Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa
File:                     7e94502a-45eb-379b-b267-18d68fcecb1d.roa (raw, json)
Hash identifier:          pDDVQYY8ERplrsVuI9IGsW2e00kQoK6ouTXjcVGQC/k=
Subject key identifier:   F2:38:C3:64:F7:6F:89:80:ED:22:D9:B1:FE:DF:E4:ED:7C:42:6D:87
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285848CB16588B39CAAEACAE8A6780
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     4760
IP address blocks:        206.161.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:58:8b:39:ca:ae:ac:ae:8a:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=1c24ffbf-929a-4dab-a2af-29f4949ff4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:29:e2:b2:ac:96:82:af:b1:67:3c:10:f8:
                    1c:22:5d:08:69:3d:fe:ea:ff:6c:88:70:e9:41:1f:
                    a1:76:61:27:a6:bf:c4:2a:c7:31:4e:5e:da:60:c0:
                    65:af:54:ab:9a:bf:8f:22:3a:cf:6e:94:16:c1:30:
                    70:94:90:95:c8:7c:1e:fd:fa:5f:02:0d:09:95:1d:
                    98:6e:31:58:bc:06:80:02:bf:f0:5e:df:0c:ad:8a:
                    68:03:09:46:d5:1c:26:2b:5d:04:60:ab:ac:f5:4d:
                    2c:de:ee:d3:f2:44:6b:7c:72:35:49:b8:ee:45:56:
                    9e:5b:3e:8a:2d:a4:48:6f:98:37:4d:4f:53:82:35:
                    bb:e6:89:32:b6:2a:1c:02:5e:55:5f:69:e5:39:1a:
                    6e:3e:7e:b6:21:ad:c2:db:51:3a:87:f9:0c:3a:35:
                    50:ac:a6:d9:e2:9a:ed:c5:43:89:6c:9f:86:06:02:
                    24:51:5d:4b:cf:5e:f4:ea:a5:4b:cf:cb:1a:5c:ef:
                    34:f5:bb:b4:d2:94:15:69:5d:0e:07:da:a0:7b:47:
                    7d:1f:df:c0:ba:ae:1e:0b:8b:15:f8:1d:4d:e9:b5:
                    80:7b:db:70:db:57:17:a2:e0:3b:97:90:72:b5:49:
                    f4:fe:c4:1b:77:5d:35:b8:28:42:3b:87:5b:5e:a1:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:38:C3:64:F7:6F:89:80:ED:22:D9:B1:FE:DF:E4:ED:7C:42:6D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.161.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:81:b8:1a:1a:bc:82:ab:0d:a9:cb:5c:50:25:b7:64:73:f0:
         ab:08:62:c7:7d:a7:1b:e4:30:f1:33:bf:77:d8:d6:84:6a:dc:
         e3:db:d7:4b:b3:12:81:38:ae:ac:80:dc:a9:0e:74:1f:c4:f6:
         a2:09:75:10:e0:57:cd:2a:d3:41:64:3b:29:19:fd:ec:b9:56:
         7c:b8:57:ba:d2:40:d8:1d:31:8e:b7:f5:f1:17:10:5a:af:23:
         d2:2e:41:b4:a6:ff:71:10:a4:19:58:d1:6e:fc:45:60:51:56:
         1b:60:c5:d5:56:1f:ea:d8:1f:fa:2a:4d:5b:d8:cb:81:6e:c4:
         d6:ed:ad:8e:18:6a:05:a2:dc:9b:6f:03:6d:8e:ac:a5:7b:7f:
         a9:29:d2:b7:bd:36:6c:7b:cc:99:ae:18:33:ed:7b:b7:b4:2d:
         a5:ce:a4:8e:dc:93:f3:c6:0e:b4:2b:de:8d:d3:07:a7:0c:fc:
         3b:bb:2b:7c:b3:65:1f:d7:c6:4a:7b:90:5e:74:6c:00:e6:d5:
         1c:32:34:72:44:02:bf:ad:87:4a:76:3d:bd:80:31:22:66:df:
         8d:21:9e:98:02:2e:ed:e6:9f:15:ce:bf:ed:dc:66:37:fc:a6:
         1e:a6:c7:4e:24:f9:40:63:c8:cc:27:b2:20:30:58:94:a5:22:
         c2:60:97:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:16:34 2025 by rpki-client