Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0f17e1c7-7e4e-3f98-81af-5f5af28ccbfa.roa
File:                     0f17e1c7-7e4e-3f98-81af-5f5af28ccbfa.roa (raw, json)
Hash identifier:          u0ur5zt1yEAQGMdb1lYxxln9MzbOyErfrd9X6MlCf6o=
Subject key identifier:   3D:44:52:14:DE:88:1E:8E:45:E7:4C:3A:4E:4D:55:5F:77:A4:53:FE
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFCA63E254A5DA68FCE940
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0f17e1c7-7e4e-3f98-81af-5f5af28ccbfa.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        206.191.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:ca:63:e2:54:a5:da:68:fc:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=90962592-39dc-4283-957f-ab291e17167e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:2e:06:89:81:7d:8c:53:37:5b:55:07:73:
                    83:9c:a9:52:bc:d8:58:c6:dc:9d:3b:b5:db:05:d8:
                    26:d7:6c:db:5b:0f:72:c9:f5:fc:4b:32:19:b3:53:
                    c7:d9:09:ec:e1:aa:33:61:ca:9c:bc:3a:ee:71:5d:
                    a2:e3:dd:3a:aa:c4:90:33:e9:88:9d:28:30:d1:b2:
                    c6:93:58:d6:b5:5d:e1:94:31:01:56:ab:be:15:45:
                    05:63:ca:78:ba:4a:34:91:25:12:33:a6:f4:7d:b1:
                    ca:f2:bd:dc:d4:70:ff:92:08:61:da:69:12:a0:f2:
                    0f:ee:f8:3d:96:cc:8b:f0:cd:15:df:78:82:76:33:
                    55:d6:f4:f3:c0:46:d9:c3:04:27:63:ae:05:d5:96:
                    5a:bd:ae:6f:b2:7b:d0:10:bf:e7:81:67:00:6d:be:
                    07:a1:fe:38:0d:e2:90:7a:40:c3:9b:5a:cc:fb:ad:
                    44:0d:ba:6c:44:ef:59:9a:75:09:b4:f3:40:80:20:
                    cf:01:5f:57:cf:25:68:6e:60:4b:aa:91:f0:0b:c9:
                    60:fe:37:b4:11:25:0d:73:88:86:71:cd:e2:85:b4:
                    64:04:3e:8f:be:76:5b:24:16:d8:87:59:24:b2:0c:
                    9a:76:8b:79:3e:e9:51:e5:72:61:39:82:15:5b:e6:
                    60:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:44:52:14:DE:88:1E:8E:45:E7:4C:3A:4E:4D:55:5F:77:A4:53:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0f17e1c7-7e4e-3f98-81af-5f5af28ccbfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b0:4f:ed:ee:00:8c:22:c3:b2:49:80:8c:3d:59:e0:5e:cb:
         25:5f:b0:31:db:4a:90:a0:43:be:a2:4f:03:2d:4c:b8:c8:9a:
         bd:f7:67:98:40:19:d2:c5:03:d4:a7:e0:9e:1c:15:a0:b5:a0:
         b1:45:31:8b:4d:be:3c:e3:89:66:d1:61:bb:f7:62:11:1d:5f:
         e6:4e:6e:96:88:9d:2f:78:4c:91:17:6f:0f:ed:fc:57:9f:49:
         9c:df:cd:46:6c:d4:5c:ca:a4:2d:c8:3a:a3:ae:32:de:06:99:
         52:a2:38:31:c3:0f:63:44:2c:00:a9:db:4b:b2:fa:c1:70:52:
         31:e6:19:2f:03:e4:3e:90:af:3a:3c:a5:f1:ce:3f:e2:e6:a2:
         97:e2:3a:d0:d1:a0:32:12:3b:9e:ec:2d:8e:83:a6:75:7d:41:
         46:75:8b:44:28:64:70:a6:3b:8e:7e:18:56:8c:87:bc:36:50:
         a6:32:ff:94:6f:d2:96:29:17:38:fd:57:b9:f8:a3:e3:f8:c4:
         c2:65:9f:0d:1a:fe:7c:63:2a:51:c3:c9:b3:c1:b1:d0:c2:88:
         9a:05:54:4a:5b:83:30:b9:f5:9d:75:90:c7:81:63:d1:0a:f9:
         a3:f6:15:7c:82:b0:9b:63:7c:69:6c:c8:71:b0:0d:00:6c:b1:
         bb:33:56:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:46:02 2025 by rpki-client