Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa
File:                     1f7d990c-09db-355a-a9de-5d66f6acd83c.roa (raw, json)
Hash identifier:          PT3ZtKFumMGqUhZJfvl9ArdSn4R2uXrGWopQMCg5thQ=
Subject key identifier:   0D:41:94:08:28:EE:A0:30:4A:EB:51:11:F9:FE:A8:8E:87:F6:88:E1
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F432858486D904B54A870C60F880CB490
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     63344
IP address blocks:        206.180.20.0/24 maxlen: 24
                          206.180.32.0/24 maxlen: 24
                          206.180.34.0/24 maxlen: 24
                          206.180.44.0/24 maxlen: 24
                          206.180.46.0/24 maxlen: 24
                          206.180.47.0/24 maxlen: 24
                          206.180.48.0/24 maxlen: 24
                          206.180.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:4b:54:a8:70:c6:0f:88:0c:b4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=ba62eed4-e02a-4f01-9bb9-6432d297ddd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:78:f2:e6:81:d0:52:1c:a9:2f:15:67:49:
                    7c:e2:9a:1d:ca:a8:aa:ce:c4:84:c0:bc:e2:e3:31:
                    92:65:15:05:65:e8:36:b6:63:8f:bb:51:2d:2a:1b:
                    ef:31:78:de:22:f2:1e:cc:f7:5a:a5:eb:47:5b:f3:
                    74:77:0e:af:42:53:a9:b6:a7:7b:cf:95:cc:b9:5d:
                    52:5f:5b:cc:44:56:af:f0:bd:4e:3f:1b:8d:e3:eb:
                    bd:34:e3:57:2f:eb:df:b7:a1:eb:09:9d:2f:f9:c2:
                    66:3d:eb:fc:99:60:42:91:dc:75:d9:d0:4f:ea:87:
                    2b:d9:11:ba:7f:a6:e2:25:12:a2:56:d0:17:2f:24:
                    71:37:93:17:da:9a:ee:31:c4:c1:24:a3:0a:6d:d3:
                    9b:8b:cf:dd:a4:59:fd:a5:41:d5:81:36:19:ec:d1:
                    9a:be:36:7d:48:82:e0:f5:99:66:39:0c:82:4e:a6:
                    ee:c9:4f:f2:61:78:df:16:4c:40:39:0c:31:fd:6b:
                    9c:ee:bc:5e:e6:52:87:e4:9b:02:0a:46:52:dc:b1:
                    37:76:4a:73:c7:87:bb:bb:79:6a:26:34:7b:e6:09:
                    37:46:92:ce:e4:ec:17:c9:08:fa:1e:cb:57:8a:50:
                    50:7b:27:6c:0c:89:2a:f1:c1:0b:d2:e1:dd:d1:9c:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:41:94:08:28:EE:A0:30:4A:EB:51:11:F9:FE:A8:8E:87:F6:88:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.20.0/24
                  206.180.32.0/24
                  206.180.34.0/24
                  206.180.44.0/24
                  206.180.46.0-206.180.48.255
                  206.180.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:80:2f:98:af:ec:15:8c:59:2b:02:ce:e8:4b:fc:ea:76:d3:
         95:a0:c5:9d:60:bf:c2:33:13:da:39:b3:5c:fe:5a:27:d1:bb:
         af:92:93:94:0d:85:5c:98:31:4b:be:04:0f:c0:6d:19:45:4a:
         6c:66:c3:4e:13:04:3e:3a:6a:d2:f0:27:1c:22:32:50:ed:6e:
         04:89:0f:8d:e9:02:c4:7c:1d:3e:7c:ce:8c:96:73:78:5e:96:
         94:ed:f6:81:2e:d7:23:3e:5f:26:04:d0:e5:2c:c4:45:5d:08:
         35:d8:b4:37:ca:f6:80:9f:f7:53:cd:6a:7b:29:82:87:eb:65:
         47:f3:04:92:a6:c0:1b:03:d8:5a:1b:de:df:d6:7a:51:80:bc:
         f4:df:37:aa:18:5e:15:a1:15:fb:60:9d:df:89:71:fc:ff:3b:
         94:c7:ae:76:cc:c8:b9:c7:84:8a:2c:28:57:5b:66:32:55:0c:
         9a:86:5a:e6:c4:b1:20:4e:61:47:79:71:bb:81:15:87:ba:50:
         62:c2:7e:b8:b5:04:4e:53:d1:07:1b:51:8c:55:68:c7:4a:30:
         05:23:a5:f9:73:38:ae:24:ce:5f:4e:b2:05:62:4d:f9:95:34:
         e8:7a:17:07:d2:0b:74:27:20:70:33:42:9e:d9:c0:bb:7c:52:
         62:20:ff:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:51 2025 by rpki-client