Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa
File:                     a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa (raw, json)
Hash identifier:          cZGY+LBCjewgwNT1gw6IH0UCfY2MljOjwQ6SlKCThfQ=
Subject key identifier:   05:2B:6C:83:0E:88:A8:28:59:A2:68:FA:71:56:0E:55:CD:5F:24:93
Certificate issuer:       /CN=6e6db562-79f7-40ba-9870-3eaf80e519fd
Certificate serial:       010D0C9F4328584988CF315357B8B90E92C3C0C0
Authority key identifier: 8D:38:A8:E4:7F:F7:84:11:E7:4D:A6:EA:F8:9B:EF:1B:C4:27:D9:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     40403
IP address blocks:        199.89.230.0/24 maxlen: 24
                          2602:fab9::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:31:53:57:b8:b9:0e:92:c3:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6db562-79f7-40ba-9870-3eaf80e519fd
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=11432700-1f12-4f4e-bda4-07d4916770ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:76:ba:33:d2:60:2d:a8:85:c4:18:61:40:b3:
                    e1:90:67:9a:a5:a2:d0:fc:87:03:65:b0:3e:54:a6:
                    c3:c8:de:24:b9:8f:5a:db:cf:70:d9:7c:26:3c:da:
                    a8:17:71:64:68:12:b7:36:73:51:87:cd:54:cc:f8:
                    5c:49:36:17:95:51:20:e7:2a:5a:3a:07:27:02:14:
                    d7:36:99:6c:8c:88:b5:a4:9d:1b:86:fa:e3:ba:81:
                    63:41:55:93:3e:d9:d8:a6:56:7b:18:9a:dc:19:cc:
                    d2:1d:07:37:19:7a:5d:2f:e1:cc:6e:86:df:85:99:
                    8a:bb:85:c1:c3:cb:3d:00:9c:ee:d6:73:b3:e4:32:
                    76:51:af:ad:04:12:0b:0d:a0:ac:ba:9d:70:e3:92:
                    be:07:21:e2:24:de:99:4f:94:fb:fa:e3:85:25:c4:
                    c0:a1:c0:95:e4:b2:ea:2f:b2:51:5b:10:c2:f1:21:
                    7d:4c:34:6f:98:fc:1e:d0:6f:d7:71:b3:9e:87:2c:
                    0a:1a:a6:82:45:ee:3a:7e:3f:51:97:88:d7:bb:2c:
                    5c:c6:bb:88:79:39:24:05:23:6d:8b:25:13:4b:6e:
                    8d:cd:40:a2:08:d3:fb:e2:76:31:71:93:f0:3d:ef:
                    bc:02:b2:0a:d9:09:0c:e2:7f:25:bb:72:3a:e8:2f:
                    51:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2B:6C:83:0E:88:A8:28:59:A2:68:FA:71:56:0E:55:CD:5F:24:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.crl

            X509v3 Authority Key Identifier:
                keyid:8D:38:A8:E4:7F:F7:84:11:E7:4D:A6:EA:F8:9B:EF:1B:C4:27:D9:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.89.230.0/24
                IPv6:
                  2602:fab9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:5e:6b:08:eb:dc:1e:14:0f:90:2a:b3:99:c9:d9:aa:73:
         ff:38:1a:47:22:e9:59:1a:fd:1e:31:e0:c2:bc:64:22:39:e5:
         db:1c:53:3f:dc:06:e1:7d:68:e5:6a:c5:7d:58:d4:6f:5f:fd:
         09:c0:b6:e7:21:17:f5:50:5e:4f:ff:93:1e:c9:99:0c:eb:33:
         7b:ab:55:8f:a5:8f:6c:18:a4:7b:c2:54:f8:d1:02:a6:60:45:
         2a:f1:e4:eb:0e:01:b4:c1:e7:fb:b7:34:97:63:5a:a8:00:d7:
         ad:08:c5:d9:01:49:c9:3b:3b:1d:89:98:7c:4a:c3:a2:64:c1:
         2b:ed:4b:99:d9:62:60:15:ed:8a:fa:4a:f4:ae:5d:c7:0d:16:
         75:cb:3b:76:4f:74:56:e5:dc:ab:c4:7d:92:96:da:9c:fb:b8:
         e1:fd:d1:2b:9b:df:82:76:50:62:f8:61:96:e9:4f:d3:b6:24:
         4c:18:61:56:36:5e:58:a2:32:9b:41:98:64:83:5d:16:a2:21:
         fd:0c:fc:de:0e:d7:fe:e1:7d:b8:dc:be:18:36:21:19:67:8d:
         6b:d8:ae:88:0c:51:55:9e:e1:16:ce:67:c1:c4:ca:49:d9:01:
         40:20:d4:d1:1a:5d:02:72:c8:86:9f:e0:33:88:c4:fa:4c:47:
         28:6b:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:26:33 2025 by rpki-client