Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4e06e6a8-5eb3-3c2d-bcc7-cbebac830e1e.roa
File:                     4e06e6a8-5eb3-3c2d-bcc7-cbebac830e1e.roa (raw, json)
Hash identifier:          D7JIeAHtvsxHyvpqUEjZyspHAcrTvYWULseH9rwlspA=
Subject key identifier:   0F:49:30:1C:6F:20:F4:EB:15:E8:B5:40:F1:34:D9:4B:1D:15:8F:1A
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829E95F70238FEF38893DB0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4e06e6a8-5eb3-3c2d-bcc7-cbebac830e1e.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:e9:5f:70:23:8f:ef:38:89:3d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=0250536e-ac48-4682-935f-44472d7da7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:93:9d:4d:1d:5f:68:cb:f6:ee:dc:8e:95:
                    f8:e0:2f:41:22:3b:7b:6c:8e:06:c2:fa:d6:ab:3d:
                    92:75:af:29:32:dd:56:09:62:a4:b8:08:50:4c:88:
                    9f:b9:97:72:70:f8:45:52:98:d7:eb:b6:ba:cb:d4:
                    e7:9a:2f:72:ce:8b:ba:28:92:0a:3e:11:43:b3:20:
                    37:1d:89:af:72:36:25:ac:3e:4a:7b:eb:84:b8:0e:
                    0e:e3:f8:10:66:0d:89:3a:9c:47:c6:96:76:aa:55:
                    50:c0:d3:c0:08:2f:6e:ab:01:fe:54:58:be:58:82:
                    c0:68:76:e7:2a:7e:4b:86:15:6d:54:e7:27:58:df:
                    d2:bf:03:ad:f2:48:2c:55:13:aa:25:ee:3a:3b:5f:
                    d2:f3:47:11:03:2b:d9:a5:d8:73:51:c5:65:ce:e3:
                    c5:05:ba:57:31:26:39:58:2a:2c:ed:1e:47:bc:eb:
                    3f:df:38:57:15:2e:33:59:97:f0:c4:13:a6:29:b7:
                    9c:1c:ba:7a:0d:62:46:0f:9f:94:5e:9b:70:67:e4:
                    2a:76:a4:85:0e:14:2e:3b:a8:0a:f4:09:64:a7:ae:
                    b8:22:92:02:ec:7c:0d:62:2c:87:67:0b:5e:2b:c6:
                    ff:18:a9:0c:11:94:b2:a7:66:f8:dd:4f:d4:64:fa:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:49:30:1C:6F:20:F4:EB:15:E8:B5:40:F1:34:D9:4B:1D:15:8F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4e06e6a8-5eb3-3c2d-bcc7-cbebac830e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a3:99:d1:77:99:2d:34:19:0b:b2:69:d7:e0:f1:03:76:fe:
         06:63:fc:04:d3:6d:af:ba:eb:01:5d:bf:d0:f0:6b:41:49:49:
         cd:e5:ca:bb:c8:a1:b1:2a:51:0f:e3:51:d0:3e:0c:e4:b7:45:
         52:dc:f0:5f:2b:1b:bc:53:57:5e:7b:68:f3:b3:3b:36:16:ca:
         b8:c8:fc:7f:8a:46:35:72:c6:e9:25:cc:7f:bb:44:1a:4f:28:
         80:dd:44:cf:d7:45:ee:b6:16:6f:64:ce:a2:2c:20:d2:26:23:
         59:4f:5e:f3:47:83:15:bf:70:8b:2b:43:e0:ca:f6:c1:4e:b2:
         3b:9c:c5:c8:45:7d:f0:2c:25:94:78:53:e9:56:0e:84:84:b3:
         7d:50:47:49:2e:ae:9f:51:ca:5f:e0:fe:46:ee:d7:25:9d:c1:
         6a:e4:d5:2e:c8:62:26:d2:3b:ca:46:56:b8:58:ed:64:a9:80:
         18:54:16:c2:07:62:44:cd:6f:37:be:25:50:a3:8c:60:f0:d9:
         de:f2:65:87:86:d1:c3:a4:78:7e:8c:e4:85:ce:40:75:9d:a5:
         fb:99:1e:22:7a:58:01:62:e7:2d:ff:2f:69:20:15:7e:c5:bc:
         6d:e4:83:11:a1:09:40:27:7c:ef:3f:d5:4b:60:d7:41:1e:af:
         2b:5a:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:26:04 2025 by rpki-client