Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa
File:                     d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa (raw, json)
Hash identifier:          8REzOZyrhfdjn5Fm7pKVjDkANne5ylEKLAz65jQ/KkM=
Subject key identifier:   6E:D4:F6:35:F8:23:DB:63:69:55:79:DB:5D:9D:25:73:86:C8:87:DB
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C0566D9FF928C2111F3BE80
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     393740
IP address blocks:        206.180.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:66:d9:ff:92:8c:21:11:f3:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=ebadf253-1d79-4aba-a071-5730383471bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:9d:37:94:dc:74:7a:d4:10:29:c0:f6:97:
                    09:1a:2b:63:b1:7a:d7:c7:ce:5f:4b:db:cd:43:4f:
                    de:19:d2:5b:11:db:62:4e:35:ea:be:5e:28:2e:c4:
                    8a:13:0f:18:2d:f1:7a:30:1b:9c:8a:43:b1:56:34:
                    78:ac:47:88:19:54:d9:94:24:aa:3b:ef:ab:ac:93:
                    d6:16:55:c3:5d:fb:54:0d:7a:49:87:00:ed:22:98:
                    5e:55:c8:77:2b:11:f9:87:62:57:3b:04:e3:a4:35:
                    6f:74:e1:52:10:65:28:5f:39:7b:54:8c:f8:28:b9:
                    c2:f3:30:60:17:63:e3:54:a7:67:83:7e:1b:ac:66:
                    47:da:f9:6c:ac:5f:3e:8f:5d:5f:fb:ee:72:45:11:
                    21:f5:05:f1:ba:bf:8f:f7:09:c0:23:d0:d8:14:7e:
                    8e:80:1d:ac:d8:8f:93:d0:43:61:06:6c:3d:ac:af:
                    49:3c:ae:ff:9e:86:0a:86:0b:f2:a0:4e:61:1c:af:
                    1a:71:bb:83:e1:0c:93:f0:a3:78:d7:d7:5a:85:bb:
                    82:04:0d:53:45:b5:34:8b:79:41:2a:41:ed:b3:de:
                    ba:28:bb:f1:a9:55:d6:80:72:08:33:95:1f:4d:e3:
                    7d:ba:52:de:ce:f7:7a:6b:b2:a9:21:60:d2:87:57:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D4:F6:35:F8:23:DB:63:69:55:79:DB:5D:9D:25:73:86:C8:87:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4e:6d:fc:cc:f0:8b:87:6f:36:39:48:18:e5:e6:c8:d0:13:
         c2:ae:89:36:00:b8:9b:dc:c8:e2:7b:8f:32:be:26:b4:24:9b:
         aa:14:df:74:22:7d:e8:70:af:be:ed:f6:02:5e:80:14:41:65:
         79:ac:e0:b2:a8:74:f1:90:b7:ba:29:af:b1:74:fd:25:d3:99:
         04:e9:c9:21:d8:39:57:43:26:05:80:5c:ea:cb:81:84:ad:98:
         d6:11:d3:32:d6:40:7d:21:ad:d0:48:f9:78:19:34:4a:64:dd:
         0c:7c:46:a4:f9:f0:d9:18:ee:a9:47:36:07:40:69:27:4d:4c:
         97:76:39:1c:e1:1a:c7:51:d2:ff:48:6d:32:c3:1e:c3:b2:4a:
         6e:14:53:bc:70:d5:8f:92:1f:64:e5:39:72:e2:aa:7e:92:73:
         5d:8f:fc:b3:1d:2e:d8:af:18:2b:d3:4a:16:8b:05:81:d7:f6:
         45:f2:83:da:eb:f9:7d:90:2b:e8:24:50:12:08:28:3b:49:33:
         65:cf:cf:e2:1e:c8:08:d6:a6:b3:da:94:47:e4:d9:3e:a7:70:
         ed:db:44:84:bf:25:73:31:5d:aa:77:03:58:dc:e2:02:57:89:
         26:d9:e9:fd:00:64:99:7c:db:a5:e9:62:d2:5a:80:7f:db:59:
         4d:8b:1a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:36:11 2025 by rpki-client