Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa
File:                     9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa (raw, json)
Hash identifier:          QyGJy68/rkLLyqBuWHo6IA8/tv4+AxGdWxw5TsKEMUQ=
Subject key identifier:   6C:A7:41:BC:FD:BC:37:FD:5A:1E:C8:6B:B0:E0:4B:4E:84:29:68:0F
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F432858499829C619218F11C328928D00
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     21581
IP address blocks:        108.161.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:c6:19:21:8f:11:c3:28:92:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=d582b2f2-ec25-4c1e-80b4-9c8018be5c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:1b:2b:e8:ae:45:78:6a:8e:f5:36:39:87:
                    8a:f2:d8:1c:29:b9:f6:1f:9b:fb:d2:d4:fa:53:41:
                    cb:ea:19:e0:74:9c:47:83:f9:ad:ea:1a:9f:5c:07:
                    ab:49:e8:bf:0f:45:26:fd:f4:b1:4d:56:8d:74:7d:
                    eb:57:92:1f:5d:35:ee:f4:0f:da:3e:34:ec:1f:ea:
                    43:aa:05:60:0f:e2:86:14:65:e9:8a:43:b1:9f:53:
                    f2:71:e8:9c:91:20:d2:6b:51:dc:cb:59:f1:88:94:
                    21:8c:4f:57:a5:3f:25:9e:c2:45:02:c0:48:60:d0:
                    38:52:96:9e:e5:94:c8:f0:ad:b8:40:1e:3c:b5:57:
                    08:a4:89:05:f4:45:63:cc:0a:45:62:6e:84:b6:c4:
                    13:49:65:88:0b:f3:34:8d:2d:1f:fc:5a:7e:94:5d:
                    f5:5e:84:9c:53:f1:1b:8b:db:0b:9f:88:4b:6b:7e:
                    69:1c:ae:b2:c8:f0:18:8a:74:79:b5:84:35:bf:ec:
                    e9:a7:39:fd:1c:15:40:33:26:7a:3a:c7:cd:80:b5:
                    43:56:cb:b7:ed:63:c3:38:4d:c9:1c:66:00:3b:e4:
                    54:b7:4d:2b:a1:15:d6:f7:80:e6:ff:35:48:5b:8c:
                    e0:80:3f:1f:07:f6:4f:84:ad:7a:53:ec:5a:79:e6:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A7:41:BC:FD:BC:37:FD:5A:1E:C8:6B:B0:E0:4B:4E:84:29:68:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/9e41e3c6-4b01-376d-bc8c-8d6f59184714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:63:f6:da:9d:59:35:8e:84:96:8a:8c:07:b2:4a:04:28:25:
         1e:9a:00:0c:ac:87:ac:02:15:95:99:7d:54:dd:a2:c2:c7:fd:
         81:f2:fa:16:99:fc:7f:da:02:a4:3c:9a:41:7b:8a:78:72:5b:
         8f:72:96:f8:33:a1:f1:90:ba:1c:03:ca:da:92:e5:fb:23:a0:
         c2:c3:09:8e:e9:d1:b6:1d:7a:98:3d:60:88:f0:37:c4:e4:e7:
         f5:7d:69:da:86:50:93:2d:d5:c1:a4:df:bd:aa:d4:d0:0f:b4:
         cd:9a:43:cc:10:64:cf:d9:78:fe:80:14:83:7d:cd:ad:29:4e:
         27:d0:2d:ab:ab:97:9c:f9:58:f2:d5:63:72:a5:db:50:48:dc:
         e2:82:6d:3c:23:ad:6d:5b:da:fa:2b:bd:54:c8:ba:ac:d9:7e:
         09:68:33:29:1f:1e:d6:9c:0c:27:98:1b:d1:87:1b:b6:1f:cc:
         45:e5:85:75:91:bf:ab:0d:af:5d:f0:4e:59:0b:7e:08:19:3d:
         a7:e9:b5:1c:e8:1c:49:61:a5:d4:dc:cd:46:62:2f:e6:27:d9:
         43:15:9b:09:63:c8:1f:49:ad:dc:5d:3c:7e:e7:af:2f:a4:eb:
         51:68:3c:e2:24:e4:48:26:0a:cf:08:ca:51:9a:cf:f0:12:63:
         db:74:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:27:15 2025 by rpki-client