Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7347075a-68df-3a6d-b2a6-00edeadd3095.roa
File:                     7347075a-68df-3a6d-b2a6-00edeadd3095.roa (raw, json)
Hash identifier:          S79QYDPfYDzIvvKBQITK7wGKFewutNbKfUXMNP8CaiQ=
Subject key identifier:   DF:B7:67:67:1F:6F:05:6A:2A:86:FB:C5:43:49:87:73:E1:CA:9C:78
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B50041B4D4EAE006B803C00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7347075a-68df-3a6d-b2a6-00edeadd3095.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        206.191.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:04:1b:4d:4e:ae:00:6b:80:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=a912d548-6162-4fa1-b6d1-c6a09c6102f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:b1:92:af:cb:73:08:6a:17:42:4d:55:7e:
                    a3:d9:e3:9b:24:b4:ff:93:b9:0f:da:bd:1d:67:d1:
                    b2:74:4d:e3:c1:61:8f:ae:42:04:9f:e5:36:8a:0c:
                    7c:aa:e2:ea:78:a7:37:5e:b1:c7:aa:d3:50:f2:80:
                    f5:6d:9a:c8:e7:3b:74:1f:f2:76:69:11:92:13:09:
                    f4:e3:69:1a:2b:7f:06:c7:48:0e:0c:e0:9b:6c:82:
                    24:aa:a8:69:5e:2c:78:a4:78:cd:4d:9a:15:ae:a4:
                    0d:d6:a5:de:1f:a7:3a:10:9d:94:ec:52:e0:67:8e:
                    72:77:f4:d2:b3:6a:01:e8:76:f7:0e:92:30:f2:4e:
                    c1:75:f9:9c:9b:1f:88:98:c2:b7:dc:d2:ca:a3:fa:
                    10:22:7f:b4:da:a5:29:5c:96:40:ec:da:e5:2a:22:
                    2a:2e:8d:cb:a4:1f:a7:dc:8d:38:93:16:66:2e:f9:
                    c1:3b:bf:86:f1:f7:a6:f9:32:12:06:ee:00:47:f5:
                    7a:49:d5:ff:1e:8f:02:6a:4d:d6:44:35:f2:41:1b:
                    26:7b:21:a5:60:c6:8b:8e:9e:bc:f4:89:e4:36:50:
                    0a:b2:d3:28:4e:f6:4b:55:38:d7:62:d8:49:1e:8b:
                    e1:58:6c:54:e0:87:57:7c:b9:a3:cb:33:00:24:a4:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B7:67:67:1F:6F:05:6A:2A:86:FB:C5:43:49:87:73:E1:CA:9C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7347075a-68df-3a6d-b2a6-00edeadd3095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:52:73:55:a8:3e:04:c0:2f:4b:5c:b7:54:86:14:d9:ee:bb:
         a4:47:ac:d1:b8:2d:97:71:f1:1e:78:ab:66:80:f3:19:2f:d1:
         a9:4c:90:ed:30:18:5d:4a:67:c1:cf:ad:99:3f:85:9a:8c:9e:
         81:27:72:1d:79:2c:bc:c2:d2:26:e6:b9:81:94:b5:be:21:24:
         8e:ff:17:97:9f:91:55:30:63:3c:cb:e6:8a:8f:9c:09:66:d9:
         c8:c5:e9:16:60:ab:3d:2e:6f:d0:8a:fc:c5:79:2c:58:de:a7:
         7c:ed:1e:d6:94:7a:32:f9:fb:e9:8c:1e:de:70:56:5e:85:74:
         05:f1:7b:65:da:25:10:b2:62:8f:2d:a5:ab:00:98:f5:49:b6:
         e9:68:51:95:a2:76:e1:2c:e5:0b:e3:7a:5e:5a:c3:54:be:c9:
         ed:17:e7:02:24:33:af:76:71:85:cd:9e:b2:48:6c:b2:47:d1:
         72:b3:41:19:1a:30:f7:a0:08:99:fe:b5:e2:e2:de:66:68:36:
         a0:fb:e3:83:2b:20:cc:5a:32:68:db:b6:f5:5a:b0:27:1d:6a:
         b2:d7:68:8d:f4:96:d3:fa:45:d2:4e:88:d3:6e:72:01:cd:8f:
         f8:67:83:fb:20:dd:35:4d:c3:09:46:be:f3:2c:a1:3c:c2:b7:
         ea:92:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:41 2025 by rpki-client