Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/897c6f20-9699-364f-b5b2-a47eaee653dc.roa
File:                     897c6f20-9699-364f-b5b2-a47eaee653dc.roa (raw, json)
Hash identifier:          7TV8K8YcK6A3n2AwEyHZi7SVg2Ep3fehn7lRMMrE7oM=
Subject key identifier:   8C:35:6D:7C:C5:27:8A:73:0B:3B:EF:39:9A:AA:73:CE:6B:D1:C7:4B
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6C133CEB5E054A26D3740
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/897c6f20-9699-364f-b5b2-a47eaee653dc.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        209.146.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c1:33:ce:b5:e0:54:a2:6d:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=dde5e5e0-ecfd-4b0a-9a11-15908de377f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ac:62:27:75:82:ab:d8:fa:c5:1c:26:0b:99:
                    5e:ba:04:f7:ad:9c:f4:85:5a:b2:aa:ff:cd:63:b7:
                    0c:4e:71:0f:08:2d:fe:80:18:d1:26:44:9c:a2:96:
                    74:1e:ae:83:eb:9f:96:2f:c9:5c:a8:8c:01:87:db:
                    f6:0b:51:46:52:e1:13:2e:7d:06:63:b0:64:5a:93:
                    97:9e:88:fe:a6:43:14:df:a8:09:03:a1:08:90:d4:
                    9e:ef:d9:45:81:49:f9:f2:62:f3:5e:2e:9d:8d:73:
                    49:7b:5b:40:1f:ba:1b:93:b3:8b:31:8b:7f:c4:00:
                    7d:a6:b1:5d:6c:d5:0d:52:6e:1a:f8:ce:33:2d:70:
                    f3:48:10:85:98:f2:2c:7d:18:51:e4:8e:0d:4f:f7:
                    ec:d2:74:eb:96:ef:96:00:76:98:06:6a:2a:3a:83:
                    a8:49:ac:90:f5:a4:a1:99:a7:f6:c5:36:88:c3:d7:
                    9a:f5:0e:29:0b:31:13:a1:ae:b5:1b:35:33:7a:68:
                    4f:bc:b3:c8:5a:b7:d4:b1:22:b3:41:24:99:e5:86:
                    c5:36:b7:70:8d:d7:b7:47:31:a6:ef:ce:b1:fc:29:
                    5b:5d:6c:58:26:63:1a:62:99:a9:12:a7:af:21:ff:
                    c8:12:dc:21:6c:f7:b5:3a:d5:e7:51:1c:7f:f0:89:
                    c8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:6D:7C:C5:27:8A:73:0B:3B:EF:39:9A:AA:73:CE:6B:D1:C7:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/897c6f20-9699-364f-b5b2-a47eaee653dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e9:69:33:6b:b7:18:e3:a8:8c:0c:db:83:f8:d6:fe:cd:21:
         7e:04:e7:ac:01:26:80:7e:c1:df:b0:40:66:ab:14:1a:63:7d:
         65:90:f5:a3:13:ef:70:4c:2f:47:f5:de:85:35:1e:ed:e2:51:
         e9:25:b5:04:44:eb:7f:64:a0:d2:be:9a:91:c8:48:e1:79:82:
         da:29:8c:c8:c1:03:1d:3d:7b:43:6c:72:20:cf:45:3b:43:ab:
         d7:3b:b3:05:7a:08:0c:b8:6d:b6:58:e6:e0:68:b9:a0:76:e8:
         7c:09:fd:7f:d6:17:81:d9:4b:8b:e5:dd:27:89:4a:f2:ce:fb:
         fe:be:3f:68:2f:f6:b0:90:c0:8e:a3:97:68:3a:d4:17:94:35:
         87:6a:fb:c9:b1:35:3a:6c:bb:12:c6:c5:ac:f9:45:56:bb:24:
         51:54:c6:60:3a:5a:2e:e5:12:d6:08:1d:16:33:44:5e:21:bb:
         2e:63:cf:13:6d:95:78:d2:fc:1a:2d:e6:1a:05:62:b3:d5:6a:
         36:19:37:53:5d:35:99:40:06:bd:dc:9d:eb:03:8f:74:63:c0:
         54:e6:8c:2b:9d:67:c7:32:8d:d9:ff:80:16:63:a8:40:c2:06:
         3e:6c:ce:3b:81:c5:b7:66:51:c3:9a:9d:9a:24:9f:1a:e4:b7:
         43:8e:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:58:09 2025 by rpki-client