Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/fc68f266-e124-33de-96ad-334ca37e3edd.roa
File:                     fc68f266-e124-33de-96ad-334ca37e3edd.roa (raw, json)
Hash identifier:          nPppaG4E9IMxl43/6ENCG+ymmXNevduScnql8FCVl0U=
Subject key identifier:   09:48:C8:46:16:BE:79:4A:CC:9B:76:C0:55:0D:6C:08:5A:11:0B:41
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F43285849B2AF605152CCA8EB1B83BD00
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/fc68f266-e124-33de-96ad-334ca37e3edd.roa
Signing time:             Wed 30 Apr 2025 13:01:02 +0000
ROA not before:           Wed 30 Apr 2025 13:01:02 +0000
ROA not after:            Tue 29 Jul 2025 13:01:02 +0000
asID:                     5400
IP address blocks:        206.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:af:60:51:52:cc:a8:eb:1b:83:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Apr 30 13:01:02 2025 GMT
            Not After : Jul 29 13:01:02 2025 GMT
        Subject: CN=9d14a5e8-5445-4743-b89e-c65b3dff16e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:87:06:53:68:8c:47:f0:b2:a2:ea:69:ab:91:
                    dc:23:f7:43:06:78:a4:c1:70:55:50:78:9a:56:d4:
                    f3:07:75:9c:e3:e6:47:3a:d5:42:3a:05:c9:5c:03:
                    2e:d6:0b:86:d3:70:4f:4a:95:43:ef:ee:c0:f7:55:
                    eb:af:25:e6:0b:25:6e:ea:15:5b:39:c8:e7:f3:cb:
                    ce:4b:1c:fa:02:76:50:13:70:d3:fc:f7:60:4b:3a:
                    c9:d8:ed:e5:72:0f:0a:4b:97:95:2d:ed:4e:d8:06:
                    e8:fe:d5:ce:70:66:c9:6e:41:d7:fc:ce:bd:d9:a9:
                    22:3a:92:8a:f9:b4:ca:57:37:7b:22:ae:eb:7e:46:
                    b8:35:23:64:76:44:76:00:15:d3:11:e4:bb:cc:f4:
                    90:51:3b:46:8c:01:5d:12:13:b4:6c:25:54:c3:d5:
                    fc:3f:a9:50:c1:d2:37:f6:a7:21:15:8f:d4:5c:9f:
                    bf:bd:82:b6:eb:49:82:18:87:4a:6d:df:61:e9:d9:
                    ad:d9:27:fb:0e:99:81:0c:6f:94:e9:f6:ab:ab:fb:
                    56:22:ad:15:5d:14:d1:e0:8c:77:d5:2d:a6:48:3a:
                    c9:c0:63:fa:4a:1e:13:59:a9:7e:a2:b7:dd:18:7a:
                    18:3e:f8:c3:18:33:75:76:6a:8a:1a:e5:c6:d2:1b:
                    e7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:C8:46:16:BE:79:4A:CC:9B:76:C0:55:0D:6C:08:5A:11:0B:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/fc68f266-e124-33de-96ad-334ca37e3edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e3:cc:39:31:a1:34:06:b2:8c:3b:68:77:00:f2:25:d9:2b:
         a1:28:ab:8f:95:30:3d:f7:f2:6a:69:ad:ae:e0:7f:b0:02:76:
         ca:74:7f:4d:ad:3c:46:7f:c1:60:1d:20:86:61:ef:ab:ee:a2:
         a2:28:be:8f:da:2d:7a:f3:65:7d:f1:af:0b:59:f9:78:94:04:
         6a:40:d2:d4:03:83:a4:72:8a:21:2e:c5:3e:5b:e6:05:72:56:
         71:0a:67:41:6b:dc:57:e0:b0:3a:95:19:61:2a:c5:a4:72:97:
         20:a8:7d:d0:92:82:38:52:ef:44:a9:49:da:69:e8:03:e4:61:
         ed:b4:af:46:27:fe:be:75:c9:63:cd:91:f6:f7:80:27:66:25:
         d7:55:13:f3:97:48:59:6f:58:52:77:17:be:69:ec:0a:0d:e0:
         73:58:76:f4:23:a9:25:08:72:ad:b9:4b:d6:11:09:10:57:bc:
         97:7e:02:6e:9a:4a:b2:5e:89:dc:4a:24:de:5a:62:5d:29:7e:
         9a:4c:be:2f:71:30:f7:0f:73:82:40:5d:75:40:11:9c:82:b3:
         b8:34:22:1a:ce:95:ce:c8:79:5a:6a:d3:a4:d0:d6:7f:7c:9c:
         48:a2:d9:8a:33:a7:72:56:e3:e0:4e:76:6d:41:8e:50:3e:80:
         4b:79:e2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:59:39 2025 by rpki-client