Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/006a6fa9-a677-3ad7-8a11-9663dee47482.roa
File:                     006a6fa9-a677-3ad7-8a11-9663dee47482.roa (raw, json)
Hash identifier:          yas69bTShqisYcmiOwQNAeqfNbW4t6BUDCOs3PFz55U=
Subject key identifier:   C5:43:33:9A:42:06:62:BF:F5:35:BC:0A:9E:B8:A6:78:F1:5E:12:00
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285848CDE111A743273D63ADDB6A00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/006a6fa9-a677-3ad7-8a11-9663dee47482.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     140224
IP address blocks:        206.54.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:11:a7:43:27:3d:63:ad:db:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=fda7eee2-c842-4261-9636-1b744045bc7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:73:ec:70:eb:8e:c4:fd:6f:ca:b9:84:ae:
                    bb:5f:11:8f:2d:ec:94:08:b4:77:d8:8f:24:b1:dc:
                    43:15:ba:44:c9:78:62:99:03:c9:5c:20:15:a9:75:
                    73:84:94:a5:05:0d:53:bd:7e:f9:09:7d:19:0e:12:
                    9f:d7:7c:cd:be:f5:b4:98:ff:23:5f:60:e9:44:54:
                    75:0a:40:b4:42:69:86:3f:47:5b:42:8e:b3:05:f0:
                    d0:be:20:85:cb:12:b5:1b:f4:b5:cc:4c:6a:bc:f4:
                    83:9f:39:75:e9:53:5b:14:c5:f8:e1:d7:ab:60:b4:
                    15:0b:88:9c:b7:41:2f:79:ac:76:1b:08:4f:18:52:
                    53:27:7f:9d:0a:5c:dc:e7:9e:04:07:b1:23:a6:ea:
                    51:a3:a7:04:1c:54:48:95:37:bb:f3:6f:da:51:cc:
                    75:9e:db:11:c5:94:e4:01:ae:df:24:45:60:3a:a8:
                    1b:4e:86:be:47:17:8f:1e:44:6e:ec:4b:1f:b3:e0:
                    6c:fe:af:ef:45:77:ce:c8:fb:a2:78:21:61:3e:f8:
                    f8:3e:a8:42:44:a3:8c:e0:25:53:ed:95:b1:bb:b7:
                    67:1b:08:7f:29:06:50:78:d5:04:9e:51:7a:2d:bb:
                    d6:e5:9a:f1:20:07:4d:a4:b7:d1:64:c4:3e:03:30:
                    5d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:43:33:9A:42:06:62:BF:F5:35:BC:0A:9E:B8:A6:78:F1:5E:12:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/006a6fa9-a677-3ad7-8a11-9663dee47482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ef:4f:91:c0:91:5c:30:b9:65:24:f1:8b:7d:09:5f:e1:6e:
         f7:e8:24:3c:07:f2:f2:93:ca:e2:1b:8e:57:28:b5:24:89:0b:
         72:e4:86:9a:22:09:58:1e:99:66:b0:72:5b:ec:14:61:96:6e:
         69:96:d3:64:59:d2:64:68:bb:33:5f:c1:39:88:5a:fd:07:3a:
         7e:67:d7:bd:8c:90:d1:a8:6e:e3:a1:f1:c2:63:bd:22:3c:44:
         49:48:1f:ae:59:d8:86:f3:8a:f0:4d:1a:80:b3:a6:1a:84:a4:
         ff:69:5c:e5:d9:7a:e0:4e:f9:e0:85:4e:35:b7:ef:c2:e6:d3:
         ad:03:18:e2:7f:31:4e:e8:5e:e3:10:34:98:1a:2c:0d:20:1e:
         62:d0:57:61:a4:ad:a4:b0:52:5d:ae:6a:f8:ac:b4:26:b5:a7:
         d2:a1:a2:f4:1e:a3:05:fd:de:4f:7d:83:31:78:c9:ad:0d:64:
         a6:c5:a8:cc:d5:5d:79:50:54:31:a0:3c:30:ad:62:44:86:97:
         9b:ff:a0:8d:02:34:77:4f:eb:a8:cd:79:54:41:0d:e0:30:26:
         81:f5:81:6e:53:21:15:79:0b:d4:bf:e3:46:97:f3:92:bb:ae:
         58:33:e8:53:4c:2d:b4:b2:ff:3c:57:3c:54:28:05:ac:07:c9:
         17:f7:1b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:25:11 2025 by rpki-client