Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ba4413b-f9dd-3fd2-a36d-664a22075e0d.roa
File:                     5ba4413b-f9dd-3fd2-a36d-664a22075e0d.roa (raw, json)
Hash identifier:          Ir5FtJb7orHnBYn5GT55YqC0+TztyBSSHSsDlDtZ3Tg=
Subject key identifier:   A7:49:DD:16:9A:9A:81:9F:56:0D:80:53:D7:A0:62:A5:6B:45:8A:F7
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848B8F0C26401150EDA4BC41EA0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ba4413b-f9dd-3fd2-a36d-664a22075e0d.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:c2:64:01:15:0e:da:4b:c4:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=7c632038-3b3e-4987-bd23-30b6afcb888f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:de:a4:26:3b:a6:a6:42:d8:0d:25:90:11:
                    92:25:c7:0e:b5:98:3b:6a:92:c2:52:90:94:ec:28:
                    23:8a:39:a2:98:e5:94:d0:ef:0c:9e:e8:c9:a1:0b:
                    b0:cb:00:35:3f:e2:0d:82:37:5e:ff:67:1f:78:f1:
                    3d:91:88:47:66:3c:3d:ce:4d:55:02:55:c8:38:05:
                    86:1d:d9:d7:d9:df:f4:c9:9d:f3:fa:b6:fd:27:ad:
                    0a:2a:11:e6:9a:e2:ae:1e:4b:41:8b:0a:5c:93:d1:
                    f3:53:aa:56:49:56:c5:45:59:1d:2d:32:24:71:55:
                    d8:07:07:21:17:d8:34:e5:38:70:aa:13:08:fd:d0:
                    3b:02:16:1c:4c:f0:ba:88:72:f9:78:7c:f0:6d:1a:
                    68:bb:0d:39:78:71:de:7d:c2:46:a3:41:d8:6d:8e:
                    3d:44:d3:d9:78:c4:c2:13:b2:06:98:e5:62:d9:f9:
                    ac:4e:ea:bd:19:80:c9:0b:cb:ad:3f:1b:da:96:f2:
                    66:d8:fe:fe:82:bf:f2:81:f5:93:b8:c7:b7:51:a6:
                    57:4c:b5:0d:9b:d1:a6:d4:1e:39:ee:ca:08:19:e5:
                    8a:88:f9:77:52:ac:05:42:3c:40:d7:ad:eb:e2:df:
                    8c:d9:5c:2e:5e:13:2e:78:7c:fb:a9:15:65:a1:db:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:49:DD:16:9A:9A:81:9F:56:0D:80:53:D7:A0:62:A5:6B:45:8A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ba4413b-f9dd-3fd2-a36d-664a22075e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:02:4e:ec:4f:1b:e0:88:4d:f0:cc:9e:83:37:df:5c:1c:39:
         4e:ac:d4:8a:8f:f3:c4:8f:68:d4:2e:c5:f2:15:89:ad:4b:2b:
         47:2e:b4:9e:02:3d:9a:ca:1c:9d:61:d2:0a:0f:38:45:65:5b:
         f1:89:97:dc:cd:d4:90:93:bd:4d:2f:c7:12:d5:f5:bf:7c:8a:
         df:ad:43:65:23:9e:54:13:82:89:b8:0b:d9:8d:a0:bc:40:56:
         af:61:67:0f:ab:e7:67:bd:f6:5f:ca:c4:63:09:38:62:03:68:
         9a:5a:9e:fc:6a:96:cd:77:ea:1e:4e:2f:e8:9a:fb:3e:47:b9:
         5f:49:c0:3d:32:69:d7:73:00:6e:46:0f:8e:7b:fc:79:a2:dd:
         cb:cf:ca:89:2e:6d:c2:a0:cc:85:b8:b4:0c:71:d2:97:6e:38:
         0a:fe:35:ee:da:de:10:b5:d0:57:b6:b4:3c:65:dd:c7:26:d7:
         11:9b:e3:1f:56:25:bc:44:a5:49:fd:bb:7c:34:9d:c7:47:eb:
         65:27:96:ba:a5:fd:2c:2b:91:b4:5e:3c:fb:92:62:66:bb:04:
         39:d3:e6:be:b1:4c:fb:16:48:50:45:8a:fa:ef:b9:d6:e7:33:
         48:ae:ad:90:be:05:a7:95:12:53:19:02:c8:65:8e:c4:7e:21:
         2f:a1:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:24 2025 by rpki-client