Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c80ec47b-3377-3193-adad-335df6fc44c3.roa
File:                     c80ec47b-3377-3193-adad-335df6fc44c3.roa (raw, json)
Hash identifier:          4YP11CPFV2Ly4jbEXUHbOdf8ksSh+ZVWIkJXy5Z/ihs=
Subject key identifier:   95:C9:80:00:DB:6A:8B:FE:4D:37:2F:1D:51:6D:D1:4B:C6:C8:84:E9
Certificate issuer:       /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial:       010D0C9F43285849D594E76ED334145522D83E00
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c80ec47b-3377-3193-adad-335df6fc44c3.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     0
IP address blocks:        206.80.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e7:6e:d3:34:14:55:22:d8:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=9a1733ae-e7b4-4ac7-8735-cd7d91ae5040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:d0:83:bf:6a:da:4b:57:fb:ed:6a:34:49:
                    23:98:18:f8:ee:89:6c:58:87:c7:38:8b:a2:4c:83:
                    a5:34:c1:73:08:db:da:e0:78:c1:6d:01:90:df:d6:
                    1d:3b:1f:e7:fd:5d:b9:8a:8e:9d:50:af:64:57:82:
                    f7:47:7c:fb:9e:40:69:5d:b3:fd:38:18:ec:d9:65:
                    a4:93:27:36:3d:bb:e9:fb:81:aa:9f:b8:74:ab:16:
                    6e:4f:86:c9:79:fe:55:42:70:a5:d6:39:c3:ee:20:
                    76:06:66:ad:eb:18:42:53:7a:5c:b1:4c:63:18:d6:
                    ab:6c:86:39:0e:c7:8f:7a:1c:7a:19:ff:6a:94:d3:
                    d5:ec:e5:9c:5d:44:e0:79:f5:4c:ef:34:dd:f7:36:
                    6e:ea:13:82:99:86:34:ce:aa:de:d2:47:61:8c:6b:
                    c9:1f:06:71:af:d0:bc:d1:6d:5c:33:ba:cd:f6:c7:
                    9b:ff:c9:e5:0c:c2:9d:4f:81:76:10:4c:87:81:54:
                    9a:a8:14:6e:91:28:2c:ed:3d:47:f2:a7:11:cb:f0:
                    f4:93:fe:c2:3f:86:cb:b1:7e:2e:90:cb:02:4f:81:
                    03:0a:1e:94:58:48:4d:b5:e5:f8:9d:e2:61:23:e9:
                    2c:03:a5:16:80:5e:be:07:12:86:8c:c9:1c:94:9c:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C9:80:00:DB:6A:8B:FE:4D:37:2F:1D:51:6D:D1:4B:C6:C8:84:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c80ec47b-3377-3193-adad-335df6fc44c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.80.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:f7:0c:fa:fc:63:b5:ac:be:d7:33:6b:f8:41:50:19:a6:83:
         a8:d9:b5:92:3c:8f:5f:b8:86:04:a4:76:5a:32:f3:bd:a4:20:
         e2:e3:37:8d:60:48:ca:54:ba:f3:60:7f:b7:c6:23:0c:45:78:
         f1:de:90:ec:30:ca:38:77:18:f4:60:c8:ee:bd:f9:4d:bf:96:
         fb:69:e5:45:c4:1f:51:73:9e:ec:9f:aa:22:e1:d4:d1:44:e3:
         56:af:a3:c2:88:72:6a:55:03:d7:eb:ea:a3:e4:e1:6d:c5:4c:
         a4:44:97:c7:24:29:80:2b:84:3e:08:e3:87:a9:b5:ca:b8:09:
         d3:fe:37:5d:5b:18:28:2a:c5:6c:eb:35:4b:bf:c3:49:65:bf:
         df:6f:3a:e3:e8:7a:09:d2:45:32:8e:1b:72:7c:f3:89:79:59:
         58:dc:5f:92:b9:b5:ba:c2:18:ca:3c:05:7e:1f:06:5d:50:71:
         dc:83:36:24:74:ab:06:cf:bb:32:63:59:b9:b2:30:0c:62:3d:
         c7:53:1e:dc:82:4f:43:50:78:d1:57:3d:27:23:dc:87:11:9e:
         1a:7b:21:e6:a3:e8:54:37:69:6c:42:07:69:02:ed:2c:5d:c5:
         45:0a:3b:70:38:ff:df:ae:39:76:b0:70:5f:1c:19:3b:3a:b7:
         19:af:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:12:37 2025 by rpki-client