Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/93d1e0b3-0ee8-303b-9f86-8b72bb08f53e.roa
File:                     93d1e0b3-0ee8-303b-9f86-8b72bb08f53e.roa (raw, json)
Hash identifier:          OHGZ2B1ACsXJmS4XkCDc9CzIr50C0kKtfDKznl07yv0=
Subject key identifier:   EC:D1:55:6D:0D:18:0A:D3:5C:3C:B5:2F:09:82:1C:7B:DB:7E:07:24
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858484D7598903DFE3439A5CD68A8
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/93d1e0b3-0ee8-303b-9f86-8b72bb08f53e.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     26744
IP address blocks:        206.180.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:98:90:3d:fe:34:39:a5:cd:68:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=67df7d3e-e339-42cb-a854-896f4cc04e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:95:af:28:19:f7:bf:aa:d4:1c:34:3f:3f:
                    3a:82:07:8f:f6:ea:0a:85:d9:80:76:b3:3d:11:e6:
                    71:bc:a8:13:d4:32:41:75:0d:cd:4c:dc:41:de:62:
                    62:07:e5:09:d4:33:66:37:c3:2d:80:90:0a:6a:96:
                    25:2c:8b:ba:38:92:87:e3:47:34:35:3a:2a:dc:34:
                    f6:7c:49:3b:3d:82:ef:15:30:78:09:b2:66:7a:1a:
                    36:00:0f:1a:51:3a:df:9e:b2:66:9a:e4:24:f3:5b:
                    91:11:a3:83:9f:f1:e3:ad:50:7d:e3:6b:9b:45:14:
                    d6:4f:36:c7:71:11:51:0c:ad:a7:65:a3:a1:70:5a:
                    9e:40:dd:98:ef:cf:a1:54:5b:68:b2:23:cb:b1:6f:
                    49:3f:22:44:dc:cf:bd:eb:3d:4b:d9:69:13:31:1d:
                    1c:7c:cc:e9:c0:21:ec:94:08:f1:62:e9:6f:2d:31:
                    70:3e:74:be:b2:ae:cb:e4:16:d5:2d:3a:1e:64:77:
                    5d:70:98:9f:12:34:d0:0e:fd:cf:ba:31:e2:ff:07:
                    fb:0f:de:5e:04:c6:ec:c6:16:05:0b:68:73:e5:cc:
                    73:f0:ea:af:73:2e:54:3b:ac:3b:af:8e:2d:b8:b6:
                    95:ad:1c:39:19:2d:60:e5:59:a9:78:e4:d0:38:7a:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D1:55:6D:0D:18:0A:D3:5C:3C:B5:2F:09:82:1C:7B:DB:7E:07:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/93d1e0b3-0ee8-303b-9f86-8b72bb08f53e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:18:2e:4c:df:2d:a3:50:8a:8d:02:40:2e:e5:14:79:d3:ec:
         56:67:70:69:c4:d5:5f:e2:ee:9f:6b:a0:4d:9d:82:1d:ab:5f:
         df:16:60:1a:cb:82:3f:a4:34:e3:e4:d8:13:0c:88:21:af:ec:
         2d:b2:44:b9:68:7f:bb:e4:3b:e2:1c:88:a4:99:ea:15:81:50:
         b4:99:df:93:3d:44:fc:e7:09:45:ba:8a:5e:a0:cf:12:7e:88:
         b4:9f:f8:d3:3d:5e:d4:9f:17:8f:8d:f9:bf:e3:33:70:5f:fe:
         64:d6:40:59:4a:f4:28:cb:61:35:81:aa:21:a8:e1:35:d7:c5:
         3e:9f:38:65:9b:9c:06:0b:f1:67:c3:84:6f:83:df:44:a6:f1:
         2e:47:ce:8b:6f:6c:b0:a9:9e:b9:cb:bb:ef:73:4b:06:bd:b4:
         54:79:06:53:22:05:7a:59:48:8d:14:8c:df:f4:42:4c:04:72:
         27:d7:c6:b2:bc:17:cf:01:eb:18:d3:ce:40:2e:76:64:ca:39:
         7a:11:73:ae:83:ed:f9:fd:b0:ea:72:0f:73:af:f6:a4:d5:a1:
         a7:63:f2:c4:a7:08:07:8d:70:ce:28:2f:03:b2:fc:ca:d1:c3:
         4e:9c:25:1a:9b:3d:a7:66:22:2d:86:ac:aa:8d:f6:ef:f1:a3:
         1b:0b:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:25 2025 by rpki-client