Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa
File:                     6cefd9ed-c6aa-377f-b955-242338127643.roa (raw, json)
Hash identifier:          M6C0FEZ6S7h7Vp4901UlIf6ypDmdpR1Tlkol4lrt5n4=
Subject key identifier:   41:85:A2:A9:54:8A:D9:FA:2D:9D:51:4A:5E:38:A2:AA:81:49:3C:C5
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F432858499829C5E49446F9BAD2D92F00
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     21581
IP address blocks:        108.161.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:c5:e4:94:46:f9:ba:d2:d9:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=7f280511-8690-4050-92f0-7dc33029414c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:af:37:40:eb:77:a3:7f:94:f0:09:88:b8:
                    5f:fb:01:11:39:d8:75:1c:81:8d:23:e8:ee:68:52:
                    02:08:af:03:6f:d5:77:a9:dc:3d:57:0a:2a:e5:f1:
                    eb:82:0b:87:86:7e:be:6a:1b:82:67:6b:87:b3:50:
                    bc:4c:bb:d2:7a:e2:2c:50:dc:df:35:5b:8a:07:c6:
                    80:bb:3c:9d:26:22:db:47:ae:6b:60:d8:9f:1d:2a:
                    27:35:bc:05:1a:6e:6a:79:52:1d:36:e6:62:4a:1e:
                    22:e3:dd:33:f9:09:04:db:40:e1:56:56:6d:d5:97:
                    88:14:8f:50:b8:a7:f8:3f:2b:7a:fc:a8:a0:2c:81:
                    e0:a6:7c:ba:04:50:10:03:b6:a1:bd:db:41:b6:49:
                    f9:31:38:16:1f:e3:b1:22:c9:69:10:e2:a2:64:87:
                    d4:0e:ed:f9:6a:83:cc:fd:c3:e2:35:69:f8:9a:f0:
                    69:cf:7f:6f:86:9c:0f:0c:ee:2e:01:08:f8:56:09:
                    b7:c6:6f:9a:f1:41:80:a7:ba:20:7f:bf:49:0c:72:
                    3c:9e:62:f8:72:89:8f:c1:0b:50:2e:d6:fa:97:05:
                    23:d9:e7:e0:c5:1c:ca:c7:fc:2b:97:14:1c:8d:2d:
                    8f:3f:1a:9f:33:c2:6c:1f:d5:2f:d3:d7:b6:5a:e9:
                    ef:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:85:A2:A9:54:8A:D9:FA:2D:9D:51:4A:5E:38:A2:AA:81:49:3C:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:51:aa:f0:45:51:d0:f7:1a:a7:db:4e:d7:c2:4e:2b:9f:6b:
         72:65:1a:68:90:0a:f9:21:d1:ea:d0:48:e8:fc:6b:65:c3:45:
         eb:be:78:1b:78:dd:31:fb:83:6b:f0:d1:a6:80:86:52:84:ec:
         e0:77:b7:dd:d8:a7:19:b1:34:93:f3:ed:f9:23:aa:c5:ad:74:
         56:f0:87:0e:4d:64:07:92:5d:18:dd:ca:0b:a3:93:34:92:0d:
         27:be:52:c9:d2:a6:a9:26:22:0d:d2:02:a4:44:97:08:0a:ac:
         4f:42:ca:17:9d:0c:2f:40:0f:36:81:a5:58:55:8a:81:27:eb:
         50:78:43:47:08:d4:73:5c:ec:3d:b9:b7:1e:d7:58:41:9e:32:
         5a:f5:29:4f:88:b2:4a:fa:ea:4a:66:95:97:56:ac:3b:f2:a0:
         8c:84:19:68:e2:b2:96:cb:29:43:27:0c:94:54:a2:55:a5:e1:
         97:54:dd:a8:7f:25:7f:4a:c7:a8:0f:b4:e0:b7:f6:c9:69:6b:
         91:99:79:30:a3:2d:61:7f:e4:4c:86:5d:30:4c:17:f6:3f:08:
         8c:78:73:8e:14:d2:fb:d6:28:e5:0f:33:d8:67:e0:8f:97:75:
         9b:86:dd:cd:98:24:97:a9:d1:e8:47:09:20:f0:d0:5f:df:bb:
         33:7a:d5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:40:18 2025 by rpki-client