Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d8edd28b-cae1-3e91-9086-0db706d30295.roa
File:                     d8edd28b-cae1-3e91-9086-0db706d30295.roa (raw, json)
Hash identifier:          HfknfbWHJPy/XKJrbr1c0hJpOg75QrmWbwF0EBWCa24=
Subject key identifier:   B6:3B:51:9C:27:81:59:6E:8C:CD:6C:A8:A0:32:0F:D1:C5:28:7A:A6
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829DEFF2FDD20FB888FC600
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d8edd28b-cae1-3e91-9086-0db706d30295.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:de:ff:2f:dd:20:fb:88:8f:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=651bb615-a89f-41f6-9346-7142e41a4b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:f1:3d:41:76:1f:bb:cf:84:70:98:04:c2:
                    6c:50:44:73:55:43:6e:dc:87:e4:51:6f:70:d8:ba:
                    fa:e3:43:a3:83:08:b2:15:3d:46:fc:15:b3:cb:07:
                    c5:d9:de:e9:be:cc:22:fd:de:aa:40:a3:e1:77:1e:
                    a4:d1:3e:6e:26:7a:ee:a7:20:7f:c6:2f:5b:6c:1e:
                    27:0a:bb:66:96:06:0c:77:c4:6c:bd:b5:ad:c0:f9:
                    1a:41:20:16:43:2c:db:b0:23:fe:8d:8f:54:b0:37:
                    e5:ea:08:06:bb:c3:68:61:72:1b:c7:92:fd:b0:d9:
                    a9:8e:a2:48:4e:2d:ce:75:c8:28:51:ce:56:eb:1e:
                    19:42:43:5c:46:5f:c2:88:e7:d8:18:41:af:cd:e9:
                    c8:df:f2:9f:5f:6f:af:97:f5:17:2b:6f:0a:3f:17:
                    a6:3a:47:d2:15:2d:52:12:37:ec:03:77:72:8e:18:
                    bc:22:53:c1:43:d1:30:70:c3:72:f2:d7:9c:3a:a4:
                    8d:06:e5:dd:fe:09:2b:be:c2:36:50:fa:7f:bd:dd:
                    cf:b8:7d:93:3b:92:45:4e:dc:21:88:d9:7b:41:6d:
                    2c:cf:0c:1f:47:75:fd:e3:ec:90:4c:56:d1:d4:bc:
                    89:88:f0:4b:60:ec:be:b2:82:e6:38:f1:71:81:37:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3B:51:9C:27:81:59:6E:8C:CD:6C:A8:A0:32:0F:D1:C5:28:7A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d8edd28b-cae1-3e91-9086-0db706d30295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:2f:af:da:a7:c4:b0:59:92:ef:45:3f:a6:02:d0:49:b3:
         13:83:d8:e0:a8:1f:10:b3:18:e9:50:9e:dc:89:6e:27:7b:48:
         d5:f3:59:55:3a:99:80:08:b6:84:3f:d7:13:69:9b:9b:9e:82:
         05:78:8f:d4:ea:16:35:c7:7b:b1:34:94:8b:3e:1d:e7:5d:81:
         8e:74:e6:5a:3a:c1:f0:a0:63:0f:bb:d9:f2:56:b1:5f:9d:1c:
         82:e7:cc:32:f8:b4:24:45:9d:0c:b9:62:92:c0:88:94:eb:c7:
         c3:80:9e:63:fd:50:00:30:eb:f4:90:ee:2c:b1:2f:0e:a4:23:
         d3:43:b0:2c:19:df:42:c3:fa:03:c6:d4:63:05:c4:91:dc:0b:
         e0:89:ca:07:a2:13:18:8c:0b:dc:66:56:66:03:16:44:b9:c6:
         2a:e8:c2:4a:8b:4e:84:f9:2d:0d:38:3a:63:6d:fe:87:3d:3f:
         6c:71:63:0f:09:e1:c1:3a:ce:9b:a2:cd:c0:b7:24:79:0f:92:
         d4:54:eb:e3:e4:ab:08:79:63:52:52:60:c2:0c:ef:2f:97:2c:
         75:5f:e7:e8:aa:18:fb:37:e4:b6:6b:dc:c1:35:d1:2a:89:4e:
         32:f1:8c:9a:df:68:dc:78:c0:f4:19:bd:04:61:e3:40:fd:64:
         23:a4:30:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKd7/L90g+4iPxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
NjUxYmI2MTUtYTg5Zi00MWY2LTkzNDYtNzE0MmU0MWE0YjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW3xPUF2H7vPhHCYBMJsUERzVUNu3IfkUW9w
2Lr640OjgwiyFT1G/BWzywfF2d7pvswi/d6qQKPhdx6k0T5uJnrupyB/xi9bbB4n
CrtmlgYMd8RsvbWtwPkaQSAWQyzbsCP+jY9UsDfl6ggGu8NoYXIbx5L9sNmpjqJI
Ti3OdcgoUc5W6x4ZQkNcRl/CiOfYGEGvzenI3/KfX2+vl/UXK28KPxemOkfSFS1S
EjfsA3dyjhi8IlPBQ9EwcMNy8tecOqSNBuXd/gkrvsI2UPp/vd3PuH2TO5JFTtwh
iNl7QW0szwwfR3X94+yQTFbR1LyJiPBLYOy+soLmOPFxgTcDywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLY7UZwngVlujM1sqKAyD9HFKHqmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvZDhlZGQyOGItY2FlMS0z
ZTkxLTkwODYtMGRiNzA2ZDMwMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqd6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2dL6/ap8SwWZLvRT+mAtBJsxOD2OCoHxCzGOlQntyJbid7SNXzWVU6
mYAItoQ/1xNpm5ueggV4j9TqFjXHe7E0lIs+HeddgY505lo6wfCgYw+72fJWsV+d
HILnzDL4tCRFnQy5YpLAiJTrx8OAnmP9UAAw6/SQ7iyxLw6kI9NDsCwZ30LD+gPG
1GMFxJHcC+CJygeiExiMC9xmVmYDFkS5xirowkqLToT5LQ04OmNt/oc9P2xxYw8J
4cE6zpuizcC3JHkPktRU6+Pkqwh5Y1JSYMIM7y+XLHVf5+iqGPs35LZr3ME10SqJ
TjLxjJrfaNx4wPQZvQRh40D9ZCOkMIA=
-----END CERTIFICATE-----
Generated at Thu May 8 12:16:17 2025 by rpki-client