Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa
File:                     bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa (raw, json)
Hash identifier:          vGdHqB/BidrCKvO1fWjGNKw2Ad0kZMLd6YElB8ZpnnU=
Subject key identifier:   BF:63:24:56:1F:99:56:3E:5B:CF:9F:27:D3:29:5F:64:E6:E2:4C:2D
Certificate issuer:       /CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
Certificate serial:       010D0C9F43285848E9CBEA4A835C6D30D4C18000
Authority key identifier: A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     30197
IP address blocks:        206.201.168.0/24 maxlen: 24
                          206.201.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:ea:4a:83:5c:6d:30:d4:c1:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=7df7a8a5-105c-463c-95e3-de8301982f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:e6:6c:1e:cd:cb:dc:22:ba:42:c9:f3:70:
                    99:91:b0:e1:95:b5:22:0a:34:8a:a6:34:6d:d5:00:
                    35:a4:bf:38:13:64:49:cd:36:5a:fb:fb:47:65:65:
                    d0:31:ea:5d:30:f7:21:6a:9d:22:0a:42:8b:70:44:
                    85:18:da:f5:51:0f:ac:b8:5c:0a:2a:e7:29:7d:18:
                    0c:38:eb:a7:05:83:72:ac:71:d3:4c:f8:26:b7:17:
                    06:22:dc:e1:7c:91:30:1d:1b:98:1c:2e:78:c7:6b:
                    2b:93:51:a9:b6:41:f7:99:e2:22:63:26:bd:7b:22:
                    88:7f:77:0f:1a:30:43:2c:fe:80:9e:e6:fc:31:a8:
                    9e:9a:02:01:c1:ee:1b:21:57:68:d4:5b:af:52:c4:
                    0a:b9:ec:2d:81:54:ac:45:9f:75:2d:dc:32:e9:cf:
                    14:66:43:ed:d3:f6:65:f6:16:a3:53:72:d1:87:59:
                    90:87:13:15:a3:f7:9d:de:18:95:2d:53:bc:e6:b7:
                    1c:52:f3:e9:3a:97:69:63:82:ff:0a:a3:08:84:0c:
                    e8:a4:c4:6f:a0:f1:01:34:b7:5a:e5:34:53:4f:e3:
                    f2:d7:d7:4f:d7:3b:84:66:b2:58:52:46:29:44:34:
                    82:b6:4e:4d:0c:9a:17:33:19:7d:5c:97:dd:fd:71:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:63:24:56:1F:99:56:3E:5B:CF:9F:27:D3:29:5F:64:E6:E2:4C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl

            X509v3 Authority Key Identifier:
                keyid:A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:36:ca:a9:18:bf:5b:05:d0:88:6e:fa:17:5c:0d:d4:9b:81:
         86:44:89:b3:50:3f:d0:d7:b7:ec:17:4f:6b:ab:d9:bf:c2:16:
         59:70:22:16:20:e7:05:fd:91:c5:56:00:14:43:33:ee:4e:ec:
         83:b1:77:a3:f2:fc:57:43:e7:de:4e:34:93:87:23:9b:14:6c:
         0c:e6:bf:ac:77:b2:2f:f5:d8:85:7e:89:bb:b2:f3:9d:a7:4e:
         51:a3:03:ae:49:9c:3a:5e:f6:71:0f:e1:50:dc:21:8a:d3:49:
         19:d4:28:bf:ca:9b:3e:b8:d6:9e:7f:d1:64:58:b2:86:4f:0a:
         22:c3:ba:a8:1f:f2:df:78:5b:a3:c1:60:02:49:6c:4b:9c:ac:
         d5:15:6f:2f:76:0d:db:f8:93:d7:ab:d5:51:a8:3f:1c:9e:79:
         27:cc:e0:59:a9:9b:25:96:1d:d0:e2:7d:1e:6f:3c:00:29:21:
         c0:a8:03:e5:ae:cc:59:34:9e:c2:df:9d:84:9f:82:8a:74:6b:
         1a:49:b3:89:43:6a:dd:22:39:8d:6b:bd:73:fa:87:80:41:d9:
         4f:af:39:0e:e0:6a:c4:7e:e6:9b:27:5d:a2:c8:2b:4c:ec:fb:
         3a:8b:9c:15:93:c1:60:8c:d4:6a:e3:24:5e:1e:46:b0:7f:c7:
         d1:07:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:43:22 2025 by rpki-client