Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/05077994-8ee8-39a7-afa1-0dfc5986215b.roa
File:                     05077994-8ee8-39a7-afa1-0dfc5986215b.roa (raw, json)
Hash identifier:          o/W7ShZI2EPucq/KSBDmQnyCxZOLi7WbBwHs44o80Rk=
Subject key identifier:   F6:70:60:6A:3B:6E:3D:21:EE:0A:EB:F7:06:B1:E7:2C:B8:18:38:B8
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858495C24456539875EC6EBBA8FC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/05077994-8ee8-39a7-afa1-0dfc5986215b.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     393249
IP address blocks:        206.12.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:45:65:39:87:5e:c6:eb:ba:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=79cebb1a-1526-47b0-bd22-261d5ed9f27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:4a:e6:e9:31:c2:40:a7:c3:ea:20:b6:92:
                    6c:b1:05:bc:0c:59:c7:68:34:90:23:23:ac:6c:e2:
                    90:7c:d2:21:53:87:c7:d5:fa:59:6c:00:99:6e:e3:
                    32:27:36:1b:a2:b7:b1:68:12:f9:41:a8:ad:c6:60:
                    3f:c2:b0:12:2d:8d:3f:e4:69:b0:f9:91:c5:54:2a:
                    c9:e9:e9:bf:96:e3:3c:60:c2:b9:37:44:5b:ca:9a:
                    1e:a5:ea:3d:0a:cf:94:70:ad:3b:1a:c2:39:fd:2f:
                    8f:78:a5:e9:55:a6:bf:0a:4e:e7:32:56:16:a4:a3:
                    4d:45:65:b5:40:e9:85:dd:9c:3e:83:a5:2f:51:bc:
                    92:26:90:81:d5:ec:32:21:78:b9:1f:fe:f1:34:7c:
                    ec:b2:18:ca:0f:7b:57:31:7c:5a:7d:d1:97:66:c4:
                    c4:2c:cc:25:17:fa:9c:bf:93:3b:d5:f7:91:c2:04:
                    b9:6a:64:e8:84:27:ce:0c:47:34:b2:27:f7:73:b7:
                    f5:2c:fe:fd:7d:e7:0a:48:65:cf:b5:18:04:d3:6f:
                    4c:25:50:c2:2c:88:a4:b0:c8:58:8f:b9:83:5c:34:
                    71:ed:b4:48:46:a1:b1:07:4d:96:1b:26:51:37:35:
                    41:3e:a7:de:0e:27:b8:18:55:ae:06:d2:c1:16:93:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:70:60:6A:3B:6E:3D:21:EE:0A:EB:F7:06:B1:E7:2C:B8:18:38:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/05077994-8ee8-39a7-afa1-0dfc5986215b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d9:ad:42:52:8c:bc:1e:22:cb:b0:04:97:b7:88:52:b7:fd:
         90:61:48:78:a3:43:e8:a6:f8:72:15:3f:a6:66:db:c5:6e:ce:
         fb:5f:75:b6:62:c9:7d:1b:a1:21:47:08:d1:cf:e4:a5:1c:97:
         20:f2:fc:57:66:46:62:a4:0f:70:44:b7:cc:75:87:fe:26:82:
         1b:4c:b0:ce:99:dc:e2:cd:16:38:7e:96:e5:25:f1:bb:01:3c:
         d2:7b:97:33:8e:3d:db:59:d7:70:7c:f0:68:cb:af:78:8c:4f:
         37:32:12:38:31:59:1c:6c:17:de:20:f9:53:d5:9d:6d:36:e8:
         18:07:9f:07:ac:1d:67:d3:58:93:09:32:f5:0f:79:8d:83:db:
         37:25:bc:cc:6d:a1:7a:15:bc:e9:50:51:42:34:05:d7:14:a2:
         15:dd:6d:fc:d2:5c:7e:4e:b0:47:ab:01:0a:9e:99:42:3b:d1:
         fa:83:dc:e2:28:56:a2:e9:7d:ec:bc:8c:9d:87:66:0e:c6:6f:
         1c:16:3c:9e:41:a2:f0:69:c7:7f:92:d5:c4:16:31:b6:9a:72:
         5a:0d:68:4d:01:04:7a:d6:2a:33:0c:f8:af:43:14:1d:fd:bc:
         ff:75:0c:86:ea:57:10:2c:80:a4:dc:0d:4f:db:68:e9:b5:6b:
         8b:88:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:36 2025 by rpki-client