Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa
File:                     b2e5432e-486a-3195-a8c7-b69e19b4f706.roa (raw, json)
Hash identifier:          4bDyiKQvmRWBZYqnGU2L7RDVHpoSnE2HF5U72GSWBZM=
Subject key identifier:   58:A8:19:DE:1E:D4:6A:41:9E:66:A0:E8:14:9B:94:09:EA:35:63:88
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285849BF3F8F3D68DE5EF13E2D8AC0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     376
IP address blocks:        206.167.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:8f:3d:68:de:5e:f1:3e:2d:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=fa008251-7c92-4299-862d-d3652bc8a670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:7b:ce:a6:d6:85:79:60:72:62:57:d8:e5:
                    ab:27:ec:c4:7d:5c:2e:c1:10:31:6b:93:e8:61:4c:
                    6d:02:79:f2:44:f4:86:c0:21:85:98:b8:4a:7b:c0:
                    94:7b:24:5b:c3:c0:c2:84:7a:4d:52:1d:ed:9b:be:
                    ee:94:ed:99:20:ec:6d:6e:5e:6f:d4:51:67:69:eb:
                    e1:a8:1c:8c:59:d4:fa:97:e1:d6:8e:58:ec:39:29:
                    b5:5a:68:c1:df:fb:2d:f2:f8:82:af:fd:55:8d:a2:
                    53:3d:59:17:55:7b:7d:1a:ab:c6:4e:3e:8b:71:fa:
                    d3:d6:0c:0a:45:ac:53:ea:5b:d0:8d:5d:7e:80:ed:
                    af:e0:ae:13:c9:ae:55:73:d5:6e:9a:e6:ef:3d:11:
                    d0:3d:88:ed:81:59:fe:53:47:62:62:9a:69:f4:69:
                    18:5d:f8:d1:43:d1:cc:ea:f1:26:71:5b:dc:cf:4e:
                    0e:5c:ac:65:93:3d:69:eb:de:56:52:fc:b0:5c:56:
                    36:9d:e1:04:56:b7:41:9a:b8:3c:5d:89:7c:9f:26:
                    0e:0e:cf:12:d9:c2:2b:20:f8:6b:87:47:41:d3:17:
                    9e:b4:30:56:d5:33:6e:b8:0a:61:81:7a:06:bb:6f:
                    39:2a:da:f1:90:de:c7:4a:76:bc:43:fe:52:70:e1:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A8:19:DE:1E:D4:6A:41:9E:66:A0:E8:14:9B:94:09:EA:35:63:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ea:82:51:56:9c:f7:53:b5:ac:90:3c:50:d1:be:cc:14:a7:
         86:c8:56:7f:e3:72:af:33:cc:5a:ea:e0:5b:ed:ae:d6:a3:88:
         8e:d0:ee:bf:d0:1e:a7:7f:ec:e1:37:e7:9e:0c:06:47:70:4c:
         98:b3:69:30:f3:f4:58:d6:b8:09:29:45:a6:46:df:6e:17:51:
         d5:3d:90:38:bf:ed:fd:66:85:ab:ca:2f:8b:f2:86:2e:ac:bd:
         02:08:19:95:8c:5e:75:cb:ab:54:f5:04:72:4d:10:18:b8:e8:
         04:6b:5c:ff:d9:97:c6:b5:c3:5b:0e:b2:4e:5b:8e:b1:7e:a8:
         6c:01:7e:b2:df:9b:b7:ac:9c:09:47:21:b8:b9:ee:57:4b:cc:
         23:25:b7:9e:bc:5d:a4:87:fa:d5:86:cd:e6:52:fc:79:d3:87:
         f8:d6:18:87:a8:5b:a5:57:55:70:cc:4d:a3:cb:d9:0a:ad:ba:
         1f:1c:2b:0b:1c:5e:de:31:12:2e:67:22:39:af:ba:2f:5e:ce:
         98:18:28:7c:c1:96:e8:a9:fb:44:d8:40:01:47:b6:e9:f5:e6:
         20:ad:a2:bb:cb:30:11:c1:aa:55:77:a9:26:e2:69:b2:08:cf:
         8c:33:0c:58:8d:1d:ba:ff:0f:db:25:75:ad:df:c0:1c:15:c8:
         e5:54:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:07:37 2025 by rpki-client