Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/992348ff-c8fb-36f4-a945-35396133fae4.roa
File:                     992348ff-c8fb-36f4-a945-35396133fae4.roa (raw, json)
Hash identifier:          3jmNtOrwu3S4Ov8VMFL8J52ArZEzW31ybZEutXjpP9I=
Subject key identifier:   41:55:20:53:C2:CE:19:0C:19:83:E2:E2:5D:EB:D5:F5:E8:8A:DB:39
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F432858498CFF161E83D60947306FD180
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/992348ff-c8fb-36f4-a945-35396133fae4.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     399575
IP address blocks:        206.204.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:16:1e:83:d6:09:47:30:6f:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=034c0a79-0656-4455-a001-4251bbfdb709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:2a:0a:ed:ca:6e:bc:8a:66:b7:45:eb:91:
                    a0:43:b5:58:a8:b6:07:95:38:d5:d4:3f:f1:6b:76:
                    2a:55:bd:55:a6:c6:77:38:a0:c1:58:8c:41:39:ea:
                    d0:02:80:fa:3e:ec:a6:e4:6e:a0:fd:c6:70:38:0f:
                    d6:5b:0e:03:83:f6:01:3b:8c:49:63:72:81:67:c8:
                    1f:70:31:0a:a7:56:e7:79:c0:f0:11:a2:7f:0e:d3:
                    43:bf:83:8d:d9:f8:32:dc:30:db:a7:e4:a5:a5:12:
                    24:04:f0:bc:88:9f:9f:7b:bd:dc:e3:e2:33:81:39:
                    40:47:99:44:e0:49:73:03:f9:0a:7e:f7:96:52:a9:
                    21:cf:42:21:44:9c:41:12:a1:33:a0:8b:a1:66:c0:
                    cd:4f:bd:ad:12:94:33:bd:8d:58:ca:9d:a3:8f:45:
                    38:52:f8:c1:63:ae:37:4e:12:33:4e:db:85:6f:23:
                    0e:3d:14:5d:39:6d:7b:c7:cf:9b:56:5e:77:51:2d:
                    51:be:11:1d:b6:af:e1:e7:0e:e1:ae:f5:f5:17:be:
                    6c:7b:6c:19:3c:65:20:55:6c:41:70:ef:bd:b2:7b:
                    f9:ae:0f:b6:55:2f:54:9c:96:84:ff:40:23:fd:45:
                    02:05:c7:fb:22:4d:9a:19:3f:76:93:06:91:b0:8f:
                    96:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:55:20:53:C2:CE:19:0C:19:83:E2:E2:5D:EB:D5:F5:E8:8A:DB:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/992348ff-c8fb-36f4-a945-35396133fae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:e3:19:df:d7:82:16:38:1b:22:dd:bf:0f:14:b7:89:85:15:
         e9:9f:b9:0b:52:1d:cf:7e:d6:31:0d:76:96:1b:08:dc:69:32:
         ea:f9:f5:b5:34:3c:96:24:44:26:1b:2d:02:74:5a:8e:39:b4:
         6d:09:8d:4c:58:97:fd:ca:48:74:5d:2f:4a:db:b1:46:85:db:
         88:74:13:2b:9f:9d:b6:d8:ee:ba:f5:ae:ab:4c:05:bc:2f:b2:
         54:a4:e8:c9:72:3a:20:9d:71:ca:7e:72:8a:32:6a:d3:00:ee:
         a6:cd:c1:fb:6a:50:15:07:18:86:58:a0:d9:72:9c:7f:5b:91:
         0b:a2:20:8f:b2:de:7c:fb:19:1b:cb:4b:b7:c0:fd:31:79:60:
         d9:b9:25:e7:49:f0:4f:37:a1:f2:3f:2d:3d:79:96:0d:11:25:
         6f:d8:08:45:98:d9:f5:44:cc:71:47:c7:73:68:a8:c6:14:33:
         3c:03:57:00:64:0f:4b:ec:2d:62:e5:52:ed:42:65:94:44:ed:
         75:9c:3a:76:be:d8:aa:81:2c:61:bf:69:02:f2:0f:9d:bd:4c:
         a8:0f:19:0d:c7:0f:27:c0:5f:5d:ae:0e:a3:4f:61:d1:ea:5d:
         4a:46:75:91:6e:60:29:75:d4:fb:9b:e1:ea:a2:0e:5f:5e:84:
         99:cf:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:28:11 2025 by rpki-client