Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/178a6549-7ccc-367b-90a4-a27631dfc341.roa
File:                     178a6549-7ccc-367b-90a4-a27631dfc341.roa (raw, json)
Hash identifier:          AgH9jrbN43siTlVHl/GaM9Ammzej059oH799hwPdjpU=
Subject key identifier:   1F:4B:E7:DE:64:2A:CE:40:4D:D5:2B:D1:1B:FD:26:2A:AF:AF:80:D5
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F43285849DF5A5DB50DBB9790D96A9E40
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/178a6549-7ccc-367b-90a4-a27631dfc341.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     26848
IP address blocks:        206.195.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:5d:b5:0d:bb:97:90:d9:6a:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=ffee7dcd-4637-4bd6-82d8-c40928f060e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:e6:cf:8f:87:b5:43:41:bf:8f:ef:b7:bc:
                    b1:4e:87:e8:4b:f1:2c:6f:c7:50:3b:91:9a:76:c4:
                    77:f7:ee:5c:44:5c:68:0d:ea:00:23:d5:c6:b1:40:
                    ff:50:5e:84:9e:78:09:27:31:3a:ca:df:f4:55:05:
                    44:91:0e:ec:20:02:70:91:8a:91:ed:b3:aa:a2:52:
                    96:56:4b:b6:c1:b5:56:7b:fe:53:22:87:3a:c1:d5:
                    39:cf:1c:9f:b8:ee:c7:13:f6:e3:8b:bf:d9:5b:47:
                    6e:ef:ed:31:fc:3b:b4:ad:14:46:b0:f5:be:1a:05:
                    1d:e7:c4:b6:fa:75:d2:c0:44:f6:ad:4c:a8:f7:c4:
                    bf:48:9c:0c:0d:09:90:1b:85:e8:97:46:b0:24:49:
                    eb:a9:94:e9:19:a0:c7:ed:e1:ae:88:91:97:ae:ef:
                    6b:4b:2d:72:98:1a:d2:ec:bb:58:8b:e1:e0:16:36:
                    a3:09:42:6b:6c:7b:e1:ed:83:40:0e:ba:94:7b:7e:
                    c6:06:b0:90:b7:e9:58:95:0e:d2:76:70:3e:74:71:
                    f5:a8:e4:d0:59:e2:d1:ed:f5:da:7e:d7:d4:18:4e:
                    1b:25:9c:e9:ce:83:c1:64:5b:59:33:ea:35:dc:5e:
                    ca:d1:64:7c:a9:53:31:4b:ec:09:43:1f:95:58:17:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4B:E7:DE:64:2A:CE:40:4D:D5:2B:D1:1B:FD:26:2A:AF:AF:80:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/178a6549-7ccc-367b-90a4-a27631dfc341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:97:6a:22:69:e1:1e:da:a0:e5:99:7a:7b:c5:9f:c5:45:
         bc:e6:8f:86:60:0f:0f:9a:31:b0:c5:c6:60:64:89:79:b8:8b:
         de:21:17:7c:78:c1:c5:69:37:53:dd:68:a6:d2:67:cb:02:d0:
         2c:0f:3d:dc:96:ec:f5:15:b3:62:0c:ee:b6:30:f4:4c:a9:29:
         11:77:66:b2:d7:c7:8a:3c:fa:03:7f:fd:af:32:1f:59:d7:e6:
         8a:90:37:ae:2e:45:17:4b:b5:a0:5e:eb:8b:02:db:f4:c4:f1:
         3e:db:52:53:4c:26:cb:42:1c:83:db:84:3f:9c:27:e7:1e:f6:
         63:86:92:f3:24:94:14:d4:37:dc:99:b4:90:87:21:bd:0c:8e:
         bd:e4:68:96:ee:ac:98:2b:1a:15:c3:8c:da:fc:f5:02:37:fb:
         ac:9a:9c:1b:d6:99:f8:7b:b8:9e:d9:93:a6:e1:da:1c:81:b4:
         40:ca:47:22:56:12:38:e7:33:51:ea:40:1a:d1:9c:72:ee:44:
         71:f5:64:02:46:ef:37:6a:ee:b7:35:57:cc:c9:7b:a0:37:88:
         94:f2:35:15:91:90:aa:c4:ec:bd:ed:e3:dd:d4:9a:9b:19:1e:
         44:09:7f:82:2d:b9:5b:fc:1a:b7:11:3f:e3:89:fb:29:ec:d7:
         a4:25:a0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:39:21 2025 by rpki-client