Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/6cd920cc-4206-3245-923d-6f329d510c78.roa
File:                     6cd920cc-4206-3245-923d-6f329d510c78.roa (raw, json)
Hash identifier:          XbWOKqPvdCGs1+qxJrqBvYPns1Hx2jCRXKMolfeVsYU=
Subject key identifier:   3D:79:6E:B8:52:90:CA:83:42:70:7B:F5:52:A3:C0:31:9C:51:72:98
Certificate issuer:       /CN=0bbd7116-cabc-49d5-9974-d2b462e020b9
Certificate serial:       010D0C9F432858492184003E689E9B117C287B20
Authority key identifier: B4:E1:76:78:98:DF:2D:20:43:6D:AA:88:45:BE:C7:A5:17:F4:83:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/6cd920cc-4206-3245-923d-6f329d510c78.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     400283
IP address blocks:        207.90.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/0bbd7116-cabc-49d5-9974-d2b462e020b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/0bbd7116-cabc-49d5-9974-d2b462e020b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:00:3e:68:9e:9b:11:7c:28:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbd7116-cabc-49d5-9974-d2b462e020b9
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ab1e9dd6-0c1e-4d8f-a276-324575da06cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:d7:b1:10:6c:e6:8d:b0:15:23:42:d9:17:
                    82:c3:ea:2a:39:21:d5:76:f7:c3:95:ec:00:63:bb:
                    26:c9:16:f7:56:26:ad:d6:47:d2:77:1a:52:0a:06:
                    bc:54:ca:87:8d:0c:f0:c0:92:d7:7c:c8:72:ff:38:
                    61:a9:92:88:69:3c:2a:b1:45:a8:b2:5a:cf:4a:ed:
                    2e:5e:8d:a6:0e:60:ae:9c:ce:5f:e8:14:69:3f:5f:
                    d2:f0:98:06:1d:c0:48:39:1d:73:8c:08:1e:e8:40:
                    c4:a2:88:a8:05:4a:46:24:e1:1e:5e:4f:b1:e7:bf:
                    39:ad:17:69:26:88:1c:67:a6:cd:65:1b:93:3e:19:
                    6a:92:23:22:c2:8c:ec:54:b2:4b:23:8e:29:80:00:
                    57:c4:9e:27:d4:42:d2:48:31:2b:b2:59:8c:bf:da:
                    15:fa:70:02:05:00:12:f9:8a:51:83:9d:0f:1f:f4:
                    e4:1d:de:f2:6c:1d:09:4b:a7:d0:ec:84:12:5b:3c:
                    a5:da:4b:f7:8d:2f:78:a4:7c:aa:11:3e:8f:0a:dd:
                    59:6d:99:ec:68:90:7c:c4:91:09:97:f6:5e:a5:0f:
                    54:a7:c6:6c:93:1a:28:a6:6f:97:91:b7:17:d3:4a:
                    5c:8d:db:8b:66:00:11:af:02:ce:4e:78:03:64:28:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:79:6E:B8:52:90:CA:83:42:70:7B:F5:52:A3:C0:31:9C:51:72:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/6cd920cc-4206-3245-923d-6f329d510c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/0bbd7116-cabc-49d5-9974-d2b462e020b9.crl

            X509v3 Authority Key Identifier:
                keyid:B4:E1:76:78:98:DF:2D:20:43:6D:AA:88:45:BE:C7:A5:17:F4:83:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:6d:71:50:0f:0f:f1:9c:86:51:3c:50:32:f6:22:27:a1:5e:
         52:02:71:91:8a:a9:c6:1e:6c:2b:42:c3:84:d2:03:29:47:39:
         6c:3b:e1:d8:f3:0e:42:a1:bd:40:5e:b2:7d:35:30:85:6c:f2:
         d8:52:4b:b8:60:23:db:3f:23:98:94:6e:5b:46:8a:98:fa:35:
         15:5d:a8:4d:97:6a:34:07:51:d3:2c:e0:d0:71:37:29:b9:94:
         a6:6e:c3:61:15:67:ef:4e:f9:08:10:17:cc:1f:42:91:c6:a3:
         cb:32:c4:93:a2:a6:95:eb:71:5f:73:33:8f:02:b0:dc:5f:a9:
         38:0f:0d:1d:bd:90:53:13:14:3b:bd:dd:64:ec:bb:33:03:89:
         40:8b:8b:cd:c6:42:ef:6a:ef:e3:68:6b:f5:ed:1a:af:ea:b3:
         44:89:4e:4a:51:0f:3c:f0:f6:78:a6:dd:bf:74:1d:2e:5e:05:
         72:51:60:e5:b9:c8:c5:7b:4b:78:ac:24:74:28:48:7e:ca:52:
         57:4a:1f:81:d2:e8:86:f2:21:60:63:81:2a:16:c5:7e:f2:7c:
         70:a4:1e:5d:32:14:bb:d7:64:21:e8:07:a7:f3:9a:79:9d:c1:
         da:9a:c1:34:31:a0:57:56:45:84:f0:d9:be:f8:99:fa:b8:41:
         11:df:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:46 2025 by rpki-client