Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2c2ec605-2cab-32e2-9843-5d3cbc57793c.roa
File:                     2c2ec605-2cab-32e2-9843-5d3cbc57793c.roa (raw, json)
Hash identifier:          vP5OAxegAhCumUm9T2+eOEqwGxNo+LqRpBkXbvy2IlY=
Subject key identifier:   B7:C5:78:E9:09:A0:AD:FF:D1:BD:3C:5E:DA:A6:31:8D:E3:75:E0:38
Certificate issuer:       /CN=2e703bc9-a07e-4d78-84a0-d4d15f1f42ad
Certificate serial:       010D0C9F43285849B41495F5F099CC5E896DD840
Authority key identifier: CE:AA:D9:C4:CC:68:54:5E:D8:92:D2:26:6C:46:1E:63:23:11:2A:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2c2ec605-2cab-32e2-9843-5d3cbc57793c.roa
Signing time:             Thu 01 May 2025 01:00:46 +0000
ROA not before:           Thu 01 May 2025 01:00:46 +0000
ROA not after:            Wed 30 Jul 2025 01:00:46 +0000
asID:                     376
IP address blocks:        206.123.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b4:14:95:f5:f0:99:cc:5e:89:6d:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e703bc9-a07e-4d78-84a0-d4d15f1f42ad
        Validity
            Not Before: May  1 01:00:46 2025 GMT
            Not After : Jul 30 01:00:46 2025 GMT
        Subject: CN=054ccfe0-065b-47df-9d63-82c2ea95fe9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:ff:71:4a:c8:ed:c0:00:a7:d1:4a:9e:a7:
                    5e:07:d6:cb:1c:e1:0f:c1:7f:69:ce:88:05:21:fa:
                    2c:e4:5a:1d:72:d3:22:d3:da:fc:17:10:01:91:3c:
                    f8:3f:8c:68:c6:77:a1:62:a2:4a:99:61:3f:43:75:
                    ae:a2:a7:36:8e:6d:b9:bd:72:bb:10:f5:f6:4d:d1:
                    de:96:61:9a:1e:ed:52:a5:66:ea:e0:9a:93:ec:17:
                    c2:b7:f5:58:ac:80:01:3e:6b:07:e7:33:5e:31:97:
                    b5:55:9b:3c:d6:04:c3:e2:c2:b8:e4:22:44:2c:78:
                    e8:b5:a7:1a:8a:2c:a8:af:60:f5:95:ee:15:bb:f9:
                    65:75:b7:77:4d:61:fa:68:ad:b7:e8:e5:b7:1f:cd:
                    cf:4a:ab:41:9e:7f:35:ec:de:56:2a:36:d7:ff:35:
                    a1:82:c2:9c:5b:8a:4a:b6:bb:31:a8:3b:e1:3b:52:
                    f6:50:35:14:2d:e7:d8:6e:05:cc:ae:72:69:17:7d:
                    0f:4f:78:02:35:ea:39:f2:c2:6f:45:d9:16:3c:b8:
                    e6:94:94:3c:76:67:2d:f1:ca:4c:ef:23:7f:bb:9a:
                    e6:4a:3d:47:11:f3:b1:d3:e8:65:d3:66:0a:6d:80:
                    ba:50:d2:af:ff:6a:1d:87:e6:97:e6:8e:19:e7:d5:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C5:78:E9:09:A0:AD:FF:D1:BD:3C:5E:DA:A6:31:8D:E3:75:E0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2c2ec605-2cab-32e2-9843-5d3cbc57793c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.crl

            X509v3 Authority Key Identifier:
                keyid:CE:AA:D9:C4:CC:68:54:5E:D8:92:D2:26:6C:46:1E:63:23:11:2A:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:70:28:ac:92:1a:8f:e7:be:24:70:3a:f8:cb:5b:0e:0f:0c:
         94:62:8a:13:b9:82:36:2a:6c:f8:7c:7f:25:0b:4c:45:bc:a3:
         9a:9b:da:fb:45:97:11:f6:76:91:76:53:18:26:d3:a9:b9:e7:
         f3:d1:23:8b:54:80:7a:f1:9f:fd:a6:e3:3d:80:59:89:fd:0f:
         c6:19:2f:8b:19:db:73:bf:e5:28:53:13:ad:57:eb:f1:67:3b:
         0f:4d:ff:d3:97:1f:7c:45:91:c3:0f:4f:c3:a2:71:95:c9:85:
         a0:38:17:87:7c:fb:e7:33:0c:cb:8e:57:49:43:92:9f:39:46:
         cb:19:fe:fc:75:66:7e:a3:d2:2b:d5:ef:06:fd:73:91:36:14:
         0b:20:6a:e3:20:ef:bb:7c:c2:b2:fc:c0:e0:67:66:8d:ce:ce:
         82:ec:7f:95:c9:20:bb:93:8c:3f:df:fa:01:8c:7d:f6:85:c5:
         4b:1d:5b:50:d4:64:22:ae:e4:a4:f8:c8:ba:95:e9:f0:00:82:
         b0:15:27:4f:46:0e:99:15:63:a3:4c:91:18:70:f4:9e:94:a1:
         f8:b1:d9:51:4f:38:3e:89:bc:88:35:de:ad:1c:c0:2a:a3:c9:
         42:9a:a7:05:78:7c:23:02:eb:7b:bc:3e:b0:cb:08:db:b0:ca:
         5e:3e:58:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:20:25 2025 by rpki-client