Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/269ba3c7-e7fb-3e44-9404-f921429a6ad2.roa
File:                     269ba3c7-e7fb-3e44-9404-f921429a6ad2.roa (raw, json)
Hash identifier:          ejQBYQUq17EbrEYIx2w7UFw/jX9pex8XZi/F27GYsR4=
Subject key identifier:   DB:43:9E:57:7A:E5:BE:EA:11:08:AC:73:84:2B:82:0E:72:5D:5F:F0
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858494CC946B6CA7D54D9ABA0A340
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/269ba3c7-e7fb-3e44-9404-f921429a6ad2.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     26744
IP address blocks:        206.180.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:46:b6:ca:7d:54:d9:ab:a0:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=cb3cba7d-295d-4e58-986f-60d191cab15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:81:38:e0:f1:f0:74:ef:cc:ff:21:91:f1:
                    37:64:f0:0e:5b:b3:23:c4:69:72:22:24:bd:32:ec:
                    86:38:c1:ef:9b:29:ea:f9:c0:fe:75:f0:84:b3:0a:
                    64:d0:f0:99:12:04:44:51:c5:07:21:0b:18:f3:b3:
                    f2:4a:70:76:24:bc:a6:b2:bc:d8:d9:c2:b8:a3:87:
                    40:f4:42:bf:d0:50:9b:f9:05:90:2f:93:6b:08:75:
                    f0:cb:ce:45:1c:5f:26:d5:ab:cb:54:72:c9:4f:82:
                    cc:e0:b7:8d:07:01:22:d7:60:aa:11:0f:28:c3:98:
                    c4:f5:68:c9:71:70:80:b8:0c:a3:65:62:99:36:7e:
                    6e:29:dc:99:f4:c1:c0:08:3c:5e:33:c8:fe:c6:0c:
                    a6:eb:a9:02:c5:bd:67:f3:02:e5:0f:29:e0:cb:ac:
                    50:14:5a:36:08:b1:c6:82:8d:45:2e:d7:fd:64:6b:
                    7e:97:ff:cc:4d:7f:6d:0d:3d:c6:24:35:4e:e8:59:
                    0a:42:97:53:89:bc:53:56:61:e1:23:7d:f2:af:ab:
                    bd:25:50:b4:f2:1a:ff:d2:fb:82:38:db:17:ca:ed:
                    10:c7:9a:33:b7:a7:6d:bc:24:af:0e:f8:56:4b:15:
                    ba:4a:9e:8a:c6:0f:b2:de:39:69:60:0d:0c:51:8d:
                    50:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:43:9E:57:7A:E5:BE:EA:11:08:AC:73:84:2B:82:0E:72:5D:5F:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/269ba3c7-e7fb-3e44-9404-f921429a6ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:26:3c:b6:df:83:ca:08:c5:49:88:2b:8c:89:95:38:79:
         5f:b4:df:5d:fc:64:16:e9:0a:1b:45:4f:bd:ee:9f:06:da:66:
         8a:db:3e:1f:d2:af:35:c7:00:0c:56:1b:e1:b1:4e:83:78:92:
         48:4d:1c:12:32:8e:fc:25:8a:a8:f4:b3:c1:03:d4:92:f6:4d:
         3b:89:52:e8:88:bb:7f:df:21:95:f9:9e:d0:a5:69:0f:d5:ec:
         ce:da:99:97:7b:17:cf:0d:5b:e8:0c:c4:59:be:ce:72:cb:6e:
         a1:1d:4e:cb:c1:ab:d9:ce:66:a2:25:ce:aa:40:e4:05:93:35:
         da:11:8f:bc:01:ff:d4:7b:31:78:c9:e6:33:f9:0c:03:52:ae:
         59:b2:31:ac:4b:bf:f6:c3:f1:c2:21:90:20:9c:49:52:65:33:
         5b:4a:6a:fa:48:71:75:02:a3:ad:1b:0f:a2:7b:c3:8b:5c:23:
         3b:8c:9d:a6:5d:a3:ac:16:38:19:c1:59:b1:9b:2b:1b:93:c2:
         4e:3c:c2:38:73:f3:4c:17:7f:36:b3:41:d9:df:a6:0a:d5:b4:
         ce:bf:14:b3:85:bf:3d:f1:46:38:7c:f1:23:cc:88:2d:ee:fa:
         80:c7:d0:fa:e7:a7:a9:4c:8a:ac:5b:52:74:0c:e8:c6:8f:24:
         48:89:73:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:17 2025 by rpki-client