Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2e4dd3c9-9358-3b91-a5d5-0ed3c2967195.roa
File:                     2e4dd3c9-9358-3b91-a5d5-0ed3c2967195.roa (raw, json)
Hash identifier:          5ytkph4NrKh4AvhOjkoZvsXF8CTM73R5J3+xvXN3cQw=
Subject key identifier:   72:93:BA:1A:16:44:17:45:80:C3:6D:F7:E4:5C:12:40:AB:A3:20:B9
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F432858497ACB6FC7923EE019E20D3F00
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2e4dd3c9-9358-3b91-a5d5-0ed3c2967195.roa
Signing time:             Thu 10 Apr 2025 12:32:21 +0000
ROA not before:           Thu 10 Apr 2025 12:32:21 +0000
ROA not after:            Wed 09 Jul 2025 12:32:21 +0000
asID:                     14086
IP address blocks:        206.126.112.0/24 maxlen: 24
                          2620:1f:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:cb:6f:c7:92:3e:e0:19:e2:0d:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Apr 10 12:32:21 2025 GMT
            Not After : Jul  9 12:32:21 2025 GMT
        Subject: CN=42c55fc9-d876-4a43-9c27-d69a69e49d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:69:a9:02:9f:72:d4:39:69:cb:cc:8f:eb:54:
                    6b:f6:a2:2d:74:6c:ab:c5:88:76:17:62:bb:f9:9c:
                    da:a4:85:c8:10:60:9c:7d:45:71:ec:6a:9b:e6:b0:
                    00:de:ce:38:45:da:ff:53:f9:25:cb:94:15:88:5b:
                    e0:47:e5:05:2e:7c:3e:65:bb:2a:05:42:11:04:b8:
                    02:4d:d0:22:cb:c2:ae:a7:f1:7b:96:80:e6:8c:2a:
                    24:3c:27:4e:11:d5:ae:f9:72:51:2e:69:69:92:32:
                    27:dc:64:09:0a:84:ac:82:74:a9:2d:ff:64:6e:69:
                    82:fe:32:41:8d:b7:df:de:b1:02:a7:1a:7f:09:46:
                    51:04:c3:bf:e6:5c:7e:90:cb:51:25:2c:30:7d:34:
                    0c:da:5e:a9:ef:8e:6e:4a:47:4c:a6:a8:7d:2c:a1:
                    64:cf:7a:b8:a5:4a:54:78:f6:ff:38:e4:e5:63:09:
                    cd:52:3a:29:0b:bb:43:cb:99:0d:54:e3:c6:73:3c:
                    3f:06:5a:c2:37:2d:ed:05:7e:2c:a9:f6:6b:cf:e1:
                    61:0f:08:15:8f:21:88:11:b7:a7:3a:5e:b0:05:8c:
                    e6:4f:02:79:6b:e3:5d:c0:97:70:c7:c1:bb:5d:b4:
                    c7:92:dc:5f:82:3e:93:40:d7:f3:78:47:25:74:f1:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:93:BA:1A:16:44:17:45:80:C3:6D:F7:E4:5C:12:40:AB:A3:20:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2e4dd3c9-9358-3b91-a5d5-0ed3c2967195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.112.0/24
                IPv6:
                  2620:1f:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bd:1c:fd:45:f0:bc:6b:d6:81:9a:25:70:3f:5b:c5:b5:0b:
         50:86:48:35:f0:8c:45:63:bb:f9:df:70:89:9f:6a:85:6f:64:
         0f:79:ae:3f:d2:5a:47:87:62:7b:89:f3:f8:44:fa:81:78:c1:
         4a:b4:a8:a5:fb:83:c1:a3:eb:52:fa:8b:35:9d:a5:9e:02:8c:
         c5:6d:f2:22:4b:e0:5e:e6:00:e0:94:cc:6f:e0:2f:16:0f:7c:
         56:18:f2:29:f3:7a:27:3c:7c:18:36:a9:98:eb:97:e1:78:9f:
         7d:25:70:c7:c6:3f:60:68:a3:7d:13:09:ff:cc:07:05:23:05:
         9a:00:83:c1:fb:5e:72:d8:23:0c:ec:b5:33:43:c1:7c:e4:df:
         8b:80:a3:6e:cc:7c:b5:cb:5e:08:bd:be:8d:fe:0d:b5:cf:b2:
         a8:91:0e:b2:3d:12:19:da:6b:d5:ca:83:be:8b:c2:38:53:a0:
         6c:13:18:ed:5a:31:47:eb:e9:70:8e:88:5c:73:9c:47:b3:23:
         f7:fb:e0:5c:c7:c3:4a:ba:c5:4c:8e:71:58:92:ed:b8:94:00:
         1a:c3:45:6e:73:c6:ad:12:23:f3:f2:0d:e6:d2:ac:45:2b:44:
         94:b9:de:65:c3:f2:78:04:bf:66:f7:61:2a:32:d6:f7:d0:7b:
         b4:14:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:21:14 2025 by rpki-client