Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3eea05d2-c43e-3fce-b3bf-f1bc1ba5ab6e.roa
File:                     3eea05d2-c43e-3fce-b3bf-f1bc1ba5ab6e.roa (raw, json)
Hash identifier:          srwPUpiGknvRzHAMBLXawOFFME+Nwk44Tv8kFqLkTmM=
Subject key identifier:   7A:76:CE:38:8B:08:E2:3F:87:DE:A6:A7:68:D9:40:DC:5D:02:EA:AD
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5003B92858C90CB28B1B20
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3eea05d2-c43e-3fce-b3bf-f1bc1ba5ab6e.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        206.191.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:03:b9:28:58:c9:0c:b2:8b:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=e0e6836b-407c-488c-8fc0-5a5d66a23f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:a0:61:b2:a8:68:aa:64:90:31:82:dd:65:
                    81:7b:56:78:f6:44:0a:17:ca:95:7b:5f:71:b8:62:
                    23:2f:12:d4:2a:53:4e:e8:5f:9f:6c:34:12:a0:61:
                    3e:ce:4f:fd:e9:c9:a8:62:ec:f4:b8:bc:f7:ad:b4:
                    cf:02:aa:a3:2c:f1:a9:4a:f7:82:6a:75:f1:57:5d:
                    02:c2:dd:b6:51:f3:4b:95:b8:90:c2:01:70:4a:c7:
                    53:f0:10:c3:4f:a4:1e:cf:96:ea:6e:96:82:ed:d9:
                    7a:b3:6a:48:b4:0e:02:4a:0e:aa:6f:a6:08:8b:94:
                    9f:5a:47:f3:9a:0d:fa:12:29:af:c2:d9:93:3c:93:
                    51:99:03:be:08:a9:c5:ac:61:31:8b:e0:50:00:56:
                    fe:50:91:30:e8:9a:01:52:8c:f0:71:f1:d2:cf:0d:
                    82:11:9e:2b:e9:5f:1c:53:39:a9:4a:f8:22:0d:57:
                    4e:88:f5:c7:4b:58:71:c7:3a:6d:80:67:2a:dc:8d:
                    e5:8a:86:d8:a9:87:32:cb:90:11:1f:1c:2b:c9:a1:
                    8b:80:0c:7b:83:c4:51:15:8e:61:be:40:1b:5b:e7:
                    ef:5d:03:b7:94:1d:b8:fa:1e:b7:ba:ea:93:80:25:
                    7c:fb:02:69:6a:56:8f:78:ae:94:d8:1e:2d:f1:b5:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:76:CE:38:8B:08:E2:3F:87:DE:A6:A7:68:D9:40:DC:5D:02:EA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3eea05d2-c43e-3fce-b3bf-f1bc1ba5ab6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ca:ad:f0:6b:d0:bf:a0:b9:96:86:32:02:6a:c3:bd:99:95:
         e0:e3:44:1b:5d:a6:e5:1f:db:3c:f5:4c:1d:d4:4a:81:c4:54:
         d9:2f:25:80:15:07:b4:86:60:ea:82:45:0e:94:8c:17:37:d1:
         65:8a:7f:d2:be:38:bf:33:8c:11:f8:3c:c0:7a:da:74:fe:ce:
         4d:f4:f5:7c:10:e3:e9:40:2d:f4:02:6c:08:9a:74:60:90:d9:
         d2:4d:5a:a8:a3:88:f0:8c:98:33:d8:e5:98:3e:18:5d:6e:a1:
         c8:e7:c3:ce:89:86:97:40:cb:de:b0:b5:c3:8d:79:88:41:6b:
         cf:74:df:c7:88:1f:31:a2:32:65:ae:08:cf:85:8b:47:85:03:
         59:61:0b:cc:2f:28:ed:5d:bb:f8:18:92:b6:7c:d1:7a:f9:28:
         f7:a2:69:2a:99:02:0b:5d:e6:27:82:0a:33:6b:c1:d9:07:79:
         ff:70:77:95:0f:d6:b2:42:50:9b:e3:20:89:f7:4c:36:76:5e:
         65:bb:7f:44:41:14:80:66:75:e1:c5:ab:32:6d:d5:73:78:8b:
         0f:34:6b:93:49:d7:f2:b8:e6:ef:40:fa:d7:34:6a:f8:b2:6c:
         f6:5b:a0:8d:09:03:8b:5f:dc:33:d7:73:80:33:f2:fa:2e:6a:
         bd:f6:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:11 2025 by rpki-client