:ab:
                    f8:48:bf:47:b7:8c:ae:76:bf:7b:98:d3:a0:24:0c:
                    d3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CA:23:0E:C5:59:AE:22:93:25:C0:47:0D:C9:F6:DC:55:62:94:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:b0:1b:bb:da:d5:cc:10:fb:95:8c:c4:15:e2:95:99:05:cc:
         43:44:aa:f9:12:38:8b:a5:0f:30:a2:42:c7:ed:dc:5a:49:4f:
         bc:53:f1:dc:f5:98:4c:4a:21:4d:10:3d:6b:36:be:f7:ed:06:
         05:16:1e:b5:f1:8e:88:3e:e6:c8:ae:f3:4c:91:2b:7b:0d:b9:
         d1:df:74:23:5e:dd:9d:09:3d:c3:53:10:a6:e5:fe:7b:14:15:
         ce:fd:0d:f1:70:09:bb:a9:a9:5c:20:b3:0b:26:6a:48:34:1c:
         d7:14:7f:02:0a:9d:6f:6f:d7:75:b6:25:bc:83:ae:d2:05:9b:
         1d:1c:38:c4:1d:5b:fa:83:b0:94:9c:89:27:71:68:11:75:1e:
         24:07:16:fc:2d:ca:cb:85:af:8a:bc:0d:55:cf:ee:44:9d:f3:
         86:b7:31:23:76:33:eb:8c:e0:69:b3:52:6d:e1:9d:93:a6:cc:
         31:9f:9b:0f:82:b7:b3:f2:e9:4c:0c:ac:e4:fa:df:e2:83:21:
         d8:3e:c4:4e:fa:95:67:fc:cd:96:d9:1a:4c:2a:63:9b:3d:99:
         da:37:44:18:23:a9:71:e7:26:76:0d:78:fa:2f:32:26:c9:a5:
         04:e9:c3:c3:b0:eb:85:cf:7b:a8:dc:97:ea:22:83:1d:69:c9:
         a1:8d:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:54 2025 by rpki-client