Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7893e0d4-9358-36ee-8995-d40319972b35.roa
File:                     7893e0d4-9358-36ee-8995-d40319972b35.roa (raw, json)
Hash identifier:          7CxDyPcSH4wUfbo1myq4gXu4CKcX5tJgf/N9yfwnqko=
Subject key identifier:   8A:38:24:34:0E:6B:B9:40:16:DF:3F:C4:0F:97:59:9C:6C:7B:A2:EB
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848B8F0BF4C0177598ABD7F5400
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7893e0d4-9358-36ee-8995-d40319972b35.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:bf:4c:01:77:59:8a:bd:7f:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=15e14e8c-6753-44be-a1f1-14ec131d9377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:c6:e2:0d:d6:0c:ac:d5:df:18:01:25:f2:
                    a1:4e:01:41:34:d2:49:95:ae:4d:24:ad:79:a7:70:
                    d2:e3:7f:c5:8c:7e:c1:4f:92:60:a5:96:9e:4c:01:
                    4d:5c:3c:c9:c4:78:55:3d:6e:f4:b3:06:2e:dc:89:
                    1b:cd:5c:9f:a2:d3:85:3b:c7:7e:27:98:27:5e:d5:
                    f9:7d:c1:a7:ba:8d:a1:41:57:36:f3:2f:50:fa:27:
                    3f:2c:2b:4f:a1:39:98:dd:1b:d9:09:1f:88:e8:40:
                    ee:14:74:b4:21:65:e1:ac:df:04:d4:00:d1:b7:27:
                    e2:17:52:8c:40:b5:b2:a1:8e:b0:83:f4:57:ff:af:
                    b5:91:cd:6a:08:3d:5d:a0:ff:35:6a:46:d3:8d:75:
                    e9:cd:67:17:78:c8:0b:29:50:30:f6:fd:73:ed:76:
                    36:2d:75:09:97:39:86:9b:e5:ae:32:5f:56:2f:b6:
                    89:b5:78:2f:8b:31:d3:ec:13:21:1a:68:06:eb:e6:
                    ae:f7:a3:ff:7e:e8:38:e6:a1:b6:6f:70:e6:0e:1c:
                    25:06:34:87:cd:2d:98:30:b7:9a:3b:d4:7b:33:ad:
                    4e:c8:23:bf:ec:c0:88:7f:e0:01:c4:93:bb:e0:4a:
                    d8:31:b5:2b:79:65:cf:e1:9a:ee:73:42:a7:55:57:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:38:24:34:0E:6B:B9:40:16:DF:3F:C4:0F:97:59:9C:6C:7B:A2:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7893e0d4-9358-36ee-8995-d40319972b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:1c:ee:88:ad:1b:21:37:2f:d2:26:f8:9b:2f:b0:dc:56:
         9f:41:f3:80:a8:f9:55:da:a5:b9:6d:96:d3:8a:04:96:bb:16:
         02:5c:2a:c1:ac:8c:fc:55:d5:ea:a0:00:2b:59:6f:dc:00:1c:
         ff:be:cb:51:23:cf:3b:a4:a6:ad:de:ad:92:8a:bb:e1:ec:28:
         36:ce:a4:c3:a2:dc:c7:a8:e2:ae:d1:8a:a2:72:94:b5:ff:ec:
         2a:94:e0:fe:04:53:6f:ff:e1:d6:ec:be:35:29:54:fd:a7:4c:
         8f:ba:30:fb:8d:5d:c9:36:82:e4:3f:96:93:e7:60:61:5a:0e:
         98:fa:d1:82:d8:c4:b0:64:71:f4:45:3c:d1:b3:03:67:bb:12:
         cb:d0:87:96:32:03:9e:c4:fd:c1:9a:54:bb:f9:e7:cc:26:c4:
         9c:fc:b6:fc:e9:7f:47:6c:8c:00:4d:71:48:39:cc:48:84:c4:
         2d:14:bb:35:9c:58:f4:e7:84:72:35:94:d8:f5:bb:a8:db:86:
         ad:ac:2f:69:3e:9e:cc:93:c5:1f:bb:03:3e:a7:a2:c6:94:0a:
         1d:35:58:79:44:58:0c:63:e2:64:3e:58:5a:56:a1:54:84:10:
         3f:d4:fa:ed:39:af:70:e8:5c:39:e8:a9:c1:81:3a:86:d6:c9:
         45:8b:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:13 2025 by rpki-client