Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1848b6bf-4696-300a-ad96-8521981fd951.roa
File:                     1848b6bf-4696-300a-ad96-8521981fd951.roa (raw, json)
Hash identifier:          vOGktDZEhkkQN5tpeXTM+sjTD1wpHrficOmlRH/MU3k=
Subject key identifier:   9E:24:1A:BB:9C:A2:BA:73:9C:C2:85:5B:7A:BC:89:2D:ED:61:97:B5
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858484D7591077C578AC792E9FE00
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1848b6bf-4696-300a-ad96-8521981fd951.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     393740
IP address blocks:        206.180.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:91:07:7c:57:8a:c7:92:e9:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=cc9688f9-429a-4bef-9390-daaa73791e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:e0:f2:ec:3e:ad:b8:3f:20:17:f6:3b:24:
                    f0:6b:df:af:ab:88:fc:bb:ca:be:ea:10:11:1d:2d:
                    b7:ef:72:8e:66:c6:cd:22:47:dc:be:49:6b:90:13:
                    84:31:22:5e:cf:b4:d9:7d:24:c4:71:9b:03:bb:69:
                    ff:cb:86:40:aa:6e:92:3b:f7:d7:13:59:a3:7e:62:
                    e3:8b:77:37:87:6b:51:f5:70:cb:b1:64:14:4e:9e:
                    2b:7e:f4:57:a5:a4:a4:7a:ba:e6:37:e3:49:2c:02:
                    88:a1:e1:42:80:d6:38:79:9b:38:36:22:53:91:3b:
                    dc:98:d5:1e:64:b5:d3:4e:01:e7:a7:9d:6d:cc:08:
                    fa:8a:85:95:1b:f2:f1:04:6e:03:9d:dd:4f:21:01:
                    42:a4:2d:84:84:2b:f2:e8:0b:f0:b6:de:81:07:5e:
                    77:c2:e2:49:1f:81:ea:fb:8e:b6:40:ba:aa:a8:f7:
                    91:ec:81:49:7c:0e:31:99:3d:9f:32:35:f1:7a:7c:
                    9f:61:90:97:51:11:3a:94:72:38:c9:59:6a:93:ff:
                    52:0c:63:ae:75:39:65:69:7e:eb:fe:7a:1b:4d:fb:
                    d5:ed:6c:8f:88:1c:90:e3:99:e5:0f:1e:0f:d5:88:
                    5c:ad:1c:4f:5d:1f:1b:21:df:a9:1a:67:86:46:39:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:24:1A:BB:9C:A2:BA:73:9C:C2:85:5B:7A:BC:89:2D:ED:61:97:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1848b6bf-4696-300a-ad96-8521981fd951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:9c:a1:15:6e:13:7e:35:d0:6f:b0:9c:19:5c:d0:34:41:46:
         6a:2c:db:72:f6:59:58:ed:9b:25:82:cb:5a:79:b7:03:bb:44:
         ab:30:64:12:cd:30:12:d9:1f:1b:d2:54:db:6d:89:f7:a4:81:
         98:72:e6:0e:2c:cf:74:6a:25:ff:cf:5e:2a:dd:c1:ec:64:d7:
         07:dc:6a:ad:f8:5d:58:a6:bb:27:78:b6:91:2e:c7:e2:80:4c:
         7b:1d:08:38:12:f4:95:a0:aa:80:e5:5c:b3:17:c0:a8:de:1b:
         18:40:c9:64:5b:7f:2a:6f:e7:61:f0:dd:f9:45:0e:be:7f:4e:
         24:71:37:2f:95:af:42:8b:87:7d:d7:2e:f3:52:d7:45:40:2f:
         94:8f:c2:19:b4:a7:c4:fe:71:0f:87:39:40:1c:cc:b0:f5:ff:
         1f:68:ed:61:0b:88:25:d1:bc:c0:7f:14:bb:4b:0a:9c:97:17:
         6d:c3:80:af:64:30:fa:aa:16:e8:cc:bf:70:6b:40:d1:16:e0:
         29:67:21:01:b6:61:ed:78:90:76:1c:b6:65:0b:bb:9c:bd:63:
         20:04:4b:f1:e3:60:54:9d:11:92:84:3c:cc:9f:15:50:dc:55:
         e2:62:98:60:56:45:f8:22:fb:f9:34:b0:b7:b9:03:d5:d9:9e:
         5e:d7:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:04 2025 by rpki-client