Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2f7b2f56-882a-3820-9f7e-e51e62485d48.roa
File:                     2f7b2f56-882a-3820-9f7e-e51e62485d48.roa (raw, json)
Hash identifier:          T1iGitHwr2EZDFnVPe/I7jy4Jf/3TD88hl2yRorfvV4=
Subject key identifier:   3E:1A:48:11:ED:73:E7:B3:7A:AD:A6:CB:07:2A:AB:22:86:D3:90:B4
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584A1035425C9AD15A2AD3B1C380
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2f7b2f56-882a-3820-9f7e-e51e62485d48.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     135357
IP address blocks:        206.161.216.0/24 maxlen: 24
                          206.161.217.0/24 maxlen: 24
                          206.161.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:42:5c:9a:d1:5a:2a:d3:b1:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=f2cf47a4-b408-40db-94e8-3dee07cc4168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e9:8e:3d:83:d2:12:ff:f0:1d:56:23:70:29:
                    4f:9a:e3:c7:95:34:54:13:ea:22:ad:ac:cc:1e:36:
                    25:f2:db:a9:aa:cf:41:aa:69:90:a5:c7:ce:47:6a:
                    b1:69:5c:3d:8b:60:c2:d8:81:f8:fb:48:2c:4c:42:
                    77:ef:e5:26:5c:50:fc:85:90:c3:95:51:0b:c7:f5:
                    da:9a:dd:3a:63:38:ae:24:dc:1f:9b:f2:88:84:3d:
                    16:b2:0c:dc:b9:1e:6a:24:07:aa:a7:01:18:3b:0d:
                    2a:a3:49:fe:9a:9c:f9:e4:3f:d7:f8:9a:eb:ed:96:
                    62:13:18:e6:0b:34:ff:52:11:52:ff:7f:5a:07:15:
                    85:0e:cc:66:ee:cf:e9:5c:1b:44:7f:73:02:62:78:
                    a3:e7:ad:db:15:de:85:ae:a1:0b:72:65:52:48:62:
                    c2:fd:fa:73:e4:4b:64:cc:1c:f3:06:d7:fe:09:9c:
                    32:df:42:b9:0a:3c:ea:71:d4:87:d3:9f:d8:ae:4c:
                    e4:c7:86:57:f8:a4:2a:80:7f:60:1a:7b:30:6e:75:
                    ca:72:47:0e:e6:84:0b:ae:44:77:c7:69:e3:0a:ba:
                    a8:9d:1a:2f:0f:2c:63:08:0f:97:e9:bd:94:f4:ec:
                    f5:b2:8e:e6:7c:3c:50:42:03:c6:8f:b7:23:34:3b:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1A:48:11:ED:73:E7:B3:7A:AD:A6:CB:07:2A:AB:22:86:D3:90:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2f7b2f56-882a-3820-9f7e-e51e62485d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.161.216.0-206.161.218.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:4e:42:91:8b:e4:b3:d5:58:be:05:bf:55:3b:24:f1:dc:6d:
         dd:84:56:c4:3e:65:72:db:6a:fd:ec:e6:6b:21:e5:f3:51:77:
         84:b3:30:37:7f:71:f5:39:8a:05:9e:6f:82:43:34:5a:78:e2:
         ad:36:d4:34:b4:89:b7:2b:da:8b:a6:6b:d5:f1:5f:80:4e:bf:
         2a:42:7c:35:84:44:79:66:c8:22:4f:ff:24:01:12:f7:aa:9a:
         7b:1d:fd:55:eb:29:06:b5:27:d4:db:e0:eb:25:27:e3:97:80:
         9c:a1:14:e6:d5:cb:66:f0:1e:e1:08:b4:00:4f:9a:11:b5:c4:
         45:63:26:0c:a3:5e:63:0c:85:54:7d:3a:57:ba:5a:e9:0a:a0:
         73:e4:03:81:94:6b:eb:a6:af:72:f9:70:21:0f:42:49:ae:9b:
         54:e7:fe:4d:73:c8:71:3c:23:84:27:c8:a8:2e:0e:a3:d2:8e:
         0f:9f:ee:80:66:b7:fe:42:d1:27:f2:77:20:ca:43:7f:8d:45:
         b1:81:f0:1c:66:19:ed:8e:ce:2f:0b:66:bb:90:a8:e3:22:d2:
         03:f7:39:2e:fe:95:4b:94:e7:2c:d2:98:da:73:3d:1c:86:2b:
         68:2e:b5:90:a5:cd:3a:bd:5e:e9:8c:7a:be:a4:12:e1:72:fa:
         97:a1:36:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:39 2025 by rpki-client