Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/566479be-09df-3025-8315-c6c923a83d2a.roa
File:                     566479be-09df-3025-8315-c6c923a83d2a.roa (raw, json)
Hash identifier:          Yslt+SkSVRb52hnokrZhfoMxchQfXDuOVrHiLecefpQ=
Subject key identifier:   D3:AB:96:22:1C:F5:05:34:4D:3E:FD:D9:C9:AB:11:14:0E:E2:C0:25
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B5007300D77AA29647A3DC0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/566479be-09df-3025-8315-c6c923a83d2a.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        216.13.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:07:30:0d:77:aa:29:64:7a:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=5f7b9db8-3801-4dd5-ace6-fda4eeb49872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:8e:3d:ef:5c:42:fd:a0:91:bf:6b:2f:71:
                    e7:49:d8:23:62:97:96:97:20:75:35:f3:af:9d:47:
                    09:06:b4:21:d5:fb:fb:76:ef:24:d6:aa:fa:54:9d:
                    f6:a9:04:66:a2:45:b0:1d:51:58:7c:34:08:2a:08:
                    b5:de:03:9a:bd:e1:f7:9b:20:8d:51:9f:97:36:a4:
                    bf:82:8d:47:d3:46:b5:ce:11:7b:39:77:91:f1:a9:
                    35:d4:92:7b:77:8f:ec:9e:23:c3:5c:61:b5:8d:d0:
                    24:35:27:f2:95:d1:90:04:17:44:0c:36:0a:3b:f8:
                    e9:bd:ae:44:a8:34:cf:29:8a:57:32:f9:05:ad:91:
                    16:cb:25:b7:db:0b:75:7d:36:6e:25:db:94:92:f0:
                    d4:cc:67:1b:08:f1:02:62:45:f7:5d:e6:7c:69:64:
                    bc:eb:4e:0b:d7:bc:a7:a4:55:4c:fb:9b:b8:be:1f:
                    1d:6f:80:96:04:c4:f5:29:8f:61:b0:a3:07:9e:a9:
                    c0:69:d7:99:d1:ed:2e:e4:21:28:af:d9:6b:9a:ed:
                    66:69:97:8c:79:05:85:15:d5:c1:de:d2:82:a0:49:
                    f1:15:89:c4:1f:c1:bf:e8:5c:6f:51:5d:ee:0f:21:
                    3d:79:19:23:c7:32:9e:ff:f3:36:93:9b:26:ef:98:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AB:96:22:1C:F5:05:34:4D:3E:FD:D9:C9:AB:11:14:0E:E2:C0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/566479be-09df-3025-8315-c6c923a83d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:70:f4:e8:e0:32:79:6b:20:f0:44:e2:cc:5d:85:21:f3:25:
         d5:43:a8:f6:ee:b2:fa:f5:e8:e0:34:1a:ea:94:39:b2:3a:91:
         69:fe:19:df:36:31:d7:3f:07:fc:cc:ed:14:89:cc:e2:61:b2:
         14:c6:78:6d:77:70:83:49:2b:3e:40:d6:2d:3c:55:81:31:b6:
         39:e0:f8:ca:22:c4:75:d9:6f:6d:83:66:dd:04:94:c4:fc:79:
         a8:f8:ea:00:c3:70:06:4b:88:8d:87:aa:d2:ac:d5:c5:4b:cd:
         2d:c4:ae:da:32:08:19:56:32:a7:ef:b4:11:8c:c9:f0:fb:f2:
         e5:30:6d:55:67:6b:c7:8f:92:4d:7d:4b:f9:96:ec:8d:2b:8c:
         d9:02:0e:9f:a3:b5:16:d5:59:50:48:38:84:8b:bb:6f:a2:ce:
         2b:38:c3:49:87:b0:d8:76:a5:a0:37:0b:c0:0a:15:ad:70:b7:
         dc:50:e9:ab:e2:f9:4e:66:93:0e:71:1f:30:3c:40:8f:66:b0:
         ca:3d:e5:f0:12:33:e3:fd:18:be:57:62:9c:c0:b2:5e:85:b2:
         16:eb:2f:c8:ca:95:b8:b8:a9:da:20:5f:00:b8:72:98:21:64:
         33:1c:ee:aa:34:18:20:76:47:d6:d4:b6:a3:a9:fd:a2:d6:14:
         42:25:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:19 2025 by rpki-client