Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/18f2854e-3606-3853-ad11-93ff0870b62d.roa
File:                     18f2854e-3606-3853-ad11-93ff0870b62d.roa (raw, json)
Hash identifier:          4wpvpxVTdaLfPfiRpcbyOF86GFqYaiUxX6PAYoZwz7U=
Subject key identifier:   48:CE:6C:A3:42:A0:D9:63:4C:65:CB:74:E9:71:EE:54:F4:09:D1:49
Certificate issuer:       /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Certificate serial:       010D0C9F432858494B6405883CBEBBD9AF3759A0
Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/18f2854e-3606-3853-ad11-93ff0870b62d.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     14866
IP address blocks:        206.220.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:05:88:3c:be:bb:d9:af:37:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=e3eebc88-03de-43a5-992b-24efa5bb8a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:dc:b3:24:58:a3:f2:84:bd:0c:67:02:1c:
                    d1:a5:3a:c3:73:60:95:db:42:8a:98:c5:b9:5d:3f:
                    bf:0a:cf:22:74:70:65:d9:ab:f3:40:3f:9a:d8:ab:
                    a0:d1:fc:85:99:3a:08:b5:21:0f:76:12:78:08:90:
                    a3:8e:3e:9a:af:95:ad:7e:a3:fe:35:db:9e:2f:db:
                    7f:81:43:41:6a:5d:89:f8:f4:dc:ea:1f:67:61:5c:
                    ec:24:54:58:78:99:0b:3a:8a:a6:a8:db:6b:7a:6b:
                    46:a5:b2:52:c6:fd:68:ae:96:b7:4e:47:ee:9f:0b:
                    82:8a:4b:94:41:31:4b:c3:61:e4:58:a7:9f:7b:9b:
                    8a:4f:9d:41:40:f9:81:cd:e1:eb:77:c9:91:6c:c7:
                    0b:ce:a2:f8:64:dd:75:18:f0:8a:29:40:60:19:0a:
                    53:6c:35:6f:73:3a:79:9c:d3:48:ad:99:59:3f:16:
                    9f:af:3a:df:70:d5:78:be:0f:f7:c8:d4:96:ca:ca:
                    7e:1e:60:2a:41:18:9d:3e:ae:10:ed:b7:dc:8e:07:
                    23:b5:8f:6b:cc:99:9c:01:7c:61:f4:8a:bf:9d:f1:
                    92:38:fe:97:d4:d8:16:e5:bb:5c:67:47:5c:51:a1:
                    5c:2a:f9:9c:02:1a:52:b0:36:77:8c:8f:6c:e1:b5:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CE:6C:A3:42:A0:D9:63:4C:65:CB:74:E9:71:EE:54:F4:09:D1:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/18f2854e-3606-3853-ad11-93ff0870b62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl

            X509v3 Authority Key Identifier:
                keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:80:68:f8:01:75:b5:1f:47:3a:86:ed:d4:2e:b1:ac:1a:9a:
         3e:b3:41:69:cb:b1:64:1c:68:76:4c:78:91:12:af:9e:fd:9a:
         1b:76:f6:83:4f:84:8e:47:ea:e4:12:51:2d:93:f6:fb:a9:e9:
         99:0c:ed:46:5f:0c:09:a5:1a:c3:75:79:8a:d3:ef:63:47:70:
         59:fd:91:8e:e4:3e:f9:14:c2:30:0b:f9:e7:09:bd:fd:28:9a:
         f1:c4:49:08:27:15:d1:ba:c0:f2:b6:76:42:38:00:fa:60:b6:
         9d:d3:c3:29:6c:7d:79:82:ce:8a:5c:67:8c:7b:4c:71:3f:0f:
         c8:99:7c:04:af:d4:ca:39:71:91:f5:d9:08:10:07:72:ca:d6:
         87:b3:51:33:91:7f:21:49:f7:d6:f3:da:1f:e1:66:93:c5:5c:
         c8:72:1f:52:bc:8f:89:ba:29:83:7f:e9:6d:1e:e7:a4:49:d9:
         99:72:8c:45:b8:89:24:59:8c:54:14:a5:4a:70:61:bc:8d:d2:
         44:39:08:b4:25:34:71:bd:44:53:14:87:a3:e6:f5:e5:1f:ad:
         e3:c0:67:26:55:d3:a0:bd:be:2d:ca:d6:60:be:0b:6a:45:cc:
         cc:a0:6d:0a:8c:26:80:c2:8b:e2:b8:ec:a3:8c:89:f8:e2:5d:
         3d:b3:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:46 2025 by rpki-client