Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6915bcbc-e465-37e5-85c7-2ba07ddc362d.roa
File:                     6915bcbc-e465-37e5-85c7-2ba07ddc362d.roa (raw, json)
Hash identifier:          oGqQFw/S12UnonDu8cp9i1l81L8Vrhds5rzkwdVLfzo=
Subject key identifier:   06:57:E0:7F:B6:77:F9:F2:65:6B:A4:31:71:DC:E9:92:C3:94:84:6D
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848D2114337BC29B549E34DDE00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6915bcbc-e465-37e5-85c7-2ba07ddc362d.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        199.6.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:43:37:bc:29:b5:49:e3:4d:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=681dba31-51eb-4e6a-9b32-bbfc86bddc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:ba:87:90:e3:e5:ca:1a:8b:31:8c:26:34:
                    f9:bc:27:6d:ae:30:12:09:f3:a4:88:84:fe:6d:86:
                    7e:c8:f0:5a:36:b5:89:c1:9b:27:28:6b:90:95:3a:
                    c2:09:62:f4:36:7b:2b:39:2b:f5:77:58:16:89:17:
                    53:32:87:78:e1:9d:42:2c:94:e8:d5:57:3a:a9:f9:
                    28:e7:e9:bb:28:e5:35:92:e0:1c:09:b3:e0:b7:91:
                    8d:88:fd:09:ae:b2:7e:97:20:3a:9b:b7:64:fa:89:
                    5f:93:d3:6b:d4:b6:a2:da:aa:b9:01:c2:83:aa:35:
                    54:c0:1c:e4:8c:77:a9:bf:2d:9a:fb:1a:f0:9f:69:
                    34:92:09:39:69:ad:9b:85:e8:c1:9b:8c:74:b1:31:
                    1b:92:dc:e5:66:f7:af:bd:17:65:3a:c5:e0:39:56:
                    ad:92:0d:eb:c7:59:2c:22:16:7e:0c:0c:20:3f:dd:
                    e4:90:d4:5e:8b:bc:80:c5:61:2e:d1:ef:6b:04:8f:
                    b0:40:8e:ee:52:dc:3e:59:45:b4:8d:7e:7b:ff:a4:
                    a4:87:7a:04:56:cb:78:79:27:b9:3a:39:7e:f6:2d:
                    af:f6:62:0d:bc:a1:b1:8f:cd:08:7f:ee:91:ff:d2:
                    2b:2b:5c:9e:99:ec:1b:76:9f:0f:c4:25:7c:8c:64:
                    86:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:57:E0:7F:B6:77:F9:F2:65:6B:A4:31:71:DC:E9:92:C3:94:84:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6915bcbc-e465-37e5-85c7-2ba07ddc362d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:85:06:69:56:a1:df:df:95:e0:fc:ee:26:fc:27:0d:1b:6b:
         a2:29:a2:67:33:05:a6:65:ae:18:c5:11:54:34:49:e4:bf:e0:
         22:93:af:70:db:ff:dd:4a:77:c0:4f:29:7f:9e:2f:01:29:0c:
         66:d1:7e:c9:0b:1f:cc:e2:f7:52:30:e4:2a:71:e2:3d:ec:f6:
         92:04:60:28:6b:34:77:01:9f:ce:a8:67:cd:7a:55:79:c9:01:
         6b:87:8a:0a:e3:92:b7:7d:96:a1:e4:c9:3f:38:0d:bd:24:bc:
         d0:94:d1:80:1d:fa:4c:c5:02:40:6c:35:bb:4e:28:3f:45:b0:
         90:5e:fc:14:95:e4:9e:e3:46:9a:1f:de:09:11:a9:0b:de:2b:
         79:ce:60:ae:8b:75:29:a2:6c:87:1b:19:42:53:2b:63:7a:45:
         6c:f2:ab:53:74:aa:8d:97:83:31:3e:8d:fa:39:3c:21:4e:f6:
         e6:a8:11:47:fd:61:f7:70:c8:68:43:8c:84:a2:50:38:b1:82:
         44:ff:2e:39:b6:47:66:33:17:27:dc:c1:d3:47:49:7a:75:0d:
         22:3c:eb:fc:e4:de:00:e8:46:85:9a:83:16:24:24:a0:f8:54:
         44:4c:26:9e:4e:ba:8b:58:da:c6:8d:9c:78:80:db:a6:98:b9:
         37:56:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:50 2025 by rpki-client