Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b3300e56-7867-3c78-8579-f2670cd6407d.roa
File:                     b3300e56-7867-3c78-8579-f2670cd6407d.roa (raw, json)
Hash identifier:          xSq2fKYWgipT/119Wo+J1gSSem8HCxSBsynidizWX+8=
Subject key identifier:   F7:13:39:6B:51:40:36:CE:C4:4E:55:88:81:FF:74:F9:AE:DE:43:5E
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584957F3FB37E9D1C1E8C2084500
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b3300e56-7867-3c78-8579-f2670cd6407d.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        208.127.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:fb:37:e9:d1:c1:e8:c2:08:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=ba9dc4cd-1a02-4d16-a027-953ba1361765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:39:7b:bf:c0:4b:2f:e2:65:7d:91:f6:30:73:
                    dc:d0:ea:71:c7:8d:d7:fb:63:60:d6:fe:ad:db:21:
                    2c:be:9b:1b:da:41:5c:f3:96:5c:0a:07:16:6e:86:
                    ec:1e:38:98:ea:75:f2:7e:78:bc:0a:2c:60:f0:00:
                    43:6f:2c:52:a7:c1:4d:6d:b8:4c:54:c5:ad:f5:e3:
                    cf:45:88:bf:ac:25:c1:97:13:33:a7:fa:3c:7d:0f:
                    34:00:4d:0e:85:be:85:2b:74:0a:85:f6:5a:fd:46:
                    f9:5e:0e:77:f1:f9:c2:4d:53:2c:37:34:6e:ee:03:
                    a5:e6:4f:09:68:14:70:fa:61:22:a7:24:58:80:a0:
                    33:f8:86:c0:ca:8f:45:db:ae:35:35:b4:4e:75:ec:
                    c6:1d:fb:58:df:9e:d0:6a:4b:ec:24:53:14:cd:3d:
                    72:03:0d:f2:fd:46:5c:cd:38:0a:5b:18:3d:4e:06:
                    9b:ac:b5:01:ee:69:6d:ea:02:ad:74:21:24:db:a2:
                    01:18:a9:a9:31:aa:8e:e7:99:6f:84:e9:4f:09:23:
                    3c:1c:97:3e:b0:39:2c:5a:c1:40:26:39:c3:bb:99:
                    1c:8e:e2:25:bd:c1:0c:c1:4c:6b:e3:c4:55:17:f6:
                    2a:21:68:b8:93:d0:74:0b:a5:3e:03:eb:20:9c:c0:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:13:39:6B:51:40:36:CE:C4:4E:55:88:81:FF:74:F9:AE:DE:43:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b3300e56-7867-3c78-8579-f2670cd6407d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.127.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d8:ef:17:f5:84:68:ba:9e:dc:57:f1:d3:d1:b7:a1:79:b9:
         66:6c:a2:b7:95:9d:cd:8d:72:23:6c:48:03:8b:4f:bb:0b:fb:
         23:dd:d5:a5:dc:dd:c7:d8:a0:80:0e:0b:bf:17:2d:53:12:1a:
         17:36:ca:5a:41:33:4e:fe:f8:4d:0a:bf:ba:5e:fb:63:d7:a0:
         9c:58:78:17:81:c0:cc:ef:99:87:f6:92:55:dc:73:0c:34:c7:
         80:99:81:d2:a3:80:dd:2f:e9:66:54:a0:18:ab:f8:8e:a8:c3:
         da:a9:16:a0:a6:8e:cb:a5:34:62:03:8a:c5:f1:82:38:db:60:
         a0:a5:40:7a:40:af:1f:21:b6:3c:74:fa:77:c0:4d:d1:ad:ab:
         7e:32:f0:9f:85:6a:a4:09:14:4f:25:49:05:41:41:6e:01:25:
         da:77:e2:94:8b:2e:5e:bb:9a:20:fb:ac:cb:0c:6a:cd:ca:86:
         cb:e7:19:fe:cd:bc:ef:f1:95:54:57:65:be:da:50:f9:68:81:
         7d:3e:12:b2:e1:4e:48:61:d6:3f:37:b2:fa:5c:ee:58:8d:eb:
         03:42:fe:c5:46:2c:5c:8f:3b:a2:c4:d0:1b:d4:1e:71:b9:ff:
         d3:7e:64:36:8f:35:8e:63:5a:d5:a1:99:fd:7a:b4:d7:72:9c:
         74:62:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:09 2025 by rpki-client