Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa
File:                     3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa (raw, json)
Hash identifier:          GdlefSqMeKylAVoOAyyNwLCk4CTdZqFAtW5wGO4n94I=
Subject key identifier:   D0:53:4A:F0:C9:26:34:85:FD:28:BF:7E:94:5E:82:54:67:B7:9B:CE
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848C2B64C9E7DB73649E8862500
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     11404
IP address blocks:        206.192.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:4c:9e:7d:b7:36:49:e8:86:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=03eb29bb-87bc-41f0-83ce-ac83b4145d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:24:23:be:09:7b:4b:70:d2:b1:1d:7a:d0:02:
                    d5:f4:08:48:4d:ff:6b:1c:7b:9d:46:a2:09:21:ec:
                    18:04:fd:37:7c:d4:51:d8:c2:1b:15:43:31:30:2a:
                    fc:d1:f0:f9:6c:6a:d9:19:19:85:9f:ed:d6:d3:52:
                    a7:10:ec:e2:98:de:34:8a:e1:ea:3a:bc:e1:c0:d0:
                    90:0c:00:fa:e6:de:90:92:9e:e3:ac:0d:69:b7:e3:
                    a7:fc:d1:51:9c:a8:bc:85:2c:88:b3:7a:84:ad:68:
                    38:49:a4:6f:3d:27:0e:f5:85:1f:69:d3:0c:a4:af:
                    a9:c3:b9:37:31:82:6b:29:1b:49:6f:6b:2a:c8:72:
                    40:0b:16:47:86:c5:9a:54:ce:bc:23:22:6e:0e:2f:
                    da:6e:db:0e:27:ca:ee:ee:a5:b0:3b:87:e2:a4:d0:
                    57:45:13:94:8f:91:71:68:55:67:d8:46:4e:5d:0d:
                    8b:20:55:a6:bc:75:92:c3:ae:85:f2:e5:39:05:8e:
                    9b:69:79:5f:dd:cf:a9:59:c2:e6:ea:94:63:e7:fa:
                    1d:db:b9:bd:90:7e:74:22:c1:7c:9b:14:5c:67:e9:
                    59:87:7b:9e:13:08:3b:9e:27:16:17:13:ba:7a:c4:
                    31:0a:64:04:89:47:95:40:00:e6:8a:0b:bd:c7:26:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:53:4A:F0:C9:26:34:85:FD:28:BF:7E:94:5E:82:54:67:B7:9B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:31:59:b5:8e:88:da:07:41:29:60:94:43:79:86:24:14:be:
         df:f4:a1:d2:6d:56:40:9f:8e:ee:a4:0d:bf:b5:d0:d4:21:5f:
         97:3d:be:49:3d:30:b5:b7:2b:05:47:53:cc:d6:1b:b7:cd:f3:
         69:88:52:f8:66:a2:1b:83:80:e8:70:8c:23:51:56:46:45:c7:
         d1:88:aa:ff:ea:be:9c:33:ec:29:0c:80:81:74:d9:6c:40:2b:
         5f:7e:cf:37:9e:5e:7c:2c:75:e6:7e:a0:39:68:d8:6f:b6:8e:
         b9:7c:86:8e:3d:c3:68:97:cc:25:35:cc:da:e6:2b:7f:fa:7c:
         5d:d5:07:74:2d:db:58:f2:c1:d8:92:f9:42:71:6a:85:7e:dd:
         ce:c9:2b:3a:10:85:82:a8:b3:9e:ec:85:b0:f2:a9:db:85:29:
         dd:f1:03:73:01:d3:1c:73:87:9c:17:f9:c3:01:66:8e:7d:1f:
         28:cf:4f:1f:d7:12:5a:b0:bd:5e:c7:46:08:31:a3:d5:a7:37:
         bb:43:86:8e:cd:7f:0f:4a:e1:ba:ee:0d:fb:69:25:c3:73:96:
         56:17:8e:e7:46:74:f7:30:92:3c:03:de:5a:39:c9:13:ab:9c:
         49:d7:75:15:d8:ca:bd:62:45:38:ca:96:e9:43:c5:46:ff:d1:
         09:3d:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:33 2025 by rpki-client