Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa
File:                     167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa (raw, json)
Hash identifier:          qkJgb+1DdXG8CPGE38C6mRqvwegbeCOGg4/dfh5jCZg=
Subject key identifier:   3C:AD:31:F6:61:A4:44:92:C1:8F:8F:A6:48:11:53:D1:8C:A3:C3:ED
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848B8F0BEBBD3A31B45EAC68180
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:be:bb:d3:a3:1b:45:ea:c6:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=23566e8f-3143-44a2-9c7a-a0d7a74566a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:35:ba:0c:32:9e:03:a5:12:f4:b2:b4:e4:ea:
                    41:db:d9:5a:22:50:81:ec:73:59:36:b3:83:15:07:
                    df:bf:65:08:e2:cd:a9:a6:2b:f5:28:47:88:67:38:
                    da:28:df:34:f5:0b:6e:64:7d:e0:fd:cc:ed:39:50:
                    a3:f8:bf:be:f9:93:d8:30:24:2d:ad:c3:98:e5:8b:
                    ec:5d:fd:dd:07:8e:85:ed:31:e1:e7:26:52:b4:51:
                    83:1c:cd:f4:f4:e5:2c:c2:bb:81:f2:55:fe:cd:cb:
                    1c:3c:c7:2f:3f:1e:fb:e5:3b:e3:bd:87:37:19:6c:
                    75:19:53:b8:59:6d:b1:e7:fd:98:9b:89:3e:f5:bd:
                    e3:c8:f3:92:55:ec:ed:31:cc:e2:ac:76:76:13:9f:
                    5f:58:33:cc:d3:d3:ba:00:f1:e7:1b:64:e2:e8:c1:
                    01:e2:65:02:ba:81:4e:97:6e:59:08:bf:b7:e8:f7:
                    0b:19:5c:a8:8b:8b:b9:b6:5f:5f:3e:f6:72:59:a6:
                    ca:97:e1:0b:7b:b9:92:14:01:df:61:c8:e8:7a:15:
                    f6:04:ba:5d:65:f2:d8:ff:7a:dd:db:f4:37:f1:90:
                    25:03:16:e5:51:8b:d0:c1:e3:b8:60:64:75:9e:9d:
                    39:14:01:5b:44:21:a9:80:e0:7f:cd:c1:cb:b2:1b:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AD:31:F6:61:A4:44:92:C1:8F:8F:A6:48:11:53:D1:8C:A3:C3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/167193ac-9a5e-3186-bd61-a8eb3bdf66b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:cc:68:ad:dd:a9:a7:75:15:78:cb:e6:09:b3:ac:13:5d:2f:
         68:1e:ba:e3:0a:6b:67:15:82:f5:12:da:40:b2:c5:2d:ca:4c:
         a1:50:d0:5c:49:20:6e:13:6b:aa:a9:23:fe:64:94:80:2e:fd:
         82:1a:93:63:2c:dc:f7:95:47:73:9c:54:36:49:b5:61:4a:c9:
         4e:95:4a:b6:68:bc:fc:99:5c:4f:de:64:69:45:24:0a:9a:40:
         17:a1:93:9a:7b:36:d5:27:68:6c:c8:b6:ac:3b:73:46:14:f8:
         81:56:5b:66:c1:38:a1:c1:96:5f:21:22:7f:17:1f:fa:ab:c3:
         b9:94:60:33:97:54:cf:12:f2:e1:71:b3:2d:b1:64:e5:8d:4f:
         ad:79:16:24:bf:d7:72:2f:5c:a5:60:13:4e:48:75:a2:54:42:
         9e:01:73:62:90:b4:eb:66:65:47:4e:5d:2f:5d:14:1e:7a:80:
         4e:5f:c6:11:3d:41:64:da:15:bd:87:08:4c:a4:a0:64:ae:50:
         b6:3f:1f:20:48:f7:7b:82:2d:2b:e4:42:97:2e:28:c5:a5:8e:
         97:3d:52:d5:aa:4a:8d:ec:6f:03:17:42:93:7d:df:07:a7:4c:
         8c:17:c0:01:19:1d:da:c0:04:d4:b0:e6:52:96:13:0b:39:d8:
         5a:54:66:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:21 2025 by rpki-client