Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa
File:                     c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa (raw, json)
Hash identifier:          3nhbUj+5OYDzbQIP7AprIkxtLChDmvEF+Nsh68fbaKk=
Subject key identifier:   D7:DE:6A:60:7A:59:BD:C6:5E:05:59:8B:78:E0:13:20:51:3A:9F:C0
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285849B14A0FB47EB14AB94EC00F00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     11090
IP address blocks:        206.55.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0f:b4:7e:b1:4a:b9:4e:c0:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=35d2f0ef-8ed2-44b7-a526-fa0859bcdb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:42:37:7b:99:96:f1:3b:e0:1f:fd:db:cf:
                    c2:a1:cd:e0:0d:ba:99:90:be:b4:e2:f5:78:4b:bc:
                    db:cb:45:e5:69:ab:d6:a4:d0:34:3b:5f:ee:fe:d5:
                    6b:52:6c:c4:ab:07:07:0f:d8:3f:de:0c:25:e0:39:
                    42:7d:41:7b:fa:56:17:9e:dc:06:5d:98:da:7c:3b:
                    79:5d:f2:69:6c:bd:53:34:55:d3:42:de:fa:10:ad:
                    cf:40:0b:3e:16:1d:ca:ba:a7:a8:2d:aa:c9:b5:a5:
                    8e:94:24:44:d9:2e:4d:96:a3:00:15:fb:03:b7:0c:
                    06:9d:ad:dc:47:51:74:b1:bd:db:c6:bb:b2:b9:d4:
                    c2:c2:c3:44:b2:db:58:fb:f3:96:89:1c:c2:cc:f2:
                    23:20:a3:a1:fa:d5:51:7e:40:45:8e:c2:30:19:e4:
                    ab:77:01:92:41:d0:70:e6:b2:a6:27:8c:19:05:00:
                    07:4d:8a:c4:22:a1:75:2f:62:cd:db:9d:ac:ae:2c:
                    22:b5:68:8d:15:5d:d2:59:58:4a:90:e2:91:c0:1d:
                    79:e2:33:af:9b:d2:11:32:06:27:9a:c6:23:cd:53:
                    19:68:0c:22:3c:8f:0f:12:2e:ba:6b:72:72:48:fb:
                    76:b5:4d:fb:fd:70:06:db:44:47:ed:f3:4c:6e:a1:
                    d5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DE:6A:60:7A:59:BD:C6:5E:05:59:8B:78:E0:13:20:51:3A:9F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:dd:3b:d9:30:94:78:9b:62:b8:8c:2e:37:14:9f:a4:70:
         a5:92:73:70:44:5f:2e:96:a7:74:e8:ae:99:ce:f2:25:d8:e6:
         c8:57:d4:74:bc:6e:65:82:a4:fe:f8:d6:51:5f:2c:5a:7a:c1:
         37:77:21:18:65:a0:be:e6:55:fb:09:52:0a:0a:5e:88:8f:fa:
         ac:a1:b2:19:fe:ca:f8:7f:d2:07:7e:4a:5e:46:93:98:84:40:
         bc:71:de:5e:8e:7d:31:fb:2b:88:6e:e2:bb:75:55:ed:95:21:
         c4:0e:f2:4b:24:bd:7f:59:fa:4b:67:f0:b5:49:20:1c:d3:86:
         db:43:44:b7:97:27:a0:49:08:98:ae:76:ab:95:2c:7b:99:c8:
         fa:0e:f7:27:ab:92:55:7a:b1:a2:2d:08:07:56:da:95:82:22:
         d2:66:a9:29:43:47:3c:b6:ef:4b:54:29:26:69:53:d6:9a:a1:
         d0:db:26:9c:d0:77:41:36:84:00:b3:e0:19:8e:e5:cb:7f:56:
         b9:36:1a:c0:a4:89:c9:b7:89:1d:8a:8f:05:b7:51:3f:55:b6:
         03:f6:33:ab:fc:f0:6b:2c:41:d7:44:08:44:2d:e4:e9:c0:89:
         df:a9:51:7c:17:55:e5:a5:a1:dc:d0:a2:41:6f:31:24:3b:e6:
         a7:d2:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:31:21 2025 by rpki-client