Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/6a46898e-d4b4-350b-8274-4515d6c83bac.roa
File:                     6a46898e-d4b4-350b-8274-4515d6c83bac.roa (raw, json)
Hash identifier:          upNVslBEabqjoH9znrn89JxxoynFUXGaYGZBLdIy17g=
Subject key identifier:   1E:21:B7:A5:4C:E6:EC:08:43:D5:A7:43:74:AC:1E:E4:FD:A0:DF:A6
Certificate issuer:       /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
Certificate serial:       010D0C9F4328584930DE67FB58F2A16B0FEB48C0
Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/6a46898e-d4b4-350b-8274-4515d6c83bac.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     14860
IP address blocks:        64.209.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:67:fb:58:f2:a1:6b:0f:eb:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=a502df47-f095-4c45-a84c-2f4d7fbd6997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6c:f7:ca:75:8d:ad:d5:19:e9:3a:69:21:8c:
                    11:f1:52:d4:19:1c:3e:a9:32:a0:8b:dd:9f:a2:7b:
                    48:81:96:8f:a7:48:e2:2a:21:4c:f0:21:1f:20:71:
                    a1:9c:cd:9f:a2:c8:ef:bd:14:7a:36:66:a0:b9:57:
                    eb:96:c6:43:42:49:70:38:8a:7a:a5:03:a7:55:7e:
                    0c:a1:6e:b8:2b:86:f2:f1:f0:3e:a4:9d:69:3d:c5:
                    b4:e6:5b:eb:71:11:59:eb:94:dc:7e:ea:e9:ce:41:
                    18:d1:95:2e:5d:8d:58:05:5e:a8:78:e0:26:46:37:
                    00:98:e9:fd:37:31:ba:dd:fb:de:d6:9f:3d:00:8e:
                    33:f5:a9:e2:d3:aa:7c:3d:98:ab:2a:be:37:19:cb:
                    bb:c6:74:a7:4e:e4:5b:fe:81:08:e1:59:24:52:83:
                    70:bd:e0:de:96:af:5e:69:20:c5:3c:47:b9:4e:e9:
                    8a:66:83:47:98:a9:c1:71:25:65:1c:b0:88:53:fa:
                    e0:48:1f:eb:9a:b8:a1:8f:27:5a:92:62:2b:dd:d6:
                    27:f1:a3:26:ca:2e:09:cf:d5:26:dc:43:8a:17:43:
                    d0:d1:72:a5:15:2f:a5:43:32:38:4f:fe:15:4c:53:
                    57:b8:d1:05:7b:00:9f:19:57:c1:a4:3c:22:8d:a8:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:21:B7:A5:4C:E6:EC:08:43:D5:A7:43:74:AC:1E:E4:FD:A0:DF:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/6a46898e-d4b4-350b-8274-4515d6c83bac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl

            X509v3 Authority Key Identifier:
                keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.209.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:92:b0:73:11:35:ed:3b:da:97:63:25:43:5e:a4:27:e0:
         0e:7b:88:e7:75:03:ff:a6:13:95:4d:d0:ae:c4:8b:ab:23:d2:
         8f:c0:10:13:11:b8:a7:28:a0:b6:9d:80:83:36:07:77:00:0e:
         6a:9b:15:58:ba:f5:0c:45:48:65:bb:12:99:b0:19:48:a6:25:
         69:37:01:e6:1e:38:55:fd:44:a3:7e:91:ec:0c:3f:9a:2e:c1:
         bc:0c:c0:22:ea:c0:42:fd:91:6a:eb:dc:f9:28:a9:05:7d:9a:
         9c:fc:8f:bd:4d:cb:b3:b9:64:52:c3:7a:b8:35:00:20:a6:39:
         fc:6b:89:45:4d:ea:7e:75:71:b7:84:94:c9:c0:0c:29:2f:04:
         0c:99:98:8c:fd:91:c2:10:87:f3:e4:ee:de:57:2f:4d:05:da:
         0e:6c:c6:cc:f6:84:45:a9:70:64:a9:2a:d6:29:d9:72:c5:31:
         7b:8e:c8:c2:a3:0c:c1:c6:6c:60:af:f4:cc:47:da:36:51:af:
         92:1b:4f:a7:ee:e4:10:76:ff:c6:71:dd:6e:41:d2:27:27:76:
         a1:f5:f8:2e:18:58:37:7d:1d:72:dc:dd:97:07:6a:82:ff:4a:
         36:7e:32:5f:ab:3d:2e:ea:c2:c7:cf:00:9c:d6:8b:bd:e7:4d:
         ea:5e:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:37 2025 by rpki-client