Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/e2ebf041-a9c7-3a68-89f8-8e2e34b4b4cb.roa
File:                     e2ebf041-a9c7-3a68-89f8-8e2e34b4b4cb.roa (raw, json)
Hash identifier:          fEMKMGQv0urk0F92G+3KU6gV/CgSjsOh5vatsZ3Rmd4=
Subject key identifier:   EE:84:08:66:96:B6:F5:2D:7D:D5:9C:5F:92:0E:5D:6F:63:08:42:B1
Certificate issuer:       /CN=a2d891cb-6de8-4437-8155-3741bf9d4144
Certificate serial:       010D0C9F432858494733FBDD7A2D1583121BFD00
Authority key identifier: 35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/e2ebf041-a9c7-3a68-89f8-8e2e34b4b4cb.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     3257
IP address blocks:        206.183.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:fb:dd:7a:2d:15:83:12:1b:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d891cb-6de8-4437-8155-3741bf9d4144
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=e02ec043-121a-4f5d-8f3e-015fcc2514a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:76:85:3f:e8:09:ea:1e:e1:be:df:35:54:
                    1a:e3:c2:d4:9c:75:6f:2a:2e:d7:b7:bc:78:d3:db:
                    73:50:6f:bd:2f:ee:9d:9f:24:02:2b:e6:ff:9f:f5:
                    26:1c:be:ae:6c:c9:22:39:b3:e0:ad:f8:91:e9:ec:
                    d7:b6:79:f8:72:8c:66:90:40:88:e6:a0:7c:42:aa:
                    0f:be:2b:b6:9e:47:cc:4c:e6:f4:d1:55:f2:e5:1e:
                    21:96:5a:6c:80:f0:37:7f:e5:e8:88:cf:a8:99:e9:
                    14:4e:a2:8e:d2:eb:b0:1c:e8:21:7d:f3:70:82:ba:
                    5d:4d:44:1d:76:17:0c:67:7d:2b:aa:27:2c:3f:4d:
                    4a:e0:b0:f9:ee:5e:22:52:82:26:f6:66:80:bf:99:
                    13:cc:3c:c0:ba:4e:28:43:31:b0:90:6c:e0:c1:61:
                    00:35:92:29:d0:8d:a6:a7:8b:ec:6a:d9:f8:30:f6:
                    16:51:10:e3:99:03:2a:20:25:10:a7:dc:cf:4e:c0:
                    46:b9:a2:83:ed:46:1f:f0:eb:f8:25:2b:2c:a5:4f:
                    46:13:bd:b9:2c:57:8e:f5:ce:09:36:92:a6:b7:1d:
                    88:f0:41:4b:26:fe:d8:63:b8:04:82:81:08:b7:17:
                    3f:b2:57:bf:30:76:92:ce:4c:70:ac:7f:65:f8:1a:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:84:08:66:96:B6:F5:2D:7D:D5:9C:5F:92:0E:5D:6F:63:08:42:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/e2ebf041-a9c7-3a68-89f8-8e2e34b4b4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl

            X509v3 Authority Key Identifier:
                keyid:35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:23:52:a7:c1:f7:28:52:96:68:3d:64:5b:f3:3d:8b:37:12:
         ff:b5:9e:39:21:5f:27:8c:dd:c6:9c:66:f7:6a:0d:b0:dd:ac:
         fb:e6:4a:55:37:81:48:8e:7c:16:77:65:fa:1d:6b:31:a6:0b:
         cf:ee:89:8a:03:90:d7:6c:a9:b6:d2:d0:95:d8:9a:9e:e8:94:
         d2:40:93:a1:61:21:8e:0e:9f:9c:84:7c:89:f8:91:48:00:12:
         30:66:38:d6:5e:43:6f:aa:d7:67:00:c0:6d:53:d7:c4:a8:4f:
         39:60:25:0f:0f:19:3e:23:04:fc:51:bd:fe:fd:fd:74:52:08:
         83:ef:a8:f8:6e:c0:bf:7e:18:b0:35:d6:62:c1:d9:91:68:69:
         30:c6:2e:21:62:2f:97:e2:9a:f0:f0:34:92:8e:b0:77:fb:58:
         cb:77:3c:9c:47:10:d0:a9:6b:a9:da:dc:a9:43:ca:1a:8c:42:
         24:b2:b3:95:ae:0c:9a:81:29:a2:e7:fa:4e:ef:fb:19:b2:27:
         ce:b5:6d:6f:2c:33:e6:ea:45:46:82:e4:7a:f4:d9:f4:a5:e8:
         6c:fd:cb:c1:5a:31:d4:ad:c9:87:2a:6b:d5:94:87:74:01:cd:
         ab:0f:45:fd:e6:f8:9a:58:5d:b5:a5:ff:24:b7:03:90:c5:12:
         19:fc:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:55 2025 by rpki-client