Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa
File:                     ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa (raw, json)
Hash identifier:          PsjiGTINqecJ8Yn4VgNXg+TYYA3BXlde83SyLvxBAWA=
Subject key identifier:   E2:A5:00:76:E6:15:B3:8D:59:57:E2:6B:1D:78:56:9A:70:E8:FE:21
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858484D759208F45A1A723DC8FF60
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     393740
IP address blocks:        206.180.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:92:08:f4:5a:1a:72:3d:c8:ff:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=021f12c5-716b-45da-9c54-1c201036a0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:8d:ec:4c:c5:d8:d3:08:a6:e1:d0:03:11:
                    e2:41:8e:df:03:45:e9:fc:64:d0:1c:5f:38:cc:29:
                    bd:8e:7b:88:54:b6:a8:3d:76:be:95:1d:3a:01:ae:
                    3d:86:34:f1:c4:97:6d:b4:94:7c:b4:7a:4a:d0:08:
                    1b:63:d2:c5:73:43:15:41:90:99:9d:a5:db:c2:52:
                    15:d4:da:8e:b3:2b:98:1f:3d:b8:87:c5:80:f6:1a:
                    9e:d2:b5:54:a1:1d:a9:3e:17:ae:17:ad:88:16:61:
                    2a:8c:d6:34:9f:2e:d8:7c:e7:09:55:c6:c4:f3:58:
                    ad:8e:c9:14:be:42:dc:55:0a:15:ae:c9:37:bd:ec:
                    43:55:3e:4f:be:5c:3e:00:11:d1:2e:f7:21:16:e6:
                    b3:2e:83:66:36:ef:ad:89:4a:5b:22:09:20:a5:a2:
                    59:6f:36:6e:79:82:ee:0e:07:a3:67:9a:33:96:17:
                    af:b2:12:20:f7:0b:11:a1:37:23:eb:0b:7f:13:b7:
                    e4:9a:ae:74:91:7c:be:3f:fa:10:ab:a4:ed:6a:26:
                    be:f8:d1:8d:81:45:70:0c:0f:9b:94:01:c9:8d:42:
                    ac:31:5e:ac:18:7c:23:1d:65:a6:b0:70:44:75:fe:
                    20:c6:e6:ec:e1:a8:64:9b:c1:71:92:22:ca:0d:51:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A5:00:76:E6:15:B3:8D:59:57:E2:6B:1D:78:56:9A:70:E8:FE:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ddd7db4f-a91f-35b8-921d-6b300e5156e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:22:7b:fe:c5:d6:7f:59:ed:cf:f0:08:a3:5b:f6:b9:96:ec:
         18:42:bb:b3:f9:e2:29:67:e6:08:b4:e6:19:d2:86:8f:74:54:
         5f:7d:b4:9d:11:94:76:33:33:1b:c5:f2:3d:66:43:c6:11:b1:
         b9:3c:dc:b3:9e:b4:c2:a7:74:5d:30:77:f2:94:f7:8f:a4:b9:
         3b:7b:66:8d:a6:c4:8c:03:02:db:5d:ce:aa:f4:c8:da:fa:15:
         44:90:ac:d8:23:f8:f5:27:f9:f6:a4:3a:8f:1f:c2:62:f5:bb:
         c4:79:3f:49:7d:09:72:02:91:52:cc:ce:be:c1:8b:ea:d6:91:
         78:61:c0:41:41:24:88:05:10:b5:7a:aa:70:dc:f5:03:70:5d:
         f1:20:32:d1:c4:ad:76:62:b8:85:7c:54:5e:a9:67:78:06:3f:
         46:11:0f:1a:79:5f:93:fa:54:d5:fe:70:d8:63:8f:b8:20:5c:
         05:27:96:b3:6f:a7:ce:80:f1:1f:42:5a:25:c4:c5:0a:2c:82:
         dc:9a:04:92:eb:de:b0:79:d6:d5:5b:e1:2d:35:ea:47:e8:8d:
         f8:62:d2:ac:23:59:53:2f:ec:a0:81:51:73:6c:05:55:dc:c5:
         93:83:cc:2a:4a:b8:82:9f:79:62:25:ca:3e:29:fc:55:69:fe:
         71:76:10:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:24 2025 by rpki-client