Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0cec8c1-5df6-32e0-b890-a1a0d3f17fd8.roa
File:                     e0cec8c1-5df6-32e0-b890-a1a0d3f17fd8.roa (raw, json)
Hash identifier:          vzHj4jpu9c3c0/fZL8lLQkQL84SLykq/XLNOp5WYCoM=
Subject key identifier:   C6:80:DD:3E:DA:31:C0:F5:10:C1:76:3F:C6:F0:C0:E0:4F:94:D2:DE
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584930DE6067BDBBFAC3648B1480
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0cec8c1-5df6-32e0-b890-a1a0d3f17fd8.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     20210
IP address blocks:        66.206.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:60:67:bd:bb:fa:c3:64:8b:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=178d93a1-3565-4c46-ad68-4df3255e7b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cc:a8:66:d2:88:68:a5:d1:09:4a:69:90:9a:
                    49:21:2c:e2:d0:b7:66:ab:7a:a9:2a:c9:48:a6:c7:
                    f3:ae:2e:af:78:16:20:a5:2a:0e:eb:26:b1:c0:fb:
                    ae:a1:c4:70:1d:2b:7e:db:ba:77:ca:3c:fa:04:3e:
                    10:b0:37:0b:62:85:53:c0:94:a1:45:0b:3b:a8:a4:
                    ed:41:02:da:90:be:1e:53:44:ee:d0:70:ab:5b:46:
                    23:1b:e8:79:05:51:bd:d3:2a:26:87:08:7f:10:f6:
                    b1:0f:2e:04:85:f3:b7:53:29:f3:30:ef:83:6d:21:
                    11:c9:62:fa:36:cb:76:ba:27:b1:12:03:79:26:42:
                    bd:d8:0c:ce:5b:f0:24:85:ad:46:7b:ce:65:e6:0b:
                    de:90:82:2f:af:32:2f:35:0f:d0:74:21:7b:db:42:
                    d7:70:81:a6:29:9e:2b:ac:fa:d2:1b:99:c6:97:35:
                    87:d4:5d:2c:04:b8:3a:8a:8b:f8:d4:0e:50:57:25:
                    4e:07:ca:e1:d6:e8:7a:79:54:19:0e:0b:44:8f:b5:
                    3c:27:f5:04:0b:d4:ca:ef:72:72:13:72:08:8c:ca:
                    5a:b6:a5:b2:03:99:61:12:09:95:23:95:8c:b6:99:
                    7d:40:37:83:fd:19:92:df:33:7f:eb:cc:5f:6a:0d:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:80:DD:3E:DA:31:C0:F5:10:C1:76:3F:C6:F0:C0:E0:4F:94:D2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0cec8c1-5df6-32e0-b890-a1a0d3f17fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:29:93:3a:e9:43:1c:f6:4c:60:82:bc:5d:2c:3a:4c:bc:76:
         37:c3:00:f4:1b:36:4b:c9:f5:c1:9c:12:d4:6e:21:4d:87:6b:
         47:d5:69:1a:d3:a3:de:3f:d6:a9:c6:6a:52:88:39:c3:c5:f8:
         8b:33:7c:9b:ad:7a:4e:03:b4:d7:2e:ac:9d:00:e7:56:f6:67:
         97:d3:02:a3:83:bd:24:de:77:3b:2d:6a:53:16:b4:bd:5d:62:
         28:31:8c:5e:04:28:e0:31:27:51:86:1c:37:fd:55:25:f4:8d:
         2a:6a:79:1e:38:bd:b1:37:4b:ee:2b:c6:6a:fc:88:f7:36:2b:
         b9:ec:02:63:35:21:97:86:58:df:22:d0:63:de:71:02:91:fe:
         a3:6b:7a:5d:f7:bb:1d:b8:4e:af:44:5c:08:73:f7:ca:c5:82:
         57:aa:78:74:2c:2d:85:42:b5:db:6e:1c:5e:ef:a2:33:48:d0:
         80:cf:69:05:d5:07:d9:e4:7b:fa:00:f4:3a:00:0e:13:fd:63:
         78:7a:4a:d2:9a:89:5e:1e:1e:3d:17:57:93:62:59:d6:8b:f9:
         e3:1f:f2:d0:07:06:3f:c1:6b:0d:6e:5d:98:7e:cc:b7:8b:20:
         7e:b5:55:18:58:46:b3:5c:80:95:10:f1:c8:f9:cc:65:14:2d:
         fb:49:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:07 2025 by rpki-client