Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/e5eedb20-d228-3387-925d-bf9c71a41ded.roa
File:                     e5eedb20-d228-3387-925d-bf9c71a41ded.roa (raw, json)
Hash identifier:          sFbnT07M7v//prUWAjl9HS67qpFrdoj3VgF2MdpAsyk=
Subject key identifier:   2E:45:08:C3:21:65:50:B4:00:74:83:2D:AE:48:74:39:0E:E4:36:8D
Certificate issuer:       /CN=64ebadae-406d-4c62-9955-3a90e9f675d9
Certificate serial:       010D0C9F43285849AE7F4227938D88D2F5DA0180
Authority key identifier: 34:3F:84:F3:E9:22:74:AF:9C:DF:6B:13:B5:80:A6:7C:C9:8B:83:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/e5eedb20-d228-3387-925d-bf9c71a41ded.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     399086
IP address blocks:        206.253.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/64ebadae-406d-4c62-9955-3a90e9f675d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/64ebadae-406d-4c62-9955-3a90e9f675d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:42:27:93:8d:88:d2:f5:da:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ebadae-406d-4c62-9955-3a90e9f675d9
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=c3b4d490-51a4-44b7-b3be-78d529a49d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:60:d6:13:5e:6b:87:e3:e6:68:9c:20:c3:
                    62:81:8d:83:92:9f:ab:88:48:73:e9:c3:44:8d:a5:
                    90:40:2c:4e:80:c9:ef:a9:3a:2b:81:ea:2f:cf:29:
                    90:f3:8e:03:ed:7d:c1:89:9e:53:65:c8:2e:74:63:
                    ce:cb:a0:3c:98:48:75:b9:7f:be:ac:e8:06:17:24:
                    75:39:b2:8b:87:56:fa:11:d8:c4:fa:fb:65:db:7e:
                    39:d1:c5:4c:1c:00:f7:2a:b2:32:77:47:51:0c:82:
                    86:2a:4b:45:ea:81:b1:18:ee:23:cc:a9:dd:7c:2b:
                    40:15:0c:f6:d1:68:f6:80:28:52:18:0c:e7:37:33:
                    ad:bb:b8:78:0c:f8:a4:bc:b0:5a:3d:5c:62:bd:92:
                    83:db:91:59:71:d1:4e:62:74:a7:45:52:75:23:28:
                    97:5f:d5:d6:e3:db:52:eb:83:53:15:65:49:ec:b1:
                    d7:4f:08:f8:e1:e0:79:16:ca:e1:70:15:3e:7f:44:
                    32:e6:23:f8:67:ee:a0:5a:59:17:34:00:8a:84:b1:
                    bc:b6:cf:08:1b:69:ea:86:1d:79:fe:31:39:ec:87:
                    40:3b:c2:b6:d3:02:8a:c5:a4:b9:1c:30:06:1f:20:
                    cc:89:03:8f:33:bc:66:35:e5:86:f0:41:d8:78:22:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:45:08:C3:21:65:50:B4:00:74:83:2D:AE:48:74:39:0E:E4:36:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/e5eedb20-d228-3387-925d-bf9c71a41ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/64ebadae-406d-4c62-9955-3a90e9f675d9.crl

            X509v3 Authority Key Identifier:
                keyid:34:3F:84:F3:E9:22:74:AF:9C:DF:6B:13:B5:80:A6:7C:C9:8B:83:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.253.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6d:da:05:07:27:ff:cf:5a:2d:32:30:1b:2b:88:b1:a5:1e:
         94:89:64:e4:ad:b6:c9:13:82:c6:a3:bb:d4:3c:4a:f4:cb:a7:
         c3:8c:9b:2a:86:80:69:ff:0d:45:63:df:df:f0:b1:c1:50:b8:
         f1:3d:b2:c5:e7:34:dd:de:e6:13:d7:f2:4b:24:09:2d:6a:ad:
         3c:ff:dd:72:94:e8:a4:40:dd:b4:1f:35:9a:c9:73:6c:c8:e9:
         9a:bb:62:5e:05:f8:0c:9b:d0:44:20:df:ae:63:7b:7d:24:89:
         87:10:1a:a6:6c:b2:41:83:18:4f:d0:08:ec:93:3c:57:66:f0:
         0c:16:74:bd:0d:a6:2e:a0:d8:94:4b:0f:e3:ba:43:90:ce:ec:
         3b:15:45:cf:76:55:c7:69:85:11:1c:6c:43:81:d1:53:f9:96:
         70:84:88:10:6a:47:86:88:59:aa:34:b9:eb:53:9e:df:cf:0b:
         4f:31:86:69:00:c3:30:67:72:ec:0b:70:4f:08:e1:cc:ad:78:
         68:f6:62:40:9c:5b:67:39:ea:56:9b:54:e0:a3:8a:93:86:d3:
         d7:66:7e:b7:92:70:eb:20:bb:32:8e:03:ab:af:6d:8b:e8:ea:
         8d:da:6c:d7:4c:fa:28:6e:8f:df:9f:c4:8e:01:f9:ab:88:16:
         63:33:b0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:53:17 2025 by rpki-client