Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e0d53f3b-b94c-3033-9d1e-9ff78e5fb0f7.roa
File:                     e0d53f3b-b94c-3033-9d1e-9ff78e5fb0f7.roa (raw, json)
Hash identifier:          YNiPlrf7uDFjORWgCE01g8+vOv/31CJFzgVgopfrDys=
Subject key identifier:   A1:4F:F9:01:86:1C:A4:A6:27:28:46:11:B7:7A:D4:B1:87:8E:EC:E8
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285848F22C5FBA7C34C59ACC6D1A60
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e0d53f3b-b94c-3033-9d1e-9ff78e5fb0f7.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     8551
IP address blocks:        206.82.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:5f:ba:7c:34:c5:9a:cc:6d:1a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=dfc2a247-c26a-4821-a39c-13febc308c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1a:64:81:58:75:49:32:9a:13:d0:b1:bb:03:
                    ca:f0:36:a8:57:39:b5:75:7f:f9:34:b2:29:b6:cf:
                    9b:7a:91:65:50:b9:15:46:05:99:84:bc:61:3f:b8:
                    99:2c:01:ea:cf:ae:ea:17:8c:ad:40:35:b9:b5:46:
                    94:03:fa:7f:9c:3b:69:43:d4:45:0c:3b:f3:db:13:
                    cf:72:a5:81:95:88:b6:16:28:4d:f1:90:c9:bb:e2:
                    f2:48:93:dd:ec:f4:e4:15:e2:ea:68:74:4c:b6:8f:
                    4a:ad:61:8c:05:81:51:71:1a:ce:f9:77:e1:c4:16:
                    4d:03:80:d9:d6:56:79:33:13:5d:ab:b6:f9:a6:0e:
                    e7:75:fe:ec:57:47:3d:08:b8:d6:35:e7:49:b1:01:
                    e7:5f:1a:82:ed:23:98:e9:1a:69:ab:4a:05:71:09:
                    46:ca:7a:8a:61:a0:04:3d:4c:f4:bf:5a:63:e4:ea:
                    4c:06:2b:a5:0f:bb:1c:a1:3e:94:76:37:08:44:00:
                    7d:cf:a0:ed:36:b9:fe:bd:b7:c0:35:00:21:de:34:
                    94:aa:5d:51:5f:5d:0b:8f:18:66:3c:90:91:f0:8b:
                    29:79:af:94:c7:6c:12:ef:1a:91:6f:37:21:d3:9e:
                    d3:f1:58:11:82:3a:82:10:13:ed:86:88:40:f4:14:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4F:F9:01:86:1C:A4:A6:27:28:46:11:B7:7A:D4:B1:87:8E:EC:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/e0d53f3b-b94c-3033-9d1e-9ff78e5fb0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:a5:91:8e:81:b1:db:ae:f8:0a:1c:31:96:26:4e:2b:e2:
         68:2e:30:00:58:cd:eb:f4:ab:a9:61:40:28:83:62:e1:09:ec:
         86:ca:9c:2d:10:e6:f9:39:3b:83:01:4e:d3:c6:1b:a6:0b:e7:
         42:70:80:9a:31:f6:4c:a3:e6:76:56:00:d9:b8:7a:cd:3a:1b:
         0f:c2:e7:12:95:7f:1e:6a:60:ed:d7:07:64:f6:40:1e:32:3f:
         fc:d5:32:68:ec:a0:76:63:d0:49:c3:be:4a:af:11:bb:2f:bb:
         e4:de:55:cd:4d:b5:45:e9:28:80:93:9f:29:ed:3d:5d:ee:c5:
         e7:32:2c:e1:54:68:04:8b:64:ef:78:f3:c1:94:f8:fe:80:62:
         54:a3:1b:17:c8:00:eb:6e:e9:46:81:9f:9d:8e:1c:bc:57:28:
         5d:15:c6:94:7b:c4:87:b1:30:e1:41:db:6f:08:63:4f:c4:ed:
         17:d8:de:a3:f7:00:8c:fa:f9:91:45:e4:16:12:04:7d:98:0f:
         1a:4b:57:c7:0c:53:e4:91:01:21:a9:8d:9c:a0:93:74:08:50:
         24:2a:2f:94:33:a2:0c:85:c4:fa:b2:2a:fb:5c:74:38:27:1f:
         59:14:29:ea:86:30:f9:77:ac:ad:55:fc:80:85:23:34:2e:d1:
         aa:41:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:04:11 2025 by rpki-client