Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/206332ba-9e68-3348-bcff-18460323792c.roa
File:                     206332ba-9e68-3348-bcff-18460323792c.roa (raw, json)
Hash identifier:          y4VMTtZxq77bJMQksrXT3CE3kspqKdTl8l7cuYYqF2k=
Subject key identifier:   D6:BD:2D:33:BB:D9:EF:13:13:42:C4:06:D7:1C:70:88:20:FC:41:5A
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F43285849E91FA7F1C71888549B55A700
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/206332ba-9e68-3348-bcff-18460323792c.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        199.167.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a7:f1:c7:18:88:54:9b:55:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=cd634b7b-7375-4e33-af26-2294693532cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:aa:46:46:71:e5:31:c2:5c:79:ce:c4:9c:
                    4f:f3:e3:79:60:66:25:b1:ae:65:92:d2:33:6c:21:
                    46:c4:80:86:76:92:7d:53:08:2a:2f:cb:d1:f2:4e:
                    4b:d2:c9:3f:c0:af:eb:85:f8:8f:b6:f6:a3:ac:f2:
                    ee:57:36:b2:fd:b4:ab:a1:73:b4:f7:d7:10:96:a6:
                    a1:9e:98:f5:e4:3e:16:e7:4a:75:20:4b:48:a2:c5:
                    af:8f:c3:8b:3c:ba:bb:48:5a:fe:2a:99:1b:64:4b:
                    13:09:71:74:60:9e:cd:00:66:61:34:f9:92:a8:5d:
                    56:30:9f:c2:d5:29:c5:db:12:42:ba:f9:eb:b3:22:
                    2b:e9:60:bf:6d:2b:4d:72:a1:8f:23:54:4d:28:94:
                    2b:d0:01:79:53:cb:7b:bf:b7:db:91:14:de:a7:5f:
                    be:e8:75:c5:b3:76:0f:94:b4:71:c2:11:c8:1d:96:
                    a4:98:03:d0:e1:99:7b:53:35:52:d9:14:4a:84:f7:
                    ed:eb:38:94:70:b6:a4:98:07:4d:ca:5b:9d:3e:f6:
                    97:43:ab:82:01:00:4b:c8:bb:e7:ec:f4:0f:9d:38:
                    31:e5:80:dd:73:a9:4f:88:71:0b:88:b1:a0:50:ff:
                    78:4a:50:bd:91:20:4e:27:7f:be:12:fd:ab:16:bb:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BD:2D:33:BB:D9:EF:13:13:42:C4:06:D7:1C:70:88:20:FC:41:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/206332ba-9e68-3348-bcff-18460323792c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:65:17:f8:32:6f:64:12:12:54:1f:bd:9b:d9:4f:97:dc:f5:
         69:6b:2e:c4:4b:82:f5:2f:48:3e:22:e3:7a:38:46:6f:93:0c:
         e8:ba:f6:d4:c6:87:6e:0b:44:7f:b0:11:1b:8b:6d:32:5e:6f:
         ca:d7:66:0b:cc:6b:28:80:9a:23:54:8e:c0:94:b9:2f:8a:0d:
         c0:4b:6b:36:10:68:63:a9:64:0a:d1:54:36:79:41:19:05:42:
         95:dc:df:63:28:41:48:6f:72:c7:17:51:ae:bd:ed:81:ca:95:
         3f:2d:2c:72:16:71:af:0e:50:49:2f:2a:66:4c:53:75:59:3a:
         5e:e2:d5:f8:7f:ac:cf:89:d2:5a:a9:d5:31:69:76:41:0a:b1:
         73:97:2f:bc:ef:3a:b5:01:3a:2f:ac:98:4f:a8:4d:b7:5c:74:
         5b:89:a3:b1:26:61:6e:67:99:75:87:4d:19:83:45:1e:9f:d8:
         1d:42:8d:8f:d6:cd:79:90:fb:60:b7:3e:15:a8:c8:14:7c:70:
         ec:59:2c:6e:e0:d0:d0:9b:b4:81:b6:9e:66:37:16:5b:18:53:
         5c:7f:ff:4b:17:fa:11:db:a5:69:23:71:ce:b8:26:91:52:08:
         81:85:85:bb:ca:e2:c5:5f:de:3c:c2:40:ae:a3:a1:8e:a5:ed:
         b4:be:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:07:33 2025 by rpki-client