Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/bb5a7ca1-3331-331a-bc29-294398077a39.roa
File:                     bb5a7ca1-3331-331a-bc29-294398077a39.roa (raw, json)
Hash identifier:          hGJs0F8YPrZYI4P19ujmL27IC5MMKVL0+SflPgLa39o=
Subject key identifier:   B9:F9:92:8A:C9:EB:84:2D:65:7D:AE:87:9D:37:F5:D1:78:54:1B:86
Certificate issuer:       /CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
Certificate serial:       010D0C9F43285849CBCF9AF039E4C4016243B880
Authority key identifier: 38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/bb5a7ca1-3331-331a-bc29-294398077a39.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     14157
IP address blocks:        206.83.176.0/20 maxlen: 24
                          2620:116:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9a:f0:39:e4:c4:01:62:43:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=3418e551-3fad-4691-a268-18e0f81ede51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f0:89:49:2f:b7:f5:fd:da:e5:f6:21:7a:63:
                    2b:23:97:25:b2:8f:e5:e2:89:01:65:ab:74:98:1c:
                    09:a6:8f:70:fd:99:14:63:3f:05:31:4c:f3:2a:c1:
                    81:7f:c4:74:f9:af:e3:5a:01:94:d3:da:a1:e3:c0:
                    89:dc:35:11:b5:f9:6f:c6:43:7c:b8:06:84:13:69:
                    22:66:e7:1a:68:d6:8c:88:58:07:4c:47:2a:9b:3d:
                    bf:3f:79:51:77:57:6c:53:a2:dc:72:26:54:da:bd:
                    1f:90:23:ef:1e:ab:16:b0:fe:61:71:a8:62:6f:50:
                    84:c0:0a:42:e1:09:6e:86:65:3e:c8:2f:ce:f8:60:
                    48:48:3a:34:51:23:7f:1f:51:20:0a:f3:94:61:9b:
                    8f:65:75:7b:94:f8:b9:93:82:ab:e4:86:19:b7:ba:
                    1b:9f:b6:02:5b:d3:5d:4e:4e:a0:14:61:8d:aa:61:
                    b4:15:5e:99:38:08:a2:41:c6:c8:e2:d0:2a:06:c4:
                    46:96:d7:1d:36:36:60:b3:1e:45:cc:a6:c4:d3:d9:
                    c2:6d:8b:38:0c:4a:e4:46:ae:e9:a4:77:ea:8e:f4:
                    55:91:1f:11:27:5f:85:ad:0a:93:8d:56:6a:d2:bf:
                    dd:84:6a:6a:8f:48:74:e7:6e:c9:7b:14:47:83:c9:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F9:92:8A:C9:EB:84:2D:65:7D:AE:87:9D:37:F5:D1:78:54:1B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/bb5a7ca1-3331-331a-bc29-294398077a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl

            X509v3 Authority Key Identifier:
                keyid:38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.176.0/20
                IPv6:
                  2620:116:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:69:26:5d:42:67:18:10:ea:08:4c:bb:c1:69:c1:82:ef:07:
         51:94:17:4e:4d:2a:1a:ea:6e:bf:ce:f8:9f:dc:af:d8:31:3a:
         39:25:c8:e0:fc:56:71:fb:d7:d2:82:25:3f:92:fe:31:f6:17:
         8d:8f:3b:e3:a9:6c:88:95:0b:85:c2:72:33:43:cc:65:bf:72:
         4e:4f:9a:42:3d:6e:24:f2:2c:bf:da:8f:01:0b:8c:70:48:5b:
         11:08:11:f4:e1:d6:7b:0e:38:b6:51:24:f4:e0:9b:bf:96:c8:
         5c:fc:b7:e9:75:d3:f1:3f:f6:75:27:42:c6:b5:19:91:99:44:
         ee:30:27:85:92:86:a1:0c:70:04:c9:ad:d9:b5:e3:64:8e:55:
         44:21:4a:04:c2:ab:08:54:40:78:ff:fd:87:27:23:dd:52:0a:
         bf:c9:3e:6c:f8:72:88:05:7c:86:a9:92:c8:e8:b3:cf:a3:71:
         58:bc:8f:78:b9:d0:bf:58:f6:06:d4:83:6b:c2:83:cf:5e:aa:
         0e:13:a1:dc:5a:f5:86:7d:9b:77:9b:7d:4d:85:45:ce:4d:50:
         33:43:b4:16:45:90:7d:53:43:1a:f8:33:c7:a0:b8:22:a3:07:
         57:57:94:c2:30:c0:5a:bd:53:4b:f2:80:a9:4d:9c:a4:55:e8:
         95:c0:af:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:21:26 2025 by rpki-client