Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0d320ed0-7e9d-30df-a7d0-bf22017aac39.roa
File:                     0d320ed0-7e9d-30df-a7d0-bf22017aac39.roa (raw, json)
Hash identifier:          KEy/XlLbU0Y8okDOu4erbyk1wGCb4W3/dDI4XMGYkHA=
Subject key identifier:   0A:4F:63:FD:C0:10:12:22:9A:9F:2F:6C:5A:07:6C:86:B5:07:FD:9D
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858495C2445C28011F2619BE6E080
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0d320ed0-7e9d-30df-a7d0-bf22017aac39.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     393249
IP address blocks:        206.87.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:45:c2:80:11:f2:61:9b:e6:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=ff26a21a-b8c6-4049-82fe-63ccb109d64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:14:a4:54:24:a8:17:40:26:a6:80:d0:69:74:
                    ec:48:c5:fb:76:05:b1:fe:ad:b2:6f:93:dd:c7:43:
                    3d:ee:57:31:0e:75:48:1c:4c:87:66:6b:c3:8a:be:
                    d6:f7:85:88:d6:8a:1d:4a:a6:df:a3:70:93:96:a6:
                    37:9b:09:fa:91:60:68:3e:1d:3b:d8:f3:db:24:22:
                    55:8e:81:17:48:a7:aa:ea:23:43:13:63:87:9d:03:
                    3f:1f:1c:f5:d3:60:03:cc:45:c9:da:db:96:cc:31:
                    2e:ef:aa:93:a3:b4:75:97:da:92:32:23:fe:74:3a:
                    66:50:a6:80:3c:b9:26:86:bf:c5:60:b3:62:66:3e:
                    ae:3a:22:58:1a:21:dc:45:f7:ec:11:07:ef:00:90:
                    e5:ad:e8:4b:71:6c:cd:47:35:eb:3d:15:68:a3:07:
                    52:09:94:dc:2d:52:c7:50:10:85:70:d5:aa:db:e0:
                    b3:ae:b4:76:2f:75:fb:e8:f5:40:83:c6:38:66:98:
                    29:73:d3:37:8c:0c:aa:f3:31:4f:e5:42:37:69:c3:
                    96:ad:a5:3d:82:97:2c:e4:18:7c:9f:02:97:31:f1:
                    c5:4f:54:0c:2a:8d:2d:43:a8:f8:26:ae:31:29:89:
                    f9:1d:29:6f:e6:17:06:4e:4a:62:48:81:36:99:56:
                    84:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4F:63:FD:C0:10:12:22:9A:9F:2F:6C:5A:07:6C:86:B5:07:FD:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/0d320ed0-7e9d-30df-a7d0-bf22017aac39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.87.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:88:9a:01:ac:6c:37:aa:6f:99:6f:89:61:f0:87:4b:c5:b2:
         d0:f3:ab:1c:c3:c5:d2:c2:3b:51:30:c3:98:99:3e:c3:c9:5b:
         81:15:f1:94:75:87:2c:c6:15:d1:ae:04:3d:d6:24:80:b7:98:
         04:f7:db:b2:ed:d9:1f:39:41:c2:d9:41:98:4e:14:df:cb:6b:
         ba:c8:f1:ae:25:b8:1f:40:a8:07:b2:f1:4a:fa:b9:d9:66:38:
         73:a6:5f:0c:f2:88:48:10:5c:14:cb:2a:d7:cd:61:3a:85:f8:
         f7:9c:b6:e7:6e:7d:32:b8:22:47:73:4f:f2:c5:c7:30:55:dd:
         d5:9e:8d:eb:af:8c:ed:34:8f:d8:2a:d6:cd:ac:3f:75:82:96:
         58:d5:d1:76:0b:83:3d:eb:ad:5b:89:cc:ad:81:12:98:3c:33:
         7e:2d:69:f1:f4:b5:15:f7:a2:28:27:bf:7f:20:ac:3b:c4:7e:
         77:4b:ff:da:42:48:d0:a0:cd:9e:a0:37:4a:53:8e:18:fa:c2:
         1d:a9:11:35:08:82:53:ee:68:38:1f:fe:8e:71:22:08:0d:6a:
         bf:65:c6:5e:25:17:4e:78:a1:59:ed:08:e5:81:c5:b8:cc:83:
         13:29:90:b7:b5:26:41:26:58:6e:53:bc:9e:70:2f:7c:c6:e4:
         d6:e4:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:36 2025 by rpki-client