Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8673519a-c377-3385-85f0-f4a5b154a046.roa
File:                     8673519a-c377-3385-85f0-f4a5b154a046.roa (raw, json)
Hash identifier:          o2MtN90KQSwfB87Yp3nCTMrX+pPN8UF3okIKcO2/Lj0=
Subject key identifier:   51:5B:A4:E7:35:D1:4C:02:A1:43:4C:96:7A:53:50:46:8D:FC:DD:AE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848424AD55D88EA985D536AD000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8673519a-c377-3385-85f0-f4a5b154a046.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     64267
IP address blocks:        206.206.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d5:5d:88:ea:98:5d:53:6a:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=9f87c3a9-52a7-4a11-b0b5-0660228bfe68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:a0:f1:19:6a:e1:67:4a:b4:22:b6:cc:bf:
                    43:f6:99:c5:16:15:8c:77:2b:4e:be:ef:bb:12:7a:
                    56:fd:8e:42:1f:45:87:86:71:8b:7f:df:a2:64:7b:
                    45:33:ff:96:21:f0:70:ec:cc:fc:a8:54:c2:40:51:
                    4e:1b:26:91:37:10:5b:7e:40:2d:b3:9b:40:46:ed:
                    53:a6:d1:c6:de:ba:ff:a5:21:91:a6:b2:ce:be:cc:
                    cb:fe:8e:61:c5:2b:28:c4:3b:0b:b6:68:bb:1a:b3:
                    2f:25:a3:e0:36:ff:86:85:fa:3a:c6:f0:d6:4c:ad:
                    12:39:a0:4b:32:39:c1:b0:2a:1a:77:20:47:37:7c:
                    9c:7e:45:34:39:d6:cb:5d:fc:bb:35:f5:34:fb:8e:
                    c5:2a:67:c3:7f:24:9d:6b:6d:ed:db:d6:d1:c0:ea:
                    15:bc:a7:8c:73:cc:84:aa:06:d5:5b:0d:ce:f4:f1:
                    8b:07:98:59:1d:e7:7b:0e:c0:43:40:90:12:20:ae:
                    a2:b1:68:9b:23:35:e7:43:3c:13:19:5c:4f:bb:b7:
                    20:89:5a:09:16:3d:5f:6d:ac:36:1b:91:3d:99:eb:
                    b9:04:b0:b1:c1:c7:a3:8d:86:59:e5:34:5a:fc:b4:
                    94:b4:25:70:b8:de:d3:cd:0c:5c:3b:36:26:ac:cf:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5B:A4:E7:35:D1:4C:02:A1:43:4C:96:7A:53:50:46:8D:FC:DD:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8673519a-c377-3385-85f0-f4a5b154a046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:56:da:4d:d4:07:8c:56:a7:5a:aa:ea:d9:3b:87:5b:3b:b1:
         a5:f1:b0:c8:b2:28:50:c7:14:5a:46:96:dd:28:0c:e3:5d:a3:
         b2:48:e7:ce:e7:1b:e9:4e:3f:42:0b:83:f6:8f:60:27:5e:d6:
         c2:e0:ae:7a:08:b5:e9:b3:9b:58:bb:e7:69:dd:e2:7e:74:e9:
         a2:6a:8a:61:47:83:a7:33:21:c7:7e:09:4c:14:31:bf:aa:4a:
         5e:50:5a:5c:c2:6b:bd:46:65:db:75:3d:f5:db:b9:25:b9:f1:
         60:fb:33:8f:71:ba:ac:a2:2e:d4:4a:90:3f:a1:14:3c:85:15:
         93:53:b5:d8:de:58:07:f4:5f:c7:94:dd:88:04:fb:35:72:46:
         77:5b:39:b1:67:15:69:11:75:9b:ff:08:1a:87:ed:2d:3e:88:
         2f:fd:73:6b:a8:44:00:1f:cb:f1:84:d6:a6:97:1f:fc:87:35:
         4b:31:44:80:e2:d9:ed:d8:59:8b:ca:db:fb:47:71:c9:23:7c:
         e3:96:a4:c2:ed:db:5c:c6:27:85:f0:98:ba:78:96:75:27:d0:
         de:02:1e:99:0a:ee:0a:b7:ce:4f:16:03:84:9e:65:cf:fe:a9:
         c0:14:a0:e1:b6:a3:fe:74:a3:1c:3a:1c:ec:c6:1f:9b:d3:cd:
         46:c4:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:18 2025 by rpki-client