Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5523d013-b446-3ac9-bfe3-88fe580001ed.roa
File:                     5523d013-b446-3ac9-bfe3-88fe580001ed.roa (raw, json)
Hash identifier:          fM9lFr1AYKWSiVJzmkw2VhrQpt8mTibsmEBKIseK0es=
Subject key identifier:   AD:D9:F2:ED:B6:39:1A:09:F9:C3:13:05:38:09:75:18:E0:0E:93:6C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858491D716FDEB8896D71AE4D05E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5523d013-b446-3ac9-bfe3-88fe580001ed.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     214053
IP address blocks:        206.206.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:6f:de:b8:89:6d:71:ae:4d:05:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=9987bdd7-f6b8-4b06-900e-f5f58aa26d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:58:e0:20:8a:9f:c6:45:d1:d3:58:05:56:
                    21:cf:2e:22:bb:96:37:79:33:0a:19:a7:96:44:f4:
                    a6:ae:13:38:b2:0c:99:34:12:14:ac:15:f6:61:6b:
                    53:c5:3f:66:79:01:2b:c8:09:39:74:5d:7c:86:06:
                    57:21:0f:0f:a9:4e:c7:b3:ec:fe:37:12:8d:35:5b:
                    91:1c:40:8b:e7:2c:35:cd:8a:c4:79:ca:7d:25:49:
                    6b:17:fd:25:84:e0:8b:c5:45:f9:11:00:fc:d4:e6:
                    85:25:1b:b2:40:b1:4f:ab:f0:d8:c8:5d:09:77:e6:
                    df:cd:97:e4:7f:2a:0a:0f:94:9f:e6:5f:df:ac:f5:
                    1b:7b:90:f7:69:b7:f8:7c:aa:bc:f7:da:5d:ea:6c:
                    39:c8:a2:1f:3c:3b:34:b6:e8:c0:18:5a:8d:42:4a:
                    82:5c:e6:69:84:2c:20:91:11:f8:5f:28:72:52:33:
                    61:fd:0d:07:12:85:e1:40:98:5f:c5:16:da:9a:28:
                    b4:c6:f4:93:d6:8a:8b:df:ad:c6:e4:07:b8:e8:86:
                    24:d5:6f:96:2b:2a:6a:cd:6f:20:9b:62:da:c1:9b:
                    0f:9d:54:3d:d5:b6:e6:76:7f:3e:52:73:71:1e:94:
                    6b:3f:48:1f:09:b0:88:6a:7c:f4:ec:54:3c:50:3b:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D9:F2:ED:B6:39:1A:09:F9:C3:13:05:38:09:75:18:E0:0E:93:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5523d013-b446-3ac9-bfe3-88fe580001ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3d:12:2f:fd:ef:76:ce:e7:4c:78:e6:2b:50:8b:4a:f7:03:
         57:fb:d2:63:d8:ba:d6:a7:d7:1b:11:ba:18:68:31:51:bb:86:
         56:dc:e9:0d:6b:9f:4e:96:3b:55:e9:c6:6c:5f:13:67:37:e3:
         2c:a4:5a:c5:85:11:d2:50:ab:db:d6:83:08:37:50:73:f6:bc:
         ca:e2:74:b2:f9:47:25:74:96:07:5f:57:7e:50:8f:cf:c1:0d:
         43:26:1b:c9:df:86:fe:dc:39:7f:56:99:ef:42:92:a0:6e:92:
         05:d8:d0:a0:ed:14:85:d8:bc:79:94:44:ab:d1:90:73:1d:77:
         db:68:d9:9a:53:56:d3:55:31:88:63:05:6f:de:86:1d:08:b6:
         a7:33:65:22:84:c2:8c:82:ce:22:81:bd:df:73:e6:1c:63:f2:
         b2:f0:8d:d0:27:be:f1:e7:00:53:94:bc:db:c9:ea:b9:f0:0f:
         56:90:b5:02:39:14:71:2e:1a:73:b4:d2:4c:01:23:f2:12:bb:
         45:39:da:58:b5:32:e9:85:20:db:98:da:81:af:cd:85:87:fb:
         a7:3a:ee:af:64:db:44:e4:16:5e:70:7d:a2:5f:9a:cd:14:c0:
         f0:c6:fc:85:28:10:b4:8f:22:ea:4b:6b:af:ae:b4:dd:f8:ca:
         45:7d:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:48:53 2025 by rpki-client