Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/b7eece48-62ef-3bff-8630-42b8d590f1f3.roa
File:                     b7eece48-62ef-3bff-8630-42b8d590f1f3.roa (raw, json)
Hash identifier:          0ExgYF3cJz+xFdMg4TxyAK4BchssCxUfATUBRp3lOTE=
Subject key identifier:   BB:C6:9E:2A:83:C3:FB:99:40:4C:7D:4B:3D:E5:66:39:66:7D:E6:F5
Certificate issuer:       /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
Certificate serial:       010D0C9F43285848960B54800E44EF7F006F4E00
Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/b7eece48-62ef-3bff-8630-42b8d590f1f3.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     36203
IP address blocks:        216.168.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:54:80:0e:44:ef:7f:00:6f:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=65efe169-2000-4a09-9649-e6dc39786c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:fb:b4:87:05:ed:28:69:fa:49:6d:5e:f2:
                    26:8d:fc:8b:53:c8:44:a7:af:22:e5:0b:b5:f6:65:
                    db:ee:c9:ef:7e:6a:e8:ed:e2:c8:27:54:25:1b:28:
                    9c:ae:c5:a3:60:f4:f8:2b:a0:b2:ea:55:33:08:14:
                    18:17:ab:d2:c0:86:ca:4d:bf:65:11:47:32:7e:0a:
                    82:0d:2f:d5:77:2a:1a:16:6a:d0:16:ea:f5:6a:f4:
                    da:28:ac:0f:07:7b:9f:46:8e:14:33:cd:6c:d4:29:
                    6e:2d:43:0d:01:b2:21:a1:73:a9:eb:4c:8b:96:5a:
                    6b:be:f6:84:f5:db:6f:15:4b:ad:16:9a:aa:f1:14:
                    27:5b:06:ad:6a:7a:55:b0:16:16:16:80:be:71:26:
                    0f:5c:88:8c:6b:d0:96:93:6e:0c:bc:d2:2a:e2:a6:
                    d1:1e:c2:de:38:82:1b:d6:46:a8:b8:0c:cc:ab:97:
                    36:68:a4:2d:1a:68:b1:a7:30:64:c6:6d:c2:9a:29:
                    37:85:71:67:10:62:01:d3:d2:7b:5f:86:4f:86:92:
                    92:52:99:a1:3e:d6:d4:1e:9c:62:7d:1f:c9:69:02:
                    8e:c5:23:c7:1f:a6:f8:b3:ef:30:63:37:65:74:46:
                    c4:f5:30:a6:dd:15:1b:3e:c3:e3:fc:ba:a2:61:d1:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C6:9E:2A:83:C3:FB:99:40:4C:7D:4B:3D:E5:66:39:66:7D:E6:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/b7eece48-62ef-3bff-8630-42b8d590f1f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl

            X509v3 Authority Key Identifier:
                keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:1c:f2:53:1a:b2:17:0d:16:1f:cc:31:ab:d0:e1:85:4d:d7:
         22:f9:d3:f3:5b:45:60:1a:a3:21:3e:b0:77:2e:89:8e:21:bc:
         dc:ec:87:a0:d6:4d:94:be:37:64:4a:89:8a:b2:8c:86:d6:4d:
         67:a5:73:9a:89:43:a4:20:7c:4b:88:bf:16:47:94:82:2b:a1:
         d9:fc:44:de:ab:43:40:2e:fa:ba:bf:e5:96:54:18:a1:11:64:
         90:57:28:75:fd:f1:da:f8:20:fd:c5:4b:ff:17:09:d4:71:e7:
         5f:c2:e7:0e:0c:22:09:c8:cc:70:55:3f:60:24:34:e3:97:00:
         f2:75:e2:31:88:d9:d8:4f:a5:69:40:19:55:57:66:0f:6f:a8:
         15:e3:93:c8:2a:d7:cd:91:04:37:c1:53:90:c2:02:21:5f:b7:
         98:ac:e0:af:36:df:a5:2c:a9:94:59:a7:4c:5c:f7:79:d2:6c:
         32:18:ff:84:74:dc:b2:54:f7:49:85:45:8b:15:f9:d9:4e:81:
         ed:e5:c3:f8:48:e9:0d:51:77:1b:59:f3:65:2f:3f:da:16:c8:
         6b:95:ba:cb:4f:ee:a6:84:ed:56:5d:74:d8:ba:e8:2c:a3:e0:
         1a:bb:6a:35:13:94:42:82:62:31:ff:c4:9d:c5:8a:4e:7d:cb:
         19:e1:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:38 2025 by rpki-client