Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/a1e5e2e1-8f04-30ff-8e9f-f149dffab83d.roa
File:                     a1e5e2e1-8f04-30ff-8e9f-f149dffab83d.roa (raw, json)
Hash identifier:          TnG6oDf89PaKiffAcsWt1ZeRv6jOsqTLhdAcU9rOT1s=
Subject key identifier:   95:21:D2:28:DF:C1:52:3E:48:61:61:28:89:B2:55:EA:A9:EF:1E:74
Certificate issuer:       /CN=ebad5283-db04-4fcf-81a8-4a09a38eb203
Certificate serial:       010D0C9F43285849EEB4FB0E5D9C10958D4AC400
Authority key identifier: 61:DE:A3:8E:F7:70:33:FE:F0:9B:F7:58:2B:E1:A8:29:FA:47:A5:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/a1e5e2e1-8f04-30ff-8e9f-f149dffab83d.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     16840
IP address blocks:        206.183.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b4:fb:0e:5d:9c:10:95:8d:4a:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebad5283-db04-4fcf-81a8-4a09a38eb203
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=99d4e4ad-38ba-4b37-b2d6-1896986bfd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:3a:1b:40:28:18:0d:56:1d:9d:1d:cb:5b:
                    86:26:53:8f:5a:cf:1a:2b:90:85:75:47:a9:39:38:
                    d2:d9:99:23:3e:97:e7:0b:85:f2:d0:5d:07:d8:76:
                    bf:97:7b:5a:6f:f1:c5:07:c6:d5:4c:97:2d:4c:46:
                    41:00:b0:28:bb:fc:c8:4f:aa:c4:bc:2f:e3:a7:1b:
                    a0:b5:af:ff:8f:ae:12:b4:c8:e8:93:b5:49:a8:78:
                    3f:82:61:04:e1:ad:c4:53:19:c7:7d:bf:f8:f7:62:
                    9e:ba:06:78:86:ac:df:0b:0c:0e:12:18:63:cc:41:
                    37:80:6b:ec:29:39:83:e4:2f:5b:5d:e2:aa:84:74:
                    9a:f5:97:25:fe:52:90:8d:d0:23:01:c0:8e:db:b9:
                    cf:5c:0f:50:1c:70:71:24:dc:b1:8a:53:2f:64:e9:
                    75:e2:9b:e8:67:80:35:ea:d3:d9:0c:98:ce:64:06:
                    c6:29:b1:49:4c:6e:ca:53:15:4e:a2:4a:8b:fb:4b:
                    00:b3:a0:4a:b0:2b:8f:0a:c7:68:43:8b:4b:95:32:
                    02:62:b9:90:c9:d1:d1:39:cf:0d:e1:6f:bd:0f:e4:
                    3d:12:75:e5:3c:b8:f0:0e:0b:05:b1:f5:e3:25:23:
                    10:ed:02:dd:a6:06:c9:26:47:ff:42:33:fc:60:a5:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:21:D2:28:DF:C1:52:3E:48:61:61:28:89:B2:55:EA:A9:EF:1E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/a1e5e2e1-8f04-30ff-8e9f-f149dffab83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:A3:8E:F7:70:33:FE:F0:9B:F7:58:2B:E1:A8:29:FA:47:A5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:24:48:a9:19:fb:67:9f:ef:36:37:2a:9e:c5:a6:9a:01:68:
         07:17:15:de:90:fc:72:d0:35:96:3c:8a:6c:3b:46:a5:36:4a:
         45:4a:c8:52:8e:9f:48:1a:82:22:6c:59:67:a0:92:0f:eb:6f:
         4c:03:4f:b6:80:fb:de:ba:22:6d:5e:f4:3a:8c:e3:e5:33:26:
         37:30:ed:4f:9f:70:12:32:7a:6a:d2:9f:cf:5d:c7:e4:84:30:
         16:05:22:0e:56:37:1a:d4:1c:3c:cf:c2:24:82:d2:3b:5c:91:
         07:36:cb:13:ab:e9:5c:74:85:ec:4b:9e:fe:1d:e3:2f:1c:ef:
         10:24:60:fe:a3:6a:e5:8b:c8:bf:39:6e:44:fa:8a:03:43:69:
         d1:77:f7:fa:9d:2c:50:d3:e3:62:fb:2b:ad:4f:1a:e2:b4:35:
         f6:1c:d1:16:ea:01:33:7a:9d:43:e8:3a:29:a0:0d:85:05:6c:
         6d:f8:58:a0:26:cf:6c:27:cc:9d:5b:5a:03:3c:34:36:c6:95:
         47:64:06:73:31:df:94:1a:c9:72:e5:34:e8:3e:56:52:ca:8f:
         ca:f6:d4:7c:0f:87:ad:07:b2:64:9f:00:d9:d8:f7:b3:23:96:
         a9:8c:8d:55:47:b8:55:38:e8:00:b4:cd:35:51:10:32:7f:af:
         dd:90:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:32:35 2025 by rpki-client