Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b030074f-d5d6-32ed-98c1-cf2c636df036.roa
File:                     b030074f-d5d6-32ed-98c1-cf2c636df036.roa (raw, json)
Hash identifier:          0Myc0+xmfxioOu6aB9NR/MYU4fwHkvd9kCBotOZFuao=
Subject key identifier:   94:64:0E:C3:DE:E6:87:C5:D8:84:2F:BC:7E:30:53:6E:CA:67:EB:86
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F43285848A400B9632E946D10EFDDFA00
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b030074f-d5d6-32ed-98c1-cf2c636df036.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     19437
IP address blocks:        206.162.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:b9:63:2e:94:6d:10:ef:dd:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=ba1eae6a-f6a8-46c8-80fe-72e3e0de5167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:78:09:a0:4c:30:e3:ff:95:1a:8b:3a:46:da:
                    fb:83:e4:a4:72:7e:08:12:ed:95:ba:9e:e0:98:15:
                    ba:ea:eb:b3:57:5d:fb:18:3a:00:f4:d2:2a:d6:80:
                    79:b3:a2:e0:4a:f4:95:74:24:26:3d:c4:3e:f9:33:
                    18:29:13:58:b9:7f:c6:18:30:f9:1b:a3:90:cc:f7:
                    35:8e:30:cb:bc:c6:8a:2d:46:ce:d8:3e:16:ea:35:
                    64:c7:d8:ad:76:f0:60:76:0d:e1:42:02:67:ff:6f:
                    73:75:b3:2e:50:04:5d:bb:8e:e3:b6:81:08:7e:c1:
                    30:d8:dd:b1:45:a0:59:b7:95:06:39:dc:dd:2c:c7:
                    27:d3:7d:79:c8:8e:dc:50:ce:96:2e:53:9e:22:02:
                    10:df:1a:f5:72:1e:ad:fb:dc:75:26:e8:5d:f0:fc:
                    d8:9b:49:b3:17:cb:3f:5d:ae:35:6e:af:b0:07:78:
                    5a:b6:bc:be:2f:9c:cd:0f:12:36:90:2d:f5:04:6e:
                    3b:1f:ee:7b:35:c0:15:62:16:be:c8:9e:31:5e:68:
                    45:88:d4:81:c8:84:41:4f:66:9d:30:bb:a9:6b:04:
                    fc:f4:00:ac:15:48:b7:d1:22:b7:48:1f:9b:bc:1a:
                    63:6f:82:ac:1e:37:63:21:3b:30:af:6a:0c:0a:40:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:64:0E:C3:DE:E6:87:C5:D8:84:2F:BC:7E:30:53:6E:CA:67:EB:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b030074f-d5d6-32ed-98c1-cf2c636df036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8b:7b:6f:b7:e4:48:89:03:cf:07:1e:be:87:ee:31:38:dc:
         32:a8:a1:ef:7d:37:ab:90:b8:e5:8d:34:b5:08:e4:d7:f4:0d:
         13:f3:88:a3:52:87:e0:ab:21:d7:05:4a:a2:ef:77:72:b5:04:
         af:21:3b:93:00:8e:f9:10:d1:c7:b2:a5:e6:b2:1e:bd:bb:c8:
         73:cd:a0:82:58:82:15:e2:fe:2c:85:66:39:eb:6b:fa:67:3f:
         32:5e:59:bc:d3:69:2f:ef:04:45:5f:87:fc:17:f2:85:be:55:
         0c:38:3d:32:98:0d:7b:2c:de:9a:4f:83:32:b8:78:3c:2d:70:
         26:1a:ae:e6:28:50:6d:5b:bd:6a:02:83:a9:64:26:05:8b:1b:
         a4:8c:34:2e:74:d9:dc:1c:35:af:34:63:39:ff:8f:2a:6f:45:
         62:9d:c5:cb:fb:ff:51:b6:19:7e:8e:62:9b:45:8f:d0:8f:a7:
         c2:59:36:62:84:2f:b5:0f:45:56:30:ac:73:af:be:13:d8:f7:
         a5:9c:2a:68:ee:50:3f:7f:9a:32:1c:31:74:3e:57:09:a9:56:
         e6:26:07:ff:91:eb:3e:e8:7f:ef:67:7d:cf:e1:93:68:c0:97:
         44:4a:6f:a4:ce:58:76:d4:ba:a4:d1:c9:91:37:c8:8b:7b:6a:
         7e:c9:01:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:03 2025 by rpki-client