Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff9c7afa-91cb-3243-95e4-b5c0dee7c836.roa
File:                     ff9c7afa-91cb-3243-95e4-b5c0dee7c836.roa (raw, json)
Hash identifier:          /mjxqpaZVgdwZtv8ejgM/3oMkybfmByaty/KC9yVj0o=
Subject key identifier:   8D:E8:51:10:B2:B3:EB:B0:7F:A8:26:30:16:74:4E:1D:15:95:7B:3F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858492E13B1D04AD90C116C0132A0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff9c7afa-91cb-3243-95e4-b5c0dee7c836.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     211373
IP address blocks:        206.206.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b1:d0:4a:d9:0c:11:6c:01:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=bec67aad-5dbe-43ea-b2b4-07f34514654e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:9b:5d:cd:b1:81:74:1f:2f:e9:12:19:af:
                    de:58:6c:88:a5:2d:4b:88:b1:27:60:be:e5:e1:73:
                    ea:ad:63:3f:bb:c5:61:a5:d6:68:c0:ac:5a:a0:41:
                    88:7d:7f:9c:db:96:04:1a:b2:b4:cf:27:ae:b1:9f:
                    25:4b:67:40:b1:2d:56:7e:b1:f1:fd:22:f3:a3:bb:
                    8c:28:fb:48:3f:23:d8:40:0d:5e:01:fb:a9:7e:8a:
                    db:67:a9:18:d3:83:b5:df:39:92:64:77:d7:0b:b2:
                    fc:6c:f6:bf:fa:1f:50:c8:3a:91:8d:04:6a:78:fa:
                    5b:08:9a:ae:3b:4f:37:7e:39:ee:c7:2a:6a:5c:3d:
                    ac:7c:d5:68:88:67:09:ad:19:6f:4c:ed:c7:56:db:
                    ae:6b:73:dc:b8:e1:be:70:41:e5:43:6a:54:aa:cd:
                    42:d2:40:34:5e:7a:86:00:eb:aa:04:b8:86:a1:f0:
                    cf:2c:43:cc:0d:82:cf:93:a2:a0:22:3c:8d:06:8b:
                    91:81:bc:5e:40:ce:f2:ed:3a:f6:01:8b:51:1f:15:
                    74:e7:6f:53:90:aa:d2:13:57:81:f4:92:5b:1e:54:
                    b7:c9:cd:d7:ac:1a:d3:97:59:db:7c:a9:31:75:c1:
                    a8:93:88:aa:3b:74:bc:e1:63:3a:b7:8f:a9:d6:9e:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E8:51:10:B2:B3:EB:B0:7F:A8:26:30:16:74:4E:1D:15:95:7B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff9c7afa-91cb-3243-95e4-b5c0dee7c836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:db:b3:06:6a:c6:c2:d7:9c:b1:b7:a6:5f:37:ae:5a:4f:09:
         62:23:ca:21:21:3d:4d:e2:39:cc:a3:f9:c6:7f:40:63:c0:5d:
         6a:f7:57:9d:af:ba:3b:9f:b9:62:6a:06:bd:53:67:96:a1:9a:
         c6:8a:06:23:1a:6d:c3:60:17:64:36:32:2a:21:a8:d6:52:35:
         d6:5f:5f:46:33:6d:7e:05:5f:a0:66:ed:16:d9:c6:8b:9e:a7:
         41:89:83:b0:81:aa:77:e3:de:c0:eb:00:d1:21:ad:c8:4f:58:
         1f:6a:93:4f:25:86:96:ef:d3:ed:7d:72:d8:be:30:fb:8e:35:
         a4:5d:ea:ff:52:ed:6b:54:5f:88:3f:6e:1f:7a:b9:5a:dd:5e:
         61:bf:e8:51:f0:c4:fb:1e:d3:f0:03:c7:9f:99:ef:4d:82:f9:
         d0:ed:bb:a6:10:d6:20:40:3e:8b:87:21:fe:86:2c:6c:11:11:
         96:60:3f:06:6d:6a:fe:83:3f:c4:b7:b8:eb:e2:22:5b:48:b3:
         c7:b2:31:59:7b:01:8b:09:db:2c:8d:62:f7:00:ee:e6:ac:e9:
         a7:e4:44:de:c3:60:ef:83:52:52:99:11:b5:72:b8:51:df:46:
         95:76:00:31:99:7a:0a:31:97:46:1a:ca:50:77:d5:cc:8c:a8:
         b4:bb:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:01:55 2025 by rpki-client