Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa
File:                     025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa (raw, json)
Hash identifier:          tY+5SQasm5nqeqgWWHm4vo0IbD6wP7TNkvPDYflTtlA=
Subject key identifier:   7F:2B:AE:A5:FB:19:B5:01:27:A7:F5:2E:27:62:C9:D0:11:47:8F:D2
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285848FD56C127563FB1CEA12E1760
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     53508
IP address blocks:        206.255.0.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c1:27:56:3f:b1:ce:a1:2e:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=3bcd76d4-42d4-4b14-8074-dbb5e9aabbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:c1:c9:e5:be:ef:f7:f2:12:af:6c:28:a9:
                    e4:d4:aa:7e:b9:da:35:94:81:11:23:76:ab:17:0c:
                    6b:51:9f:6a:86:76:cb:43:17:53:29:ef:83:e2:c4:
                    55:22:1e:20:05:51:22:a6:9e:97:3f:64:4a:23:1b:
                    53:11:c0:de:54:a1:c7:42:12:68:e4:3b:7b:8e:57:
                    f4:03:d5:bb:8d:aa:f5:00:fc:92:d4:13:fb:64:c0:
                    8b:e1:c5:48:fd:b2:a6:fe:f7:38:51:11:f5:5c:7d:
                    72:9d:95:3e:a6:2f:a4:69:ab:26:2a:65:a5:88:19:
                    28:0d:f6:f3:8b:13:9c:12:ee:70:4c:1d:d2:83:7e:
                    70:06:84:f2:23:77:29:7c:80:0f:3c:de:95:ae:27:
                    18:e3:fd:f7:cf:0f:73:11:93:04:f7:8d:e2:0d:77:
                    8e:23:c8:3d:60:ee:aa:75:db:b1:15:51:d7:be:bc:
                    d7:13:af:34:88:50:f2:d8:71:12:3d:0d:4c:15:74:
                    de:88:33:5e:7e:f8:34:bb:55:e6:dc:d3:94:9b:63:
                    25:86:a6:68:34:d5:c5:37:0a:2f:e5:a2:22:a3:0a:
                    5a:40:11:d5:6b:c4:2e:55:d9:a1:8a:ea:55:cd:d8:
                    d3:ae:88:fa:17:1c:a4:ab:65:60:11:ad:16:57:ec:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2B:AE:A5:FB:19:B5:01:27:A7:F5:2E:27:62:C9:D0:11:47:8F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/025c2ea9-fb88-33f7-8bb8-88a3dba873d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.255.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0f:0f:40:ae:52:8c:cb:b2:b9:f8:f5:8d:3f:22:38:2d:d1:
         8b:0c:d6:17:01:18:d2:fe:61:9b:cb:53:37:74:bd:67:c1:b3:
         e7:e1:b1:2a:6f:75:44:12:63:7b:d5:15:91:e7:a6:46:ea:15:
         be:b9:88:fa:e5:18:93:34:5b:23:91:31:f7:e2:41:e4:dd:ef:
         02:a4:79:78:f3:d4:67:9b:cb:77:23:9c:48:22:fc:51:74:10:
         d3:f8:02:c8:78:67:40:50:fc:72:02:e2:93:22:91:1b:38:d2:
         b6:5b:40:8c:ad:92:86:44:2d:59:4d:3a:a5:c0:09:a4:fa:c3:
         91:d6:02:ba:5b:20:63:64:31:2d:53:48:21:21:14:eb:a1:52:
         30:67:41:37:6b:f2:5e:89:8e:9f:86:86:f5:56:9f:4c:51:d9:
         2b:cc:3b:56:bc:f5:5d:dc:4d:4e:3a:5e:8e:91:b9:b2:42:87:
         94:7c:e3:6e:51:79:1c:66:3e:e4:9f:e1:5f:0b:96:2a:7f:e1:
         44:eb:4c:51:bb:a3:25:ee:36:c1:a6:e6:7d:bd:b3:f6:5b:5b:
         b8:81:ab:20:17:c3:eb:92:e9:1a:06:d4:07:b8:0c:13:9b:a1:
         b8:91:39:37:aa:98:b8:bf:38:48:82:62:73:fd:16:94:74:4b:
         26:37:4d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:41:32 2025 by rpki-client