Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/dc710201-95f4-308a-b0d6-022c0e224cb0.roa
File:                     dc710201-95f4-308a-b0d6-022c0e224cb0.roa (raw, json)
Hash identifier:          xLY05+G9wQ3ZeT3p4FqRQ+yV/ghYRriW6jJ9jtsf/NU=
Subject key identifier:   BA:89:8D:4A:20:4D:73:50:98:E0:79:9F:70:97:0A:2E:A3:EC:50:AB
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F43285848ADC60CD8BD762567CA022E80
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/dc710201-95f4-308a-b0d6-022c0e224cb0.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     53976
IP address blocks:        206.183.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:0c:d8:bd:76:25:67:ca:02:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=be5fc930-663a-4cb5-981d-95c06aa746e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:72:50:dc:14:de:cd:cf:12:3e:c8:78:65:
                    8f:fb:ab:e0:8b:4d:8f:0a:6f:ed:9c:3c:0a:fb:88:
                    16:f7:7f:73:45:13:e4:e8:43:3b:ad:8c:78:89:5e:
                    b1:5c:0c:74:9d:c9:ad:0b:2d:d6:8a:8b:bb:d9:b8:
                    50:fc:d6:12:57:e7:85:f5:b0:97:ed:7a:83:50:be:
                    2f:c4:1c:b9:96:a2:04:50:e6:a2:6f:db:8f:42:d0:
                    b0:de:ee:19:fe:15:bc:a5:5b:64:6f:fc:b9:5a:2d:
                    46:ae:96:2c:96:db:e0:c2:75:7c:8c:06:db:15:60:
                    8c:88:a1:c6:53:25:a7:c1:97:9c:49:e7:ab:c4:c4:
                    71:0f:17:63:43:22:0e:e9:e1:90:0f:6d:02:fb:c0:
                    97:87:28:d3:33:e0:d9:26:37:8c:cf:02:b2:d9:78:
                    68:2d:40:c6:62:c3:37:75:3a:30:3e:06:3e:8c:27:
                    b8:2a:4e:0b:84:ff:b8:d0:46:72:82:3b:14:84:8e:
                    5e:f2:f0:fa:09:bb:e9:3c:78:db:3c:77:99:e4:8d:
                    0e:2d:83:c6:eb:60:d4:63:c9:c1:b9:3f:a0:bb:9a:
                    a0:1b:00:e7:b5:5f:b0:b0:87:47:5d:c9:87:e0:78:
                    b5:7d:ca:f1:58:ea:c7:f7:53:0f:8f:43:a7:87:67:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:89:8D:4A:20:4D:73:50:98:E0:79:9F:70:97:0A:2E:A3:EC:50:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/dc710201-95f4-308a-b0d6-022c0e224cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:1b:7e:b4:c2:05:e3:eb:e8:d3:41:ba:01:44:fa:f2:1d:
         c7:95:7f:71:a1:fb:f2:b5:15:2b:d6:b7:de:db:cc:b3:fb:4d:
         44:31:37:05:1c:35:8c:46:62:fc:9e:b0:c7:b2:d7:33:f3:8c:
         da:68:8a:08:3d:f0:3d:18:62:84:98:c8:1b:bf:ee:de:96:a5:
         37:11:4e:e7:94:4c:13:fa:1f:81:25:2e:9d:67:1c:f8:9c:de:
         1c:3a:59:fc:cb:ce:69:4a:13:e5:d5:ca:62:8a:29:6a:93:e1:
         c1:4b:ae:1c:f2:ae:90:9e:3e:df:03:db:e7:6b:17:c4:e6:dc:
         28:77:95:4e:37:47:a3:6f:ec:0a:4c:d8:a3:0d:9b:4e:d4:fd:
         50:4c:69:26:ae:ed:11:fa:11:b2:16:a3:17:95:f9:48:13:c2:
         96:c8:53:d3:c3:0e:04:fb:16:44:d7:d5:01:20:d1:3a:b7:ed:
         d2:99:af:57:76:7d:46:5c:ff:9d:b8:77:b9:07:ce:e0:61:35:
         68:a5:fe:96:c0:82:91:30:6f:fa:c8:3c:5a:cc:01:56:ee:4e:
         7c:ec:19:4a:dc:ef:b5:fe:35:81:a1:f9:0e:11:3d:52:22:c9:
         f8:db:08:a3:db:e0:0c:57:0d:4c:d2:40:da:2c:f3:4c:a0:e5:
         84:44:22:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:10:34 2025 by rpki-client