Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4c97863f-f6c0-30d4-b58a-30852499249f.roa
File:                     4c97863f-f6c0-30d4-b58a-30852499249f.roa (raw, json)
Hash identifier:          dA8iKfuM6W4+QtIManNzmfBHoPKWFr7pMIJAs93Hz88=
Subject key identifier:   DA:98:A1:06:9F:79:EB:B6:F9:2C:C0:40:9F:1D:93:7B:17:64:DA:00
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829E7AA8A1C6A5228123E00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4c97863f-f6c0-30d4-b58a-30852499249f.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:e7:aa:8a:1c:6a:52:28:12:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=9acb7250-ddb3-4fb0-a056-02213a8774e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d6:3a:03:44:be:42:54:1f:29:d6:bb:52:62:
                    89:5c:ce:0b:6d:ae:fc:24:3b:05:8b:4c:78:9b:83:
                    ae:6d:d8:5d:05:ce:a2:ee:22:7a:c0:dc:3e:df:c9:
                    91:9d:0c:de:22:81:33:97:2e:3d:1e:c2:72:f4:d5:
                    b3:41:53:40:28:32:cd:6d:54:5c:d7:0a:6f:4c:fe:
                    38:fb:7f:22:74:6e:50:49:24:e7:13:83:dc:6f:2f:
                    85:32:b0:ae:b7:93:47:d8:78:f6:11:4e:ec:ab:48:
                    aa:ba:1a:a6:bd:a2:d1:55:e0:2f:bc:90:b0:06:79:
                    dc:80:60:30:be:6e:2b:11:d8:4d:46:3c:74:fc:46:
                    01:d2:08:5f:7f:55:cb:ec:c9:3b:61:12:c3:7e:8e:
                    95:53:70:38:42:60:61:1a:99:39:fc:6c:26:c3:54:
                    8e:12:97:1c:92:fc:27:36:a0:74:de:43:d6:b1:22:
                    05:69:1b:9c:d8:55:85:c0:62:2c:7b:cf:bb:57:d2:
                    63:9f:83:18:de:e1:f7:a1:cc:e4:da:2c:91:e7:18:
                    9d:ea:bd:b3:57:4c:1d:19:3d:69:88:05:c1:81:92:
                    10:eb:23:12:ef:b4:fa:3e:7e:da:2b:85:42:db:5d:
                    a3:51:b3:74:8e:42:e1:93:67:52:7f:d4:7c:4a:6d:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:A1:06:9F:79:EB:B6:F9:2C:C0:40:9F:1D:93:7B:17:64:DA:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4c97863f-f6c0-30d4-b58a-30852499249f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:36:55:58:37:08:aa:a6:96:a9:6f:73:68:ff:c3:13:08:52:
         bf:41:48:28:74:35:16:b6:45:a0:9a:82:f9:94:49:f9:4e:f0:
         b3:39:d1:d9:01:f0:a6:65:4a:f0:3a:dd:9d:b4:54:2f:a5:06:
         77:7c:de:d3:da:9a:a1:7b:f1:af:6f:71:06:2a:ed:27:77:7a:
         ac:6f:ca:d9:88:e8:e1:3c:df:68:77:02:86:40:b2:38:af:70:
         1f:e5:85:51:d7:b2:74:f3:96:c4:67:1f:b1:c9:fe:fe:99:79:
         8c:17:4c:78:8a:16:5d:13:fa:73:20:1e:cc:3e:3d:58:4d:2c:
         49:ed:de:71:63:fd:22:a6:93:98:68:32:31:f4:3a:76:6b:3b:
         38:7e:39:90:76:dc:ef:82:ce:77:2a:59:ee:ac:e0:01:76:ba:
         f0:3e:2d:46:d0:29:4b:6d:d8:b2:2d:c3:a2:a3:80:dc:d4:f2:
         e2:64:3a:50:23:3a:43:bf:1d:c5:ce:3b:29:80:59:07:2a:93:
         d7:ed:32:5b:22:fe:55:02:03:55:1a:e5:27:54:7b:18:34:f8:
         ee:c0:ea:92:3d:7b:60:82:c8:6e:07:c2:bd:b6:ff:b5:12:71:
         8e:e4:d7:c6:a4:54:cc:66:11:46:87:00:39:30:ed:a7:3c:f0:
         de:4e:47:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:05:57 2025 by rpki-client