Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa
File:                     9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa (raw, json)
Hash identifier:          sY0epW3gWyFRj3WquY8fjduzdKnIu4StHO6jgkwDAR0=
Subject key identifier:   91:A9:2A:77:15:48:BB:A6:FE:22:0E:B8:B3:61:FC:8C:6A:03:A6:0C
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584908815C63994A4659AB2E6180
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     0
IP address blocks:        206.53.205.0/24 maxlen: 24
                          2606:a980:0:9::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:5c:63:99:4a:46:59:ab:2e:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=b7c6a173-8ad5-4dee-b097-7938b8862d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:e0:9c:55:e5:23:c1:2d:1e:09:af:5e:f2:
                    8e:ca:46:cc:ce:68:b6:91:6d:e4:e5:e5:ba:e1:46:
                    c3:c4:cd:c4:9d:51:e5:12:28:a0:65:c8:68:b9:a3:
                    cd:3d:ac:fa:62:1a:00:7f:d0:22:46:50:cc:14:f1:
                    36:b1:6b:de:9d:c0:75:86:09:e6:14:f0:ee:85:54:
                    18:4a:08:d7:1d:ca:b9:55:37:c0:d5:ca:65:3d:18:
                    eb:ff:60:22:6b:40:4b:e9:59:72:ea:7b:3c:2b:b1:
                    a6:9f:13:d3:91:de:d1:dc:05:ca:6b:56:92:ca:3b:
                    5b:dc:7e:a0:db:c2:9e:13:cd:40:ef:e1:48:d0:c3:
                    30:76:5f:da:2a:e4:9c:1b:be:9f:e6:7c:02:5e:0a:
                    cb:64:95:53:89:7f:e9:62:fc:64:1a:b0:9d:3a:05:
                    5f:2b:19:d1:7b:8a:d2:78:49:ce:0e:3c:48:41:4d:
                    41:cc:ab:87:be:5c:02:7c:c4:db:bb:e9:e2:db:ac:
                    0c:02:0c:df:fc:5c:44:8f:5b:cf:f3:af:37:cd:a1:
                    64:65:1d:96:c4:30:a0:98:70:7e:e9:e1:12:d6:95:
                    c6:29:c9:85:12:33:bd:e8:c6:ad:45:4d:88:80:b0:
                    5e:8f:7d:0f:7a:17:6e:52:12:dc:10:c7:82:f0:1d:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A9:2A:77:15:48:BB:A6:FE:22:0E:B8:B3:61:FC:8C:6A:03:A6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9004df9c-6b84-3388-9ab9-4d9b3a2bb131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.205.0/24
                IPv6:
                  2606:a980:0:9::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:62:a4:96:82:71:55:fb:dd:95:41:84:0d:5b:8b:18:9f:b0:
         13:2f:f6:c1:d8:ef:c1:21:4c:6c:9f:2c:b5:53:22:29:df:b7:
         20:e4:f4:49:af:29:d8:69:a3:23:17:58:a1:3b:e5:13:48:cf:
         2b:6d:e4:f7:df:2e:4d:71:78:23:27:a5:1b:74:1c:49:15:3f:
         41:09:4d:67:60:34:48:f1:af:23:d5:db:fd:65:3b:a9:1b:35:
         c5:73:63:a1:1a:07:48:9c:f6:d4:af:27:90:14:41:42:84:17:
         20:ba:32:6f:27:15:48:a8:76:a1:b7:88:38:24:d3:dc:db:7d:
         2f:47:29:a9:4a:11:4c:f3:39:f9:db:cc:fe:d7:08:df:e2:5d:
         8b:db:93:aa:a1:d5:8e:1c:22:94:1c:73:4f:d4:17:1e:5f:3c:
         5b:18:12:53:cc:a8:d8:da:54:b2:e9:6d:16:ac:b1:5f:be:2e:
         ee:85:5a:75:4f:6e:0e:17:af:8c:0a:53:9d:0a:30:8c:b9:f7:
         4a:8d:3a:00:a3:74:05:0f:28:63:7d:52:dd:23:92:e9:25:22:
         0e:7d:15:a8:96:01:d8:5a:e7:53:4c:89:43:66:d4:c2:a4:75:
         5c:3f:7b:9f:e4:77:d9:4e:37:f9:2b:bd:ee:f2:0a:50:94:d8:
         85:79:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:22:03 2025 by rpki-client