Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa
File:                     6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa (raw, json)
Hash identifier:          8TYfPf4bwD/SOuv1MjeXClAXkhxgiJmHQfqD16Sk5IM=
Subject key identifier:   9D:0E:53:9B:5C:9F:11:81:91:E5:AD:EF:8F:AE:1E:B6:D9:0A:98:D9
Certificate issuer:       /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial:       010D0C9F4328584827C5486F0C4426C8DE1CEE80
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        204.152.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:48:6f:0c:44:26:c8:de:1c:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=d10d2676-3e32-4570-9d36-349dab8fc0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:0e:9c:46:35:f8:5c:c2:3e:45:c8:ab:8b:
                    2b:b4:e3:c2:e6:60:47:e0:c2:1c:16:ac:98:90:87:
                    80:9f:84:a4:f7:4d:ce:d3:84:a0:85:c1:50:4c:23:
                    2c:f1:d8:b3:29:90:8f:f4:06:23:84:05:87:01:df:
                    6d:69:11:6c:0c:89:16:05:20:8a:69:04:de:dd:0b:
                    2f:0d:bc:17:c0:4f:d0:6e:ae:df:81:e9:27:0e:b3:
                    ca:5a:55:0b:00:19:dd:e2:6c:74:b2:ae:60:c0:92:
                    fd:70:2d:c3:75:ec:aa:d5:ea:48:bc:12:7b:d9:b2:
                    53:b7:59:31:44:04:ab:6c:35:39:86:31:4d:dc:72:
                    cc:7c:3d:48:1b:d6:84:3f:56:24:d8:7c:ea:8c:4b:
                    62:2b:30:b2:fd:4e:92:9a:5c:5d:4a:fa:3b:0c:47:
                    37:67:c9:07:a3:2d:17:5f:8a:ac:86:25:a5:76:6e:
                    73:f7:33:6c:b7:9f:1b:78:05:25:a7:84:a0:66:03:
                    ea:3f:3d:a9:0b:81:d7:04:0c:7f:78:25:05:51:08:
                    c7:1c:c1:5f:ae:ff:5e:63:45:a0:12:a9:dc:f1:aa:
                    9d:8b:3a:3b:39:9d:87:91:db:8c:50:c2:ae:db:64:
                    f9:d4:71:2a:3f:3e:98:6d:05:9a:e8:29:27:d9:cf:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0E:53:9B:5C:9F:11:81:91:E5:AD:EF:8F:AE:1E:B6:D9:0A:98:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl

            X509v3 Authority Key Identifier:
                keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:12:10:cf:8b:ac:19:b1:62:6f:63:93:87:05:5f:f1:fb:6c:
         99:26:2e:b2:fc:38:ba:e5:45:ac:5b:65:18:fc:02:a7:06:d2:
         e6:f2:33:c7:9b:1f:a0:83:c5:56:f4:6d:90:56:63:3f:69:d6:
         1a:d9:bd:f0:22:48:d2:2b:83:08:a6:ba:2e:c1:24:dd:2f:b4:
         bc:58:17:ce:c5:57:67:4c:f3:c5:2f:f0:29:c6:53:29:d8:57:
         17:10:27:34:f8:be:c3:10:84:c0:42:b6:0c:bd:e2:62:62:1e:
         0a:5b:a7:5a:00:b8:70:11:3d:74:c5:a4:32:ef:b8:2e:48:bd:
         fe:46:f2:3f:b5:a6:27:fa:e1:f2:ff:37:44:91:84:8f:af:fc:
         f6:ec:7b:40:41:bb:95:13:5e:db:15:41:01:e1:70:05:11:0e:
         d1:e8:68:c6:f4:1c:4e:57:6f:dd:2e:e0:3b:b8:88:50:96:0f:
         8b:6e:4c:26:38:84:ae:07:39:88:56:cc:79:1b:1f:d0:d2:2c:
         1d:d3:a9:c7:71:f9:cf:c1:1d:b6:e6:e9:01:90:5f:bc:eb:63:
         1e:20:4a:49:64:ec:0d:68:cb:3c:de:4f:93:b1:8f:76:af:cf:
         5c:4f:eb:1b:90:5c:51:9b:1e:68:7c:8b:03:aa:e0:34:0a:b6:
         12:bd:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:07 2025 by rpki-client