Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ac463d5a-9df4-3993-b50e-a5d56e365165.roa
File:                     ac463d5a-9df4-3993-b50e-a5d56e365165.roa (raw, json)
Hash identifier:          Ms7zJKpCYI5Wxxs5eoUqMEwGApmIk4Zr72BTlcokHvw=
Subject key identifier:   42:F5:9B:A9:DD:44:A3:82:A9:30:E0:18:CC:08:FB:1D:28:2D:0C:9C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584930DE61A198B0CBCC8D654180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ac463d5a-9df4-3993-b50e-a5d56e365165.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     13923
IP address blocks:        208.181.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:61:a1:98:b0:cb:cc:8d:65:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=8fe6ee7f-7664-4b8a-b54c-be7ea6ccadca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:d9:fa:71:62:34:9e:7e:56:d8:fb:9e:cb:
                    de:76:75:49:23:25:e2:a3:52:16:d9:b0:a5:80:11:
                    85:6d:e2:78:2b:1e:e4:b3:2a:ce:71:bc:ef:a7:19:
                    92:a9:3b:6b:62:58:27:d1:e9:5c:e5:da:e0:84:18:
                    37:1c:91:bc:f5:78:f9:03:75:1e:8e:57:59:62:9d:
                    ba:3c:3b:9e:6e:04:75:0b:bf:d2:70:c1:f0:7b:1c:
                    36:f1:71:7e:01:d4:e7:37:d1:92:24:a4:4e:57:b6:
                    3f:51:69:00:3e:6f:4d:bc:78:26:59:1b:79:6b:2e:
                    1e:57:dd:95:7f:fe:c1:19:f3:08:53:75:b0:6c:db:
                    7c:12:5b:09:89:e5:a0:c5:33:14:89:52:5b:21:1f:
                    ac:1a:72:06:af:f6:35:47:fa:3e:79:02:d5:b4:b3:
                    71:4f:7c:0c:a5:b3:c7:be:e8:58:93:29:4d:9d:3f:
                    a9:37:42:25:b1:5a:c8:72:ef:e3:90:85:ef:25:4e:
                    5f:e9:dd:14:57:45:b5:bf:44:63:3f:0d:1f:c8:c6:
                    ca:d5:46:b0:13:21:36:a7:fc:b4:03:0e:29:f4:c8:
                    4c:cb:98:e5:2d:61:bc:3f:53:f5:92:b8:2a:0b:d2:
                    f4:4f:cf:d4:e8:cb:fc:ad:00:5c:a5:8d:12:ec:e6:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F5:9B:A9:DD:44:A3:82:A9:30:E0:18:CC:08:FB:1D:28:2D:0C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ac463d5a-9df4-3993-b50e-a5d56e365165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e0:3f:b6:fd:39:48:ee:6c:e3:b0:16:21:bc:39:85:c2:b9:
         27:96:94:b6:84:d3:75:78:a4:be:ee:0e:7a:37:8c:67:39:ea:
         73:26:3f:22:ee:68:a2:cd:bd:ad:52:15:87:e8:90:4c:1c:b3:
         02:df:56:50:7e:2d:21:ac:5d:e1:3a:dd:c1:4d:05:37:4d:86:
         95:10:39:67:4b:6d:b2:24:42:2f:f4:3b:a5:b5:69:be:21:61:
         30:58:88:d6:09:1c:ee:a6:d2:64:91:ff:b0:7b:b0:49:2a:8e:
         fa:bd:0b:1e:34:04:37:ff:02:54:9e:c5:36:a2:98:de:22:71:
         0f:9d:a8:c1:ea:df:b4:92:9f:59:2c:d2:5b:64:f0:e5:f2:04:
         21:11:3f:4d:a7:24:90:c3:19:46:b8:b7:c7:c4:89:67:a1:e2:
         69:8f:5f:e1:6a:d0:50:f7:f1:d9:4c:57:fe:be:fd:ef:b8:40:
         65:09:dc:d2:b1:12:91:57:e3:6a:a0:74:de:b8:f9:99:1c:6e:
         08:8d:4f:fe:c9:f1:f2:71:67:a1:e3:a7:e6:57:92:ba:89:a1:
         1e:bd:74:b5:ae:6d:f3:8e:c5:a9:48:8a:eb:d6:13:bd:aa:a3:
         c5:bc:f7:d1:52:ba:10:6f:1c:63:7c:49:fd:9f:17:17:2b:26:
         78:17:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:57:20 2025 by rpki-client