Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa
File:                     712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa (raw, json)
Hash identifier:          JyJ8ao4XsU1xRF2iTL4V6dNj8RP+zKZMOAqsj+lXiG0=
Subject key identifier:   15:97:DA:1F:E6:27:AC:6E:D2:9F:69:B3:D4:25:37:B1:DB:6F:48:BD
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F432858494CC945C5098CFCA08D1FEB80
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     19905
IP address blocks:        69.89.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:45:c5:09:8c:fc:a0:8d:1f:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=162e9fb4-765c-4ae9-94de-8c3e103f4d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:16:a9:0e:53:74:39:b6:52:a1:1a:ac:ed:
                    bb:0c:72:f8:b6:98:30:ef:41:f6:73:a1:05:b1:77:
                    26:e9:9d:70:66:8a:2b:fa:cd:5c:fe:c4:3d:68:d2:
                    cc:4b:bb:92:cb:94:b1:95:6a:a8:ef:8e:3e:b8:67:
                    b5:5d:e8:8a:79:96:2a:78:66:cd:f4:84:ef:6f:cf:
                    8a:c6:5f:32:6e:8b:57:a3:6d:9b:d8:f2:a4:5b:70:
                    c9:f5:46:1f:b4:d9:c4:33:d4:12:42:22:bd:24:77:
                    dc:bf:70:b7:7d:9c:e0:54:f2:77:19:85:06:19:28:
                    e6:49:2d:e0:bf:62:b7:77:b0:44:5b:1c:a6:e2:17:
                    69:b8:d2:ec:ca:e0:53:b4:c7:b7:b4:31:11:e3:91:
                    7d:13:07:34:0c:4d:2e:a2:ed:be:71:b5:5e:6d:32:
                    69:e3:35:73:b6:3d:d6:e6:80:5c:55:b9:92:d8:f8:
                    78:50:7e:91:76:d5:5f:dd:01:a4:75:03:76:6f:6d:
                    af:8b:4c:73:19:6e:5a:c2:43:41:7a:9e:b3:a1:b8:
                    a6:53:0e:67:f0:d2:f0:ab:d3:d8:65:f1:df:d5:83:
                    2e:34:ab:61:74:29:03:2b:48:00:c9:04:cf:be:bd:
                    19:0e:7e:05:e5:ae:3c:28:68:78:af:12:a6:14:6c:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:97:DA:1F:E6:27:AC:6E:D2:9F:69:B3:D4:25:37:B1:DB:6F:48:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:08:94:a4:fd:2f:01:aa:58:20:db:7f:07:64:cf:24:29:
         bd:fc:a7:a9:43:0c:9e:d7:7a:e9:45:84:17:98:dd:bd:1d:2e:
         29:7c:a4:35:73:f6:36:e3:fb:4c:f7:3e:26:f5:c8:1a:94:ff:
         e6:39:90:77:25:0d:9a:5a:f8:39:8a:26:4e:6b:98:1c:41:0a:
         2c:e9:63:65:a1:be:27:7e:f7:f4:6e:a3:90:c5:44:8c:9e:12:
         5b:7f:c3:83:87:a1:3a:27:cb:a5:9e:10:f9:5f:24:64:9c:23:
         68:18:df:ea:23:54:d8:18:0a:b8:11:97:47:7b:63:e9:1a:03:
         6f:bc:69:d2:00:a1:36:87:e3:1c:93:6d:16:67:3c:ac:18:75:
         a4:34:42:14:f0:e0:c1:06:9d:ff:df:c6:ca:37:47:db:b8:02:
         3d:c9:0c:ff:4d:94:ca:5e:55:da:c6:22:57:42:93:c7:b8:09:
         e8:f8:1e:b2:bb:6c:e2:05:60:62:01:24:6b:ff:70:fe:68:1a:
         2f:74:0e:ba:1b:b0:48:b3:27:b7:3c:b5:c9:c3:99:81:14:dd:
         a9:2c:a5:46:34:06:bf:f3:2c:9f:c8:6d:be:92:08:2c:a3:c3:
         2f:c8:b3:a3:99:c8:2c:02:6e:d5:c9:0f:6a:c5:af:61:9d:7a:
         66:e0:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:08:27 2025 by rpki-client