Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/cb1ce6d0-b295-3b50-b53e-aa98f119523b.roa
File:                     cb1ce6d0-b295-3b50-b53e-aa98f119523b.roa (raw, json)
Hash identifier:          AKNXem7Scyo6DA77HmSxXjHejmg5wnXEKyTPz9c/Xvw=
Subject key identifier:   CE:58:B6:47:9E:24:0C:EC:59:67:4C:33:91:4B:0D:7F:96:BE:DB:52
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C0576A957BB36F217F48780
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/cb1ce6d0-b295-3b50-b53e-aa98f119523b.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     393740
IP address blocks:        206.180.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:76:a9:57:bb:36:f2:17:f4:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=afe395b2-25c5-4a26-a60e-c44031efbed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:8c:a5:31:ba:21:dc:4c:29:2a:db:b5:a9:
                    25:20:15:47:45:fc:a0:c9:45:28:b0:49:e6:28:1f:
                    fd:a6:ae:3b:4f:4a:44:3f:08:2c:07:28:4d:e3:b1:
                    0c:ed:c9:6b:1a:7f:8d:d9:7a:86:38:f6:6a:04:60:
                    02:f7:19:19:fe:0c:cb:f6:a0:50:e0:45:f6:f9:34:
                    42:34:e6:f8:e6:28:5a:dc:3c:1e:5f:65:d0:74:28:
                    72:62:ec:40:7d:62:b0:fe:03:56:fd:19:de:0f:4f:
                    a3:39:87:86:31:be:48:d9:67:67:11:8f:e6:dc:18:
                    82:d9:38:3e:e4:73:b9:f8:61:0a:33:82:5b:b7:16:
                    97:1f:f6:4b:70:55:3c:42:ea:89:17:e6:74:bd:46:
                    c7:96:db:dc:b0:91:6f:f9:fa:15:4a:25:9a:2c:08:
                    bf:27:d2:08:64:18:02:e9:aa:94:26:94:d1:5b:c5:
                    a8:02:7d:c2:05:21:8d:f6:72:c9:93:e3:82:f9:2a:
                    14:7d:88:b1:39:c2:7b:2e:87:54:f5:a9:7e:3e:0a:
                    65:6c:6a:19:ab:99:c0:e7:96:72:6e:9f:db:2b:19:
                    a3:9b:0e:c6:18:ae:1b:d2:ee:58:5d:2c:3a:e5:66:
                    cb:cc:d9:f6:de:23:2d:c8:0c:d4:1a:93:cb:e4:dc:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:58:B6:47:9E:24:0C:EC:59:67:4C:33:91:4B:0D:7F:96:BE:DB:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/cb1ce6d0-b295-3b50-b53e-aa98f119523b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:73:9b:46:50:cf:2a:68:3b:c7:a9:20:33:59:08:90:fa:
         7e:82:c9:0a:a3:a3:1d:60:89:e6:0c:48:7d:ab:f1:e3:e5:0c:
         80:07:9e:6b:c5:0e:65:4a:5a:5b:19:7b:51:12:d6:55:fd:34:
         aa:5f:43:8b:bb:03:81:95:75:6a:4b:9b:53:f8:91:39:02:1e:
         fc:e8:f2:6e:90:13:3f:13:75:50:70:d8:e0:19:c0:47:bb:cb:
         54:f6:5b:ec:48:47:c0:b8:fa:67:53:c9:6f:df:e9:7e:be:1f:
         31:7a:7e:e9:c2:fa:44:45:4d:f5:a6:de:bd:74:5a:01:60:22:
         d8:bf:b8:9e:91:81:39:84:ad:3b:ae:5d:d4:bc:9a:46:70:c3:
         a0:ad:57:e6:3c:66:d8:12:cc:c1:01:64:b6:4c:a8:0b:c1:36:
         79:ad:fb:b3:ab:e0:e6:57:bc:ee:7f:ca:66:68:6f:63:df:c8:
         ba:5f:b9:cd:f2:eb:89:9f:f5:e7:5b:66:46:c1:38:cf:90:bc:
         77:3d:0a:d1:9a:e1:30:a8:be:75:1f:92:2c:e4:a1:59:11:ea:
         1e:ff:cd:0d:7d:b5:59:5c:75:00:4c:b2:9a:53:61:67:6a:e0:
         e6:c5:21:48:60:15:6f:c4:07:33:e6:95:b7:f1:83:d3:52:bd:
         7f:1e:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:45:29 2025 by rpki-client