Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/b55e8b3c-8a04-3164-9aa1-9ee277dc4c73.roa
File:                     b55e8b3c-8a04-3164-9aa1-9ee277dc4c73.roa (raw, json)
Hash identifier:          PgR87yyV7dZ2WTfSzA4XFP0bSldUgx8InBkpoQYHeAE=
Subject key identifier:   EC:D1:8A:9C:B5:50:ED:9F:A9:1F:E5:55:04:A1:BD:63:4E:AA:24:D5
Certificate issuer:       /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Certificate serial:       010D0C9F432858491D71784A218B1907A2048400
Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/b55e8b3c-8a04-3164-9aa1-9ee277dc4c73.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        206.204.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:78:4a:21:8b:19:07:a2:04:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=ba4a6f99-119e-4653-873d-b0e667e3085f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:56:60:1c:70:50:b0:f3:f6:e5:a3:68:9a:78:
                    6a:6a:ca:ad:11:0b:a1:3a:d6:a1:46:0e:49:4a:e7:
                    0d:b4:34:f8:5a:6d:90:2d:57:ef:7e:9d:05:13:e3:
                    3e:05:09:9e:ba:ac:15:ad:1c:fb:59:67:c9:d5:ce:
                    3c:6d:33:df:ad:2c:20:0a:28:d3:67:d5:71:5a:7d:
                    e6:4b:97:cb:23:ef:29:9c:43:da:1a:3f:c9:cc:76:
                    f7:32:78:79:02:27:f2:b6:e8:8e:1c:13:e2:a0:10:
                    f0:16:a1:b1:9d:66:5b:15:74:ac:68:64:bc:34:9e:
                    ce:26:19:17:8e:8b:7a:de:c9:b2:01:e9:39:b9:6b:
                    a5:77:6e:b2:b4:9f:bf:22:53:dd:7a:a4:e3:e3:8b:
                    5e:ad:4b:9e:a3:8f:1b:0c:43:d3:14:66:fa:26:4d:
                    3a:1c:54:3a:54:e5:8a:82:2c:67:35:fa:7d:04:8c:
                    68:3d:4c:c5:30:db:cb:1b:c1:55:c5:b2:c7:24:92:
                    84:41:18:a6:85:60:4c:dc:21:5a:6a:5b:51:17:b1:
                    d0:5c:fd:3c:ec:49:7f:07:f0:61:40:de:10:ed:85:
                    f4:d2:c0:33:bd:23:a8:16:e6:b9:a6:98:bc:0e:68:
                    b1:05:a8:44:b6:46:bf:c8:e1:c9:c4:26:bf:e5:c2:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D1:8A:9C:B5:50:ED:9F:A9:1F:E5:55:04:A1:BD:63:4E:AA:24:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/b55e8b3c-8a04-3164-9aa1-9ee277dc4c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl

            X509v3 Authority Key Identifier:
                keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:9d:88:be:03:2f:72:b1:dc:2a:a0:e8:72:79:9c:ff:37:15:
         a4:55:3a:44:cc:2d:4d:e4:09:a6:a5:57:80:e3:bd:a6:70:2a:
         21:ab:fc:e2:e8:f0:33:21:dd:35:32:56:f6:3f:0e:89:51:27:
         b8:47:fa:c4:02:43:7a:c2:60:f2:41:af:8c:d4:a7:e3:ab:3f:
         1c:37:84:49:4c:cf:83:37:eb:03:f8:3f:47:cf:54:d4:e4:68:
         0b:b8:c6:ed:1f:9d:35:45:b4:7a:b6:f2:98:c8:d9:98:19:11:
         ee:7f:5d:e4:36:ae:79:7b:87:0b:87:ef:49:da:c3:51:37:02:
         ad:8d:3a:d4:e2:70:f2:cf:31:0c:3f:a3:66:13:b4:bd:df:e5:
         04:9f:9e:55:39:fa:ab:f6:5c:a2:5f:60:86:3d:11:c7:06:37:
         fa:46:59:13:38:de:32:3e:ab:f9:7f:9d:6f:d4:cd:62:87:34:
         0d:04:60:63:81:4f:d5:a7:c7:5e:93:ae:28:53:d8:d0:c1:86:
         58:65:39:3d:98:c7:a7:07:b8:a0:e0:e6:04:6e:f2:02:97:2c:
         db:73:a2:9e:82:9f:2e:f2:cb:54:46:48:68:48:62:b1:7b:fa:
         fb:f1:1d:f9:d7:0b:3e:a6:03:87:fe:ee:da:c5:69:1c:94:4a:
         80:3f:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:11:37 2025 by rpki-client