Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa
File:                     0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa (raw, json)
Hash identifier:          P3o2eLqbqtXb3EeUxkYonedG4UL/FqGE9QjLv920IJA=
Subject key identifier:   E6:5A:1B:69:CC:5F:3A:47:76:8E:27:7A:2B:41:3D:31:64:74:0A:62
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584908815CA2FD997118220174C0
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     0
IP address blocks:        206.53.174.0/24 maxlen: 24
                          2606:a980:0:7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:5c:a2:fd:99:71:18:22:01:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=52666fcc-6e2f-4659-84fb-217256ddd54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:92:79:b7:40:6f:a8:6a:f4:9b:68:bb:a2:
                    74:67:e3:50:a3:41:46:9b:3a:e8:60:ca:14:2b:13:
                    d4:ed:6f:85:c7:85:ac:08:16:08:10:cf:86:db:b0:
                    83:63:55:f9:a9:c6:e0:e6:e8:15:65:e3:dc:2a:65:
                    f2:9a:b1:28:e1:a6:e1:0a:94:30:89:61:48:8a:f8:
                    d0:49:cb:b0:ed:5a:c4:03:ce:aa:2f:ae:7d:2b:2e:
                    5e:22:03:0e:ab:e4:91:07:a1:3e:bb:19:86:41:d3:
                    5e:23:cc:40:3e:5b:db:e2:43:a2:94:ee:39:b1:5f:
                    2c:d1:7c:32:02:b2:91:f9:c5:24:be:86:ba:c9:df:
                    ff:7d:15:18:82:73:32:4a:7d:84:4d:66:e4:09:fc:
                    68:b3:d5:c7:71:f1:09:a4:4c:01:36:6b:57:d5:15:
                    7b:47:a4:9a:ee:e6:3e:26:fe:49:36:e6:92:02:88:
                    cf:61:08:d8:f6:bf:ba:91:6b:50:7b:93:ab:97:aa:
                    dd:74:7d:50:4c:1d:db:ce:15:51:d3:b9:0c:a8:ed:
                    36:45:75:c3:cf:a2:2d:ad:14:30:3a:33:17:41:bc:
                    f1:99:3d:64:78:18:f2:e7:ec:3d:8e:c2:4d:d9:ac:
                    25:a2:cc:81:eb:b6:db:0b:02:ff:80:7d:35:a1:96:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5A:1B:69:CC:5F:3A:47:76:8E:27:7A:2B:41:3D:31:64:74:0A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.174.0/24
                IPv6:
                  2606:a980:0:7::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:fd:cb:c6:8c:30:17:3b:a8:24:2a:dd:07:cc:f7:cd:80:ef:
         4a:84:ef:7a:cd:bf:59:6d:24:8a:94:88:a1:b6:60:5b:79:29:
         34:67:47:a2:a9:5e:2e:00:cd:68:1a:8b:8f:44:a5:0c:c8:ea:
         49:63:e4:0f:69:80:fc:0b:ad:6f:00:06:93:6c:bc:c7:96:ad:
         7f:14:89:6e:55:53:32:69:35:2c:c7:4b:01:54:f0:e0:60:ae:
         08:48:ba:be:35:fb:a8:fa:12:88:14:49:76:36:2a:87:ed:26:
         44:41:9f:9c:75:a0:46:a9:a9:b9:26:2d:98:07:5b:58:42:e6:
         a1:e7:ff:61:4e:8e:3f:b7:5f:fe:5c:d9:e2:33:2e:df:c1:44:
         17:a4:6a:73:b4:d2:ce:e1:04:90:7f:aa:fb:5f:ba:6e:a6:3d:
         b6:1f:76:a3:03:47:3a:8f:dd:15:f7:55:50:ed:be:06:87:3b:
         bb:20:b8:3b:43:61:3f:3a:e3:e9:0e:74:90:eb:a3:ee:75:bd:
         1a:98:fd:6e:c0:d6:de:67:1c:09:47:06:fb:30:bf:73:e1:f4:
         38:a1:a2:6c:2d:96:64:55:00:8d:0e:1b:62:9b:32:2d:b7:86:
         e6:66:00:cc:92:3b:28:18:b3:0f:29:8c:ef:57:1c:02:81:04:
         b1:f9:d8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:26 2025 by rpki-client