Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e2dce3bb-4bc0-38fe-95e2-e18a97815ca4.roa
File:                     e2dce3bb-4bc0-38fe-95e2-e18a97815ca4.roa (raw, json)
Hash identifier:          CbmtDCZ06GRDRw6IqRnoC5I8yExxtxmr8yxjQ+1uOnE=
Subject key identifier:   15:AD:6F:0D:43:E8:89:19:5E:4E:FF:AF:74:54:40:EC:F3:15:AF:5E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584922E8F8F4158BD81F25A72220
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e2dce3bb-4bc0-38fe-95e2-e18a97815ca4.roa
Signing time:             Mon 10 Mar 2025 01:00:39 +0000
ROA not before:           Mon 10 Mar 2025 01:00:39 +0000
ROA not after:            Sun 08 Jun 2025 01:00:39 +0000
asID:                     54004
IP address blocks:        206.206.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:22:e8:f8:f4:15:8b:d8:1f:25:a7:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 10 01:00:39 2025 GMT
            Not After : Jun  8 01:00:39 2025 GMT
        Subject: CN=8fd48a3b-be37-40e6-97a8-0c083f599be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:0b:7f:f8:94:66:ae:68:d0:4d:92:68:ea:
                    a5:5e:54:3f:18:c1:81:be:a5:1b:66:e7:b8:3a:4d:
                    34:1b:40:dc:75:2d:b4:dc:5b:07:b1:bd:07:6a:d6:
                    e7:cf:c5:b1:33:51:1d:d7:e7:7a:fc:63:dc:4f:af:
                    c4:ce:d4:ac:89:70:30:03:ce:64:79:83:fa:21:81:
                    0f:dc:69:26:c0:9b:24:ac:e6:4e:2e:25:a5:af:ca:
                    40:3f:34:2f:2a:43:dc:6d:fc:fb:f5:ad:3a:66:de:
                    dd:ed:1f:8e:14:e1:f5:c9:dd:3e:26:6f:21:94:34:
                    d1:de:c0:41:da:d4:99:df:e2:1a:d7:5b:40:5b:4b:
                    25:f5:01:08:16:42:78:60:81:f0:5f:ae:92:16:59:
                    54:bf:41:a8:30:8a:01:ca:77:e0:1c:0c:b7:af:67:
                    02:25:18:88:89:00:ec:e4:2c:b4:9d:4c:8b:5f:54:
                    76:26:a0:05:15:79:b4:6e:8e:f4:f6:b0:6b:8d:4c:
                    84:98:09:95:f8:38:1b:80:77:d7:77:54:91:cd:66:
                    52:ad:65:ef:11:44:a4:35:ff:a9:e6:1b:50:67:48:
                    3a:7c:64:7c:f3:64:86:46:de:50:36:f5:29:66:b7:
                    7c:87:24:6d:da:d2:c2:00:f5:22:a7:54:c9:8e:6b:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AD:6F:0D:43:E8:89:19:5E:4E:FF:AF:74:54:40:EC:F3:15:AF:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e2dce3bb-4bc0-38fe-95e2-e18a97815ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e1:1d:d6:20:ef:40:e0:fa:c2:45:db:b0:dd:7a:31:81:c1:
         6a:f1:ba:10:6b:33:a8:2d:1c:e4:53:1a:bd:6c:6c:55:9c:4c:
         6f:98:2d:f5:48:22:0d:48:e6:82:83:58:a6:2e:c9:e6:0e:49:
         68:1b:05:20:71:3d:c7:6c:a0:b5:a2:56:67:6f:61:f4:11:e9:
         f9:c4:4f:50:73:c3:ce:bc:ef:9f:0b:07:3c:bd:ad:23:bf:db:
         ac:bf:81:ef:90:5e:de:1a:00:75:4e:7d:37:be:88:6e:c4:5a:
         26:ea:ee:99:55:06:59:8d:50:0f:42:09:33:44:65:95:86:1d:
         46:62:7a:7d:0c:18:bf:54:f2:39:bd:f0:a0:65:76:cb:94:d1:
         5e:63:61:80:92:11:22:a4:2c:8a:88:1c:d4:1d:1f:34:92:64:
         2e:59:57:c8:df:53:7d:12:71:7d:e7:86:0e:7c:a6:95:0c:1a:
         8d:b2:cd:31:e6:42:30:e9:f0:1e:2e:41:aa:50:e1:74:24:00:
         d6:d7:f2:cf:88:a0:52:d9:24:89:2b:dd:37:21:00:62:c8:41:
         82:99:a6:10:6b:8e:74:d9:bd:4b:6d:07:f6:7d:00:bf:57:de:
         89:77:ef:46:5a:76:cc:29:e8:88:15:f3:19:79:3e:84:cb:f0:
         1a:8b:e6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:05:14 2025 by rpki-client