Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d16b3524-746d-3959-9d15-de7e2f045df1.roa
File:                     d16b3524-746d-3959-9d15-de7e2f045df1.roa (raw, json)
Hash identifier:          H9Ug4TVEczl6y25XbxTHDqlGOELKzgpUkilcEBeJqAo=
Subject key identifier:   DE:A4:A6:86:C6:E3:16:3E:6E:F9:5E:75:94:2A:AA:FC:B5:CA:8F:E8
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6BE823B657D78A03FADB0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d16b3524-746d-3959-9d15-de7e2f045df1.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        206.191.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:be:82:3b:65:7d:78:a0:3f:ad:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=74bfba80-77c2-496b-9b01-ce0f2a264115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:72:10:db:ca:1b:63:1f:40:59:87:37:55:37:
                    42:c0:ba:07:f2:f0:9c:e0:0b:73:b8:7c:f0:51:b2:
                    55:d3:43:e5:c6:d9:13:c0:0b:85:79:69:9a:e3:b8:
                    6d:3d:95:ce:ae:53:af:c4:56:e4:2e:12:c5:82:66:
                    b8:17:a8:f6:52:c8:d8:0d:5b:8e:8e:c6:cc:fe:c9:
                    e5:e8:96:d0:ba:d2:a3:06:70:44:20:83:39:1f:7b:
                    96:7b:18:f9:2c:80:08:0a:b6:d3:79:cc:17:0f:f7:
                    25:c3:28:15:4c:78:95:40:e9:ff:df:9c:af:94:b7:
                    07:49:8a:93:66:34:a5:4f:94:49:52:c4:ef:6a:cd:
                    2c:a8:06:b5:59:0d:1a:bc:8b:d1:a9:ac:e3:be:19:
                    b7:f6:a3:bb:de:30:84:6d:78:8a:f1:5b:a5:44:4f:
                    5e:4e:c8:77:7e:32:c2:e0:4b:ab:24:39:af:19:52:
                    ed:85:bf:94:f0:d1:4e:5a:8f:08:10:e8:8c:81:25:
                    bf:44:a2:ca:7c:1f:4c:96:7c:54:d8:ae:9b:12:bb:
                    2d:70:e0:5e:90:53:04:05:46:76:b5:0d:c8:d7:22:
                    57:05:05:bb:a0:f3:60:e9:63:e9:93:2f:0d:4e:b8:
                    0e:ad:0a:00:0a:4d:6c:6d:59:db:fd:e1:f6:6e:bb:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A4:A6:86:C6:E3:16:3E:6E:F9:5E:75:94:2A:AA:FC:B5:CA:8F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/d16b3524-746d-3959-9d15-de7e2f045df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d2:01:49:1e:bc:43:7e:24:f1:73:44:1c:b7:e2:b8:03:35:
         a6:f7:c2:20:1d:7e:ed:c3:1f:b7:88:d5:56:31:7c:84:20:e2:
         8f:e8:40:d0:4f:92:c5:44:89:de:2f:df:59:d3:9c:ce:b2:0b:
         09:27:cd:87:c0:1a:5d:38:34:eb:66:b1:98:e5:41:d5:7c:22:
         0d:38:bd:95:2d:24:29:ab:6b:79:94:f4:81:28:f2:45:0d:91:
         6e:01:d2:9c:4c:31:96:d5:3c:18:89:92:8e:ae:46:2f:64:2a:
         3a:5d:6b:0d:63:9b:19:ec:a1:74:af:ee:cc:ef:3b:1a:4e:6b:
         c0:58:13:52:48:ab:fb:fe:58:33:8a:38:ee:85:c6:d6:e7:15:
         47:8f:34:38:0e:bf:50:fe:3f:a8:c8:80:f2:99:af:84:ef:24:
         7d:69:7c:45:de:bb:7e:d7:54:36:87:d2:c9:62:fa:a0:6d:4e:
         35:47:00:bd:05:b3:96:e4:a7:46:c3:53:70:8c:08:dd:2b:d2:
         cf:a8:35:91:92:db:9d:b5:f4:99:64:04:b8:5d:74:4d:71:f8:
         d8:fd:76:4c:b7:b6:7f:87:1e:af:cd:93:e3:a7:5d:1c:4e:6e:
         9e:23:39:cf:84:93:89:83:2e:b1:d7:59:9d:9a:f0:91:52:9c:
         f5:c6:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:00:11 2025 by rpki-client