Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/f10ca52c-1428-3a93-9cb0-1038b7d63abe.roa
File:                     f10ca52c-1428-3a93-9cb0-1038b7d63abe.roa (raw, json)
Hash identifier:          Rsa1dlfI3RP4zr7DKlBAOTco3yvx5Vd14krthFBeCjA=
Subject key identifier:   72:D2:7B:98:5E:98:E3:EF:69:92:B1:A4:9D:18:93:EC:57:0A:91:2A
Certificate issuer:       /CN=7334a22a-f222-4457-889f-5478966ecf96
Certificate serial:       010D0C9F432858483F802481878909F63C237F80
Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/f10ca52c-1428-3a93-9cb0-1038b7d63abe.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     11805
IP address blocks:        208.91.102.0/23 maxlen: 32
                          2620:13c:1000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:24:81:87:89:09:f6:3c:23:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=9968b8af-d9f2-4a94-8004-411c63ab22ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:cf:ef:68:b9:35:e9:fe:02:09:ed:90:bb:
                    fc:9c:c2:2f:72:cd:b8:a1:5b:4d:f3:cb:ae:25:0e:
                    9c:82:92:f3:c1:13:58:20:19:6e:09:a0:45:fe:80:
                    49:26:e4:50:33:62:57:74:02:06:c2:9e:53:00:c6:
                    e6:54:4f:b1:eb:a9:9b:5a:a7:82:f9:c1:09:fc:37:
                    cd:35:e5:d2:ad:b5:30:c6:18:bf:29:18:7f:3e:66:
                    55:7a:ab:62:44:14:8b:2a:02:81:0d:80:df:c9:3a:
                    ad:74:07:7a:12:8c:c8:95:d2:69:79:8c:e4:c9:4c:
                    88:02:44:0e:89:2a:ce:b8:dc:47:7c:d9:c2:e8:af:
                    96:79:0d:f2:ea:2e:52:b5:40:c4:f6:9f:8f:9b:0b:
                    e3:a9:2e:ab:a5:46:74:d0:2b:4e:18:27:bc:2a:d3:
                    b8:ca:3e:8a:7b:4a:b3:6a:a3:7d:1e:be:1b:4e:25:
                    d2:a6:43:55:23:2c:0f:4a:10:f6:59:93:f1:a6:13:
                    ef:ab:e5:6d:08:30:ca:3c:9c:61:0b:e5:79:ec:21:
                    de:29:21:c7:b0:87:5a:5e:b7:f6:26:43:83:b2:3b:
                    04:1e:23:80:14:0c:51:50:b6:6f:13:ee:12:9c:ef:
                    95:5b:33:44:85:b2:66:d5:39:92:d8:34:17:29:5d:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D2:7B:98:5E:98:E3:EF:69:92:B1:A4:9D:18:93:EC:57:0A:91:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/f10ca52c-1428-3a93-9cb0-1038b7d63abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl

            X509v3 Authority Key Identifier:
                keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.102.0/23
                IPv6:
                  2620:13c:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a1:d9:4a:94:a7:55:7e:7f:4c:fa:bb:5f:64:40:ef:5b:bd:
         d8:28:fb:15:45:6c:9b:8e:8c:96:55:16:ec:0b:20:b9:31:db:
         5d:5a:0c:84:9a:e2:a2:1f:e8:57:77:7f:a0:ed:da:58:03:dd:
         39:98:b4:cf:30:56:3e:22:93:86:6c:04:07:c8:89:49:17:07:
         25:a8:28:ed:9f:c8:f2:4f:51:b1:b2:ea:ee:30:b0:bd:77:61:
         13:8d:b7:ab:7e:9c:d4:69:94:9b:a0:2c:6f:98:d9:cd:d9:44:
         60:2d:f5:a6:d3:18:61:c3:ae:9b:f9:b1:7b:26:80:ac:01:81:
         cf:36:73:a5:a8:15:23:10:cf:f3:ad:b1:81:ff:45:c8:a0:a5:
         8c:a7:10:56:e1:44:1d:61:95:f8:e3:5e:4b:77:ef:ae:56:66:
         0c:1a:0d:45:08:fc:9c:4e:fe:a9:2b:4c:52:e1:6f:01:b1:ab:
         1f:99:b5:57:25:05:d8:9c:f3:63:72:67:4d:67:b8:01:63:10:
         af:54:34:9f:b4:0b:c4:a9:7c:dd:f1:fa:53:1c:09:37:64:99:
         39:4e:89:35:9b:ad:9e:a0:6e:c6:03:0d:43:68:14:77:58:08:
         eb:e3:88:1e:87:c3:f7:80:a3:06:77:d4:30:98:fd:fe:a6:41:
         86:c8:d6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:53 2025 by rpki-client