Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/6c69ed6e-5958-3ae0-b69b-4c870eedb350.roa
File:                     6c69ed6e-5958-3ae0-b69b-4c870eedb350.roa (raw, json)
Hash identifier:          PzBpzEN6sZeo/wAY6jEPLSlpCroqtMrk4et1qcKtVSQ=
Subject key identifier:   9D:90:C1:C1:92:D5:BD:55:10:C2:EA:AC:9D:EC:63:C2:FF:AC:6F:71
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6C006F31C5E4726834280
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/6c69ed6e-5958-3ae0-b69b-4c870eedb350.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        207.245.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c0:06:f3:1c:5e:47:26:83:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=c8b34088-d7d9-463a-9dcd-700a0237ffe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cb:aa:f4:58:78:90:93:ea:3f:d4:01:ac:c7:
                    7c:2b:7f:0f:df:bc:e4:06:a6:99:bc:36:ad:66:e8:
                    f5:23:cf:cd:09:1a:08:d6:6f:1d:1d:77:5c:4e:b5:
                    81:4b:ad:eb:d1:77:68:10:e0:f6:95:30:e6:a9:85:
                    58:c1:ba:42:e6:cf:43:0f:89:a9:56:db:41:24:5c:
                    46:15:e2:e8:a8:bf:39:8e:9d:fe:a5:bf:07:9e:82:
                    f4:34:94:02:b6:f9:41:8b:01:ec:4a:74:50:55:c6:
                    a0:67:06:c2:e0:b2:ea:40:49:75:5c:6f:20:0e:82:
                    be:fb:63:99:73:65:92:fd:ac:f8:4f:49:3d:10:02:
                    f0:24:ea:29:41:ec:19:1f:0d:bf:59:37:db:68:9d:
                    90:c7:3e:1f:d1:11:17:21:9e:9d:a9:48:ce:60:fc:
                    41:98:99:fb:a3:7e:0d:68:35:f2:8d:48:b8:e0:7b:
                    aa:95:18:68:5b:a7:5d:cf:b2:36:67:81:58:73:f9:
                    b0:4d:e8:55:eb:bd:49:58:9c:c3:f3:bc:b4:62:d0:
                    85:dc:c9:f7:02:d8:e7:9a:7e:da:7f:12:db:a1:91:
                    84:33:b9:cf:65:fa:c2:36:00:25:e1:76:b2:ad:d8:
                    7c:32:6b:6a:cb:0d:3e:d7:9c:b1:2e:9e:2a:3d:93:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:90:C1:C1:92:D5:BD:55:10:C2:EA:AC:9D:EC:63:C2:FF:AC:6F:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/6c69ed6e-5958-3ae0-b69b-4c870eedb350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:87:04:b4:4f:7a:7d:1e:e6:d8:e5:25:3f:e8:a4:0c:2b:e5:
         0c:01:11:c9:e5:f4:ff:4e:e8:90:5d:09:9c:3b:83:c3:00:f4:
         42:06:83:8f:2a:70:1d:38:de:79:24:34:40:6a:cc:36:f2:14:
         1b:b8:fb:bd:02:ce:54:d7:c4:ee:b3:76:4c:ce:90:66:35:76:
         ef:80:f0:96:a2:4b:8c:5c:78:ab:64:f0:48:8f:3f:71:b6:7a:
         63:7c:69:1d:46:6a:1f:a5:25:c3:21:21:7d:23:cc:b4:36:fd:
         a9:da:0d:ef:9c:ba:c7:ea:93:cd:80:1a:82:b7:a9:4a:4e:db:
         32:1c:12:94:8d:de:d2:32:7b:18:3b:a0:1b:54:95:7a:19:31:
         1b:3f:0d:84:8f:0e:b3:7d:59:5d:0c:d5:c8:f2:52:0d:7d:ce:
         75:c1:d9:b7:bd:4f:cc:e7:f9:50:be:75:54:0a:ec:99:e1:6c:
         8a:5a:63:7e:cd:8a:3f:3f:e1:ce:de:14:55:f3:48:ff:91:a6:
         5d:67:ce:17:8d:54:2c:fa:13:3c:8d:48:0f:47:82:15:10:11:
         21:74:d1:76:21:dd:73:76:a8:c2:4d:2c:da:5f:0c:44:5c:9f:
         56:5d:44:7a:5e:32:3b:f1:ca:6c:03:e4:2c:6f:7f:81:66:36:
         90:a5:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:05:38 2025 by rpki-client