Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa
File:                     6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa (raw, json)
Hash identifier:          AIwf1tF8O8yLg9ejvU9kYRmLxsRCr+tDzXk33ZOPCfI=
Subject key identifier:   97:1D:BA:08:21:A1:3B:D1:6C:3B:25:F1:EC:83:26:FD:B8:D9:50:67
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285849C20A1A385332C94D5DC21700
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     0
IP address blocks:        206.51.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1a:38:53:32:c9:4d:5d:c2:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d0b10d89-7c36-4b19-bf7e-2123df4eb242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:b1:76:87:13:b4:06:13:f9:25:21:59:e0:
                    08:12:2e:bf:5a:fe:c7:24:53:c3:07:44:82:61:4c:
                    d8:45:00:d7:eb:f8:9d:b2:41:5e:ac:e1:b9:ce:c2:
                    07:a2:6f:4d:57:5e:f1:7e:ec:33:01:c2:cd:54:46:
                    e5:c3:5d:ad:17:fb:c1:bf:c6:ee:f0:73:ac:24:e2:
                    39:2f:e8:02:1d:d7:e0:4e:4a:23:13:07:c9:fe:e8:
                    49:ba:52:c9:92:4a:18:06:f9:24:5d:41:07:e5:bc:
                    ec:28:e8:3e:cb:b9:2d:fa:5b:4e:48:14:dc:c9:39:
                    fa:2c:e4:f6:4b:39:87:76:a3:9f:fb:21:75:00:0f:
                    9d:4f:93:dc:4e:77:72:c7:9a:b4:58:52:8c:4b:75:
                    71:c7:88:53:5b:29:e5:74:16:e5:de:91:b9:a9:0c:
                    da:8c:cc:0c:38:f5:ac:7c:f0:ae:59:26:07:05:e5:
                    86:4a:1c:8d:85:f8:0d:ee:4b:2f:2d:1a:90:8d:d8:
                    dc:79:1c:1d:70:e1:92:45:22:1b:5d:26:63:eb:d9:
                    13:1c:34:2f:13:da:18:6f:53:37:42:17:f9:0c:38:
                    5c:a0:f4:55:d6:d9:b8:28:37:87:c5:d7:5c:2c:d2:
                    4c:44:51:52:45:6d:b3:0f:24:94:0c:29:51:c4:3c:
                    88:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1D:BA:08:21:A1:3B:D1:6C:3B:25:F1:EC:83:26:FD:B8:D9:50:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.51.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:45:c2:4e:97:44:55:ab:32:75:be:40:41:97:26:11:66:67:
         00:63:80:45:df:af:c6:5e:1e:89:0e:1d:d3:ac:6a:60:86:c7:
         d3:66:4d:64:32:c1:bd:f3:36:69:12:58:6f:4a:d9:d2:b8:87:
         f7:c0:23:7d:53:40:ff:6c:01:f9:87:72:5f:82:41:42:b5:2d:
         ca:86:7e:cd:9b:26:e7:f0:d6:42:e7:45:1f:08:30:de:4a:e7:
         51:59:28:b8:09:7a:0a:e4:14:b1:5f:43:47:dc:6c:5b:f1:8c:
         c2:f6:a6:c7:e8:10:82:98:7e:96:e0:16:c7:f0:d2:ee:4c:f2:
         6e:5a:49:07:cc:ef:e2:c9:96:7f:1b:be:86:20:7c:2d:69:cd:
         30:81:ad:20:6b:50:a9:c9:20:b2:9f:f6:ed:98:e3:32:09:4a:
         61:56:86:b2:ef:56:40:e8:16:a2:21:7e:99:3b:54:ce:17:55:
         72:54:d0:69:52:ee:a3:7f:75:7f:0e:05:bb:a3:db:40:0b:4c:
         e5:2c:43:cc:58:43:4a:72:9f:7f:3a:43:57:2a:56:36:ea:1c:
         e7:ec:fa:00:ab:20:cc:d8:dc:7b:f1:c1:78:80:df:da:6e:d4:
         3c:5f:44:15:1f:3f:a9:e3:93:e1:7c:10:1c:40:63:a5:00:83:
         52:a4:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:09:00 2025 by rpki-client