Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/6f5874e2-dc37-3e97-88b9-a13dc7361fe9.roa
File:                     6f5874e2-dc37-3e97-88b9-a13dc7361fe9.roa (raw, json)
Hash identifier:          LEjr/oFC8+BIbP4o5KHrmfc4bdNCjEMvTNb8yDD+JVA=
Subject key identifier:   39:9B:97:FE:8B:59:D7:62:44:B1:64:C9:3E:16:2E:90:84:A4:4E:9E
Certificate issuer:       /CN=60200506-e0ba-4a7d-b096-a86957fd76ee
Certificate serial:       010D0C9F4328584950F96E0E93C5E0941F1AE980
Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/6f5874e2-dc37-3e97-88b9-a13dc7361fe9.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     32157
IP address blocks:        205.211.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:6e:0e:93:c5:e0:94:1f:1a:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=1a34afdb-ca24-47ea-a5f5-accadab669fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:f3:28:0f:2b:6c:2c:06:53:0d:f1:a9:58:
                    f7:91:af:1d:eb:11:78:d2:67:50:d3:97:d9:2d:68:
                    fd:03:0e:7c:0f:5a:3d:d7:09:25:74:ea:92:77:16:
                    7d:2d:a5:e6:fc:21:d3:38:19:c1:f6:31:e6:5a:32:
                    53:18:4f:c2:d2:e4:de:f8:52:ac:70:fd:49:7e:a4:
                    2e:84:bf:a7:8a:5e:37:b1:eb:40:79:f3:cc:3a:0e:
                    c3:ff:2b:ea:86:71:61:2c:aa:08:1a:ad:28:5a:d3:
                    66:31:00:ba:da:a0:56:e0:16:44:c4:c1:0a:96:12:
                    24:31:45:33:38:61:19:f3:06:76:5f:ff:1f:25:60:
                    e2:0e:1b:68:8c:99:11:b4:22:34:f8:de:50:69:78:
                    19:ed:4d:ac:21:46:b7:b8:27:24:ba:11:65:ad:31:
                    68:3a:d9:17:b4:83:82:de:d5:b6:a3:4b:85:81:a7:
                    16:2e:2e:69:77:76:2c:d9:08:ca:00:6b:d8:15:28:
                    e7:07:3b:23:b2:5f:1b:90:d8:25:7a:db:b4:9b:cc:
                    28:0c:bb:19:d9:2d:6b:2e:e5:8a:16:b9:d6:5b:fc:
                    99:44:fd:34:d3:50:a5:b5:43:04:b3:65:9a:25:3d:
                    5e:b5:7f:3e:10:a0:45:98:9d:ca:32:19:88:3b:bf:
                    5d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9B:97:FE:8B:59:D7:62:44:B1:64:C9:3E:16:2E:90:84:A4:4E:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/6f5874e2-dc37-3e97-88b9-a13dc7361fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl

            X509v3 Authority Key Identifier:
                keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0d:da:e8:a4:3f:0d:aa:18:ae:c6:10:10:ba:c8:96:fa:c0:
         a9:50:6c:68:70:ed:b6:63:7f:c7:93:ee:bc:5e:73:48:4b:8c:
         33:be:5b:c8:dd:ae:f9:c1:37:44:64:1c:20:06:26:64:01:1f:
         1f:90:68:e4:40:93:d7:3b:6f:bb:88:73:18:48:74:25:8e:bc:
         cc:8e:4d:83:c4:98:f3:82:61:38:b2:44:83:20:2f:81:a3:6d:
         24:c6:b0:57:e9:57:a0:68:a8:43:94:7e:70:7c:a1:ce:c6:eb:
         1f:09:08:b2:f5:83:a4:27:22:4a:56:7d:cc:b5:9e:54:f7:62:
         d2:3d:ce:5c:8c:f0:e9:17:71:89:76:a5:de:9c:70:81:f6:f2:
         95:f3:ed:4d:58:37:b0:de:40:87:c1:3c:9f:7f:51:2a:89:06:
         3d:94:be:25:58:be:c3:56:38:f7:d4:59:a3:30:f0:f9:cc:84:
         61:76:92:b0:2a:0d:73:60:68:c9:9e:40:ec:96:58:61:38:ef:
         71:54:d6:9b:98:32:7f:7e:c0:6d:86:44:10:41:bf:84:72:d8:
         c0:ba:c7:73:16:9b:de:13:17:55:aa:db:72:fa:49:84:0a:4d:
         4f:63:f5:9f:95:00:2a:d0:32:a2:69:d8:ff:91:36:b9:83:c2:
         e1:7d:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:10 2025 by rpki-client