Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b0ff161c-594d-3ca8-83cd-01424a8a9f8a.roa
File:                     b0ff161c-594d-3ca8-83cd-01424a8a9f8a.roa (raw, json)
Hash identifier:          IQlTN7WpVuXOIYrFGDPdl7/+nqyx+1dgyVpmYJaLKdg=
Subject key identifier:   72:AD:1F:CF:21:EB:34:A8:C0:9D:DC:09:5F:CB:97:E7:3C:A3:26:AF
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848B8F0BFA57524717611EE2800
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b0ff161c-594d-3ca8-83cd-01424a8a9f8a.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:bf:a5:75:24:71:76:11:ee:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=05ce382a-86d8-4940-8514-588da7d219d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:29:c6:58:0f:93:33:bb:7d:b1:86:6f:20:
                    84:77:1f:32:41:80:5b:39:d0:94:0e:be:59:83:6d:
                    38:16:ad:fd:4c:3a:bd:f9:68:58:8b:ef:00:30:1d:
                    b9:fe:3c:ad:e4:61:37:02:59:a9:be:29:2e:1f:ce:
                    f8:a7:1f:8c:19:41:0f:24:b2:38:60:a2:3c:fd:0b:
                    71:90:2f:16:c4:00:55:32:67:93:4d:31:6a:b4:be:
                    be:18:fd:9e:de:30:a3:95:29:4b:12:c2:7d:9d:d6:
                    6d:f3:9f:8b:c5:c9:e1:33:da:7c:51:d0:18:a9:a7:
                    78:e1:89:98:16:91:90:63:ba:e0:ef:0c:ad:17:20:
                    10:14:df:3e:bd:82:0b:f7:97:46:1e:87:4a:2c:32:
                    e9:ef:3b:fe:67:6e:6e:7f:1d:af:63:bd:0d:49:fb:
                    46:d2:aa:0a:2c:55:15:66:d3:03:99:7f:85:43:44:
                    af:63:f7:14:88:26:77:71:5a:06:b3:05:b6:bb:c5:
                    02:88:4a:05:89:bc:2f:eb:d6:b8:a5:a3:ff:77:8d:
                    ef:24:66:95:70:a2:7d:df:25:46:46:76:74:d6:70:
                    2f:c3:ea:97:14:1c:84:15:ef:d2:8b:30:74:04:1e:
                    01:b0:72:cd:48:e2:0a:96:db:40:d1:8d:fb:48:e3:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AD:1F:CF:21:EB:34:A8:C0:9D:DC:09:5F:CB:97:E7:3C:A3:26:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b0ff161c-594d-3ca8-83cd-01424a8a9f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b3:d5:e2:76:8f:c8:d6:f1:f1:9c:21:2a:7a:fb:da:c8:ce:
         68:cc:92:ea:4c:d4:b5:d1:d3:73:69:5e:14:3e:ee:ba:14:38:
         71:9c:db:64:45:09:56:29:df:9d:60:4d:90:a6:cc:6d:82:6e:
         a5:23:41:f9:4b:99:d1:db:4c:b2:4e:f7:ef:3f:37:03:3f:29:
         1f:22:53:68:32:ca:e7:90:90:aa:33:d6:e7:92:2c:27:8a:95:
         62:d1:22:dd:47:2d:7f:a9:0d:5d:ef:25:65:7f:df:ba:1f:4d:
         9d:56:ef:65:f6:e0:b3:60:b7:68:76:01:9a:75:4e:8a:c7:81:
         31:9a:a9:05:78:a1:c7:98:8a:f9:39:75:3d:00:e3:dd:47:fe:
         a7:25:87:93:25:ab:f4:43:17:68:dd:7c:c5:be:1b:b3:7b:2a:
         8c:ba:e8:87:1f:9f:34:e3:64:54:39:ab:81:90:5f:8d:9f:cf:
         99:8b:54:03:4a:f4:9a:48:95:1e:6f:4d:64:70:5b:4f:27:26:
         4d:4f:c0:48:02:cb:f8:ca:01:63:e3:4b:9b:6a:19:12:c8:6c:
         5b:8f:bb:b9:fe:cd:52:6c:ba:e3:4f:8e:96:47:10:37:19:d3:
         09:00:b1:db:bc:89:2e:49:9d:74:05:60:07:e4:9d:b3:7e:90:
         92:f5:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:56 2025 by rpki-client