Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e1a05b12-0740-31b1-a166-1a152ecd493f.roa
File:                     e1a05b12-0740-31b1-a166-1a152ecd493f.roa (raw, json)
Hash identifier:          GdfLGvQMHRE0XYhm4nKg7//dArNTWRDAXTVCzeSOh0g=
Subject key identifier:   79:C0:83:99:D8:D0:45:F0:A6:F6:8C:4C:31:A0:52:43:45:9C:B5:D5
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849A1EF714CABECCD6DA26A72C0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e1a05b12-0740-31b1-a166-1a152ecd493f.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     11404
IP address blocks:        206.192.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:71:4c:ab:ec:cd:6d:a2:6a:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=c11be59d-2bff-4978-b940-688e7b2a68e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:1b:9f:7c:71:2f:90:c6:d8:94:6f:26:c9:
                    cf:c2:f1:69:df:77:50:ee:89:ea:fc:27:3f:4f:cf:
                    57:5e:0a:95:dc:4c:7f:a2:49:b9:6b:6e:c1:3d:7b:
                    74:99:1e:d5:6f:d3:eb:f1:d1:a3:e0:50:21:e9:a1:
                    7a:ce:29:3a:dc:88:b7:8c:20:d4:c9:65:8e:ab:03:
                    27:97:3a:69:71:5a:8d:cf:de:35:54:98:dd:79:56:
                    54:10:90:04:1d:69:23:93:40:b0:c1:ae:0b:b7:9d:
                    88:61:e7:b1:b8:82:db:03:14:25:01:17:91:37:3a:
                    c5:15:10:78:c6:98:94:79:6b:c5:c8:83:2b:7c:9f:
                    7a:da:9a:1e:cb:eb:e6:ca:73:b1:57:c1:81:99:f1:
                    c1:5a:10:6e:b9:c4:31:86:55:31:d2:0b:31:5c:16:
                    62:e9:3e:01:4f:9e:b7:6a:77:9d:da:f4:b9:d7:4c:
                    eb:e2:f5:e2:99:c5:4d:46:c5:13:0e:a6:dc:a6:c9:
                    15:48:8a:e2:5d:b4:f7:b8:7e:fa:8e:2b:a5:4e:44:
                    50:ed:f4:fe:38:ac:9d:48:9b:6b:91:3d:2e:f4:c3:
                    87:88:b2:b7:9a:be:53:bc:4b:31:a9:0a:c8:10:a7:
                    e3:2d:f2:f0:ea:cf:ec:d0:2b:9a:8b:ad:5d:75:a1:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C0:83:99:D8:D0:45:F0:A6:F6:8C:4C:31:A0:52:43:45:9C:B5:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e1a05b12-0740-31b1-a166-1a152ecd493f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:21:19:4c:3d:5c:d5:4a:98:05:ed:38:76:94:c7:31:eb:
         ba:a3:40:5e:63:36:af:8f:76:95:9b:50:7a:cb:2f:85:e0:95:
         51:69:76:ad:ea:60:84:3d:40:b9:73:89:25:1c:5a:b4:0a:1e:
         f5:db:75:76:c5:01:18:4e:4a:04:2b:af:4d:8f:6a:50:ca:91:
         4a:53:5c:e9:02:db:54:64:b5:37:86:de:56:62:0a:9e:b6:77:
         13:2a:4b:e0:3b:e2:16:36:52:f4:c8:6d:58:ca:5f:e0:8f:43:
         c8:af:6d:97:57:44:2a:39:3e:2e:f7:52:67:8b:8c:65:8b:21:
         02:fc:c5:c1:91:b0:43:d6:13:c0:5d:25:71:20:80:37:ad:7a:
         43:f0:5c:ce:90:be:e4:29:84:fe:b2:bd:ba:f2:79:13:87:fb:
         6d:6f:a8:2c:d7:5f:db:de:99:52:7b:ca:d8:5e:11:b9:20:0d:
         34:25:a3:94:2c:06:7b:cf:9f:00:88:77:e3:14:8b:00:8c:73:
         71:ad:24:6d:62:93:9c:87:d5:7c:84:6c:76:1e:aa:c1:a5:4d:
         47:66:94:9b:31:09:a8:b7:b0:bd:ad:95:17:8a:17:8e:9b:7f:
         f7:c9:14:a6:e5:d9:9c:09:8c:ab:c0:51:b4:2a:cd:1b:5f:14:
         c2:7f:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:39:22 2025 by rpki-client