Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa
File:                     bf475d03-436a-3341-a882-e4bd4a170795.roa (raw, json)
Hash identifier:          othuwyPEH1m53W6ZGxPeByrA3DzYGdi3XAGX0T8+kZo=
Subject key identifier:   B7:38:CD:59:B8:BF:D2:C0:D5:77:AB:63:8A:FA:48:41:2C:74:D4:31
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829DFDE895DE3CCFCD61B00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     53437
IP address blocks:        206.167.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:df:de:89:5d:e3:cc:fc:d6:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=1b0d19b5-467f-419e-98a0-8b61c8ecff56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:81:a8:95:d6:48:46:a6:c5:6b:11:c6:12:70:
                    46:8c:a4:45:b5:4b:a0:bd:a6:91:36:a5:6d:6d:a9:
                    d6:5b:38:ad:b8:71:64:a7:09:24:d9:6a:93:58:0d:
                    cb:40:9e:f4:4a:27:e0:b6:91:cd:d2:42:3d:8b:05:
                    75:86:1a:cd:86:17:7d:e0:3c:47:24:ca:46:f5:38:
                    1e:89:a0:3c:ae:4e:97:fe:6c:50:93:34:32:16:cb:
                    6c:f7:5c:18:50:36:21:95:53:0e:2f:e9:fb:c9:d0:
                    06:f0:7c:92:09:a3:fc:1f:02:ff:1a:51:6d:61:7b:
                    03:12:56:b3:e8:30:47:88:bf:df:af:c4:20:4d:10:
                    13:21:56:81:03:84:5e:c6:e7:bb:7c:11:41:8b:59:
                    78:b8:09:ad:59:5d:6d:1e:42:b8:82:e1:dd:32:7f:
                    d7:2b:e9:f2:74:9c:88:be:fb:8c:2d:a9:bb:df:cc:
                    9e:88:ed:59:30:af:16:de:a5:39:1b:69:50:5d:98:
                    fe:6d:30:79:c8:82:7f:de:59:33:f7:23:6c:b0:88:
                    93:5f:71:ed:62:62:af:52:cf:96:08:90:06:72:44:
                    c0:47:19:d1:86:f6:c3:18:98:af:c8:43:8e:a5:a0:
                    6c:ff:27:53:9a:1f:fb:13:a2:94:d2:c3:cf:ec:58:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:38:CD:59:B8:BF:D2:C0:D5:77:AB:63:8A:FA:48:41:2C:74:D4:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:de:80:a7:57:eb:7b:21:23:9c:3f:47:06:d8:ec:fa:00:
         78:7d:32:59:0f:b3:a3:98:20:98:97:45:45:e1:4f:33:9f:a0:
         b4:52:7d:85:43:c5:ba:aa:a8:24:08:77:de:8f:7c:86:8f:58:
         2a:f0:89:ec:1d:38:f0:89:f3:8a:f2:35:1e:ef:b4:4d:a5:16:
         34:06:81:2b:46:fa:72:b5:53:74:2b:2a:1d:4e:1a:35:27:a6:
         0e:c2:d8:0e:94:0b:68:0d:e0:24:00:12:dc:ce:04:8c:43:70:
         0c:1a:e7:05:d8:5f:e7:5e:a8:a3:6a:f2:52:9a:36:56:d8:c0:
         b0:64:c6:3d:50:6e:77:74:df:91:79:0b:5e:d4:27:99:af:21:
         1b:25:75:7a:66:c9:ac:ab:74:b9:02:9f:10:bb:5b:29:47:b1:
         db:71:e0:e5:15:a6:b5:e8:8f:d0:e3:26:7b:5c:9d:5a:09:29:
         1e:87:86:3d:64:14:71:ef:ca:67:cd:30:99:1b:58:2a:36:f8:
         9c:d2:00:a8:a1:65:c6:98:12:08:18:e2:f9:6a:95:96:cd:66:
         e2:db:90:ff:ec:ea:7d:16:79:62:95:46:f3:9d:f8:49:17:19:
         de:42:0e:4b:5d:7e:ce:ca:15:8b:7a:27:9d:bc:3a:51:5d:d9:
         57:a8:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:27:24 2025 by rpki-client