Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cbfbec14-a7a3-3aea-a7fe-c06865f8cfed.roa
File:                     cbfbec14-a7a3-3aea-a7fe-c06865f8cfed.roa (raw, json)
Hash identifier:          0MVRh9u2vmmGVGRy+Juqr22UxtQSqxyVNpMd/Pds4FM=
Subject key identifier:   C1:8C:5F:16:7D:79:60:70:2A:84:DA:53:F0:75:60:89:84:95:F9:5D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFCB1DCF3D5F184B1CCD60
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cbfbec14-a7a3-3aea-a7fe-c06865f8cfed.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        207.181.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:cb:1d:cf:3d:5f:18:4b:1c:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=221edb9f-53c9-4471-8d12-b1dafa757524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:a9:7f:61:56:9c:ff:9f:51:00:c8:93:08:
                    61:0a:9e:b6:4e:8e:65:d4:b0:1e:3d:d0:a3:54:55:
                    40:f9:67:6b:a9:ce:f3:91:f9:39:49:2f:44:6d:3e:
                    8c:08:52:bc:d6:91:f1:41:b1:66:2e:bf:f2:29:e3:
                    0f:ec:9e:e8:2d:d2:e5:c4:ee:a8:3f:03:b2:ea:ee:
                    d2:20:39:5b:0d:1e:23:0c:12:48:c9:bf:a4:d7:65:
                    26:8c:f7:96:27:0a:b5:d9:f4:da:53:02:29:e9:25:
                    16:e8:2c:ff:b0:bb:ed:1c:2a:fe:1a:76:7c:3a:5a:
                    00:63:d6:af:73:80:f9:3d:93:6f:2a:ca:9c:b8:ff:
                    53:b6:87:79:dd:25:8f:5e:a7:31:02:3d:13:3e:fd:
                    24:80:47:88:dd:73:92:25:99:7f:23:a2:1a:6b:87:
                    c4:c3:38:27:b4:0e:27:77:e4:fc:69:52:e0:22:df:
                    e8:4b:14:9e:41:e4:68:82:59:ef:ba:5e:91:d9:d2:
                    93:ee:67:9a:0c:9a:49:8c:43:33:56:60:79:51:59:
                    c1:5a:2d:b1:76:15:36:d5:dd:64:98:cf:ec:7b:b1:
                    fc:94:3c:43:a3:90:2b:4b:a9:7b:b2:9c:8f:d4:4a:
                    ee:6a:8a:c8:09:ef:95:d5:03:d9:d3:68:bd:1b:08:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8C:5F:16:7D:79:60:70:2A:84:DA:53:F0:75:60:89:84:95:F9:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cbfbec14-a7a3-3aea-a7fe-c06865f8cfed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.181.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ad:f5:89:09:d2:47:1b:03:af:b3:1c:1f:24:42:7d:15:4e:
         82:02:c4:74:3f:09:61:6c:f1:fa:8b:5f:31:a8:e5:a7:b3:b5:
         10:f2:63:1d:bd:ef:e2:e6:e9:a1:06:d2:64:66:56:8a:14:87:
         93:14:32:b0:d4:28:96:06:61:1d:f4:6b:2c:49:6a:a1:49:a0:
         25:a7:f8:06:4e:ff:e6:a4:cc:cf:ae:c9:01:95:36:ea:27:a3:
         f0:99:a5:ae:6c:74:0a:e2:c6:4a:d0:4c:cc:71:2d:1e:2d:a3:
         41:d8:49:ac:71:33:8b:0c:2f:c7:a0:3b:f0:b0:28:2b:24:f6:
         5e:9d:e5:c4:4d:48:ad:48:32:3e:94:e1:b6:ce:ff:3e:28:c3:
         b0:4e:94:14:ba:96:c6:af:27:f0:7e:86:b1:f3:b5:31:2e:7d:
         4f:01:aa:e9:90:86:c6:06:fc:91:fe:34:18:56:f1:e7:4e:b5:
         79:51:ef:08:0b:30:ce:a5:85:04:9c:51:a8:4f:dc:aa:7e:a4:
         7b:5d:d3:f9:bc:32:26:0b:be:34:0c:49:68:b8:4a:cd:3b:60:
         eb:15:a2:a4:34:cb:a3:6b:28:4b:1e:f6:d5:3b:7f:b8:c7:bd:
         10:2c:f6:a8:f3:e1:fd:85:bf:b8:fa:7b:0d:a6:73:ec:4f:f6:
         d8:ce:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:14:24 2025 by rpki-client