Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d38815a1-84ab-3d82-a019-dbf09d6c06c0.roa
File:                     d38815a1-84ab-3d82-a019-dbf09d6c06c0.roa (raw, json)
Hash identifier:          FGlJUlqYLVXchgiq6hjmXJfWstNdQsqNdyz03pSkLU8=
Subject key identifier:   2B:D4:D5:F9:32:81:09:AD:0C:EF:B5:0E:22:BB:2E:B8:F1:1D:88:A3
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858492CB22617A3EA19BB97AF0180
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d38815a1-84ab-3d82-a019-dbf09d6c06c0.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        206.180.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:26:17:a3:ea:19:bb:97:af:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=30e43979-1304-442f-bb3e-52a029249144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e9:c1:a5:15:db:1b:0f:74:16:22:8d:23:c2:
                    18:c5:85:71:7d:5b:29:47:c8:3c:01:2e:e1:98:20:
                    fc:f2:42:1c:7e:08:e1:a0:77:98:8c:6c:db:c1:17:
                    b2:5e:43:23:83:78:23:85:84:59:5b:08:01:16:87:
                    4d:ea:0e:92:92:25:18:78:69:c1:fd:82:6a:70:d3:
                    7f:87:e3:47:1e:05:3a:fd:02:29:09:87:4a:0a:19:
                    f9:81:80:81:6c:7e:f4:ac:9a:d7:30:64:f0:13:79:
                    e1:ad:a4:eb:38:a9:0c:96:b3:f3:a0:aa:36:49:3f:
                    9e:9b:50:e5:40:98:fd:4d:88:4b:0b:35:52:01:4a:
                    88:0d:ef:da:2f:0b:a5:5e:f8:78:3e:d9:88:e1:de:
                    0a:d2:11:c9:cd:81:37:8d:60:e9:e2:66:90:eb:36:
                    83:d9:e1:0b:7a:2b:68:68:44:13:1e:f4:ae:aa:29:
                    43:e0:82:44:79:d2:a9:bc:de:34:f8:cd:4b:ef:a2:
                    da:7f:72:f2:b0:7e:8e:68:aa:a9:4a:de:36:8c:99:
                    69:37:7a:b1:2d:5f:19:db:b9:08:eb:97:2f:f6:2b:
                    49:50:ac:3b:51:47:06:fb:06:d1:33:20:7c:82:d5:
                    2e:18:4c:b3:75:0f:3e:81:21:4b:e2:c0:f3:12:0e:
                    13:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D4:D5:F9:32:81:09:AD:0C:EF:B5:0E:22:BB:2E:B8:F1:1D:88:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d38815a1-84ab-3d82-a019-dbf09d6c06c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:a3:4a:76:00:15:d5:0a:82:7d:0f:17:a3:a0:67:80:1a:
         5d:a9:88:23:96:df:bc:37:be:89:44:27:ee:44:e1:88:d1:b9:
         f8:2e:5f:f5:57:3f:77:d7:61:38:a7:13:d3:4f:8f:da:2e:c3:
         b3:f8:85:01:d9:f3:e2:bc:8b:4d:f8:76:37:91:5e:bb:6e:37:
         88:de:7a:7c:00:37:03:0a:17:04:aa:fc:7d:65:4f:b8:cd:1d:
         84:22:50:75:cd:f0:ac:7a:75:b9:9f:da:8d:dc:c9:63:49:cf:
         09:dd:9b:c7:4d:46:75:50:cc:40:6c:f5:79:8f:73:40:64:9c:
         f1:cf:db:04:ad:2a:87:88:bc:4a:dc:55:b9:c8:2d:8c:28:50:
         df:bd:5c:c2:76:65:23:1c:48:33:52:f6:40:0a:99:90:81:bb:
         c6:47:3e:62:eb:eb:8a:33:ae:b2:15:a6:76:26:52:de:c8:a1:
         49:82:63:41:6d:db:be:83:7e:5b:55:1a:12:83:5c:6f:ac:43:
         56:3c:1c:3c:44:22:4a:e0:b0:64:e2:8f:53:f3:d8:4b:68:22:
         7f:99:32:1c:94:5f:ef:be:28:94:95:9b:3c:d1:24:da:7d:f7:
         dd:57:5e:8f:88:7f:42:ad:8a:f9:aa:60:b3:c1:72:c3:e7:c7:
         83:a3:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:03 2025 by rpki-client