Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa
File:                     61cd5006-eb96-38f0-ae08-70b29623b9ec.roa (raw, json)
Hash identifier:          s8tn6tJSsKO9/iGXU25ex4i62rj+kGN3M2+Zdkouz2I=
Subject key identifier:   54:53:2C:6A:E4:DB:3E:B5:1C:A9:46:D3:76:F5:35:0A:E0:E3:B4:5A
Certificate issuer:       /CN=a06ab81f-a6c8-462a-b3e0-52f829f8f687
Certificate serial:       010D0C9F43285849A8E9DE9427011884C19AC700
Authority key identifier: BB:E4:F8:D9:20:DD:C2:23:75:FB:B4:A0:FD:34:2F:65:04:BC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     398992
IP address blocks:        169.197.182.0/24 maxlen: 24
                          2602:fced::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:de:94:27:01:18:84:c1:9a:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a06ab81f-a6c8-462a-b3e0-52f829f8f687
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=73b00b99-33c0-4ace-91fb-8f105c394f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:43:ab:8d:ef:eb:5b:07:25:44:f4:cd:d9:
                    ac:29:dd:65:5d:0a:0a:a6:e4:bc:d0:94:05:7b:7b:
                    90:70:ed:dd:29:b6:d7:58:71:3d:57:fb:88:c7:0e:
                    20:70:f8:29:51:bb:8e:fd:0a:3f:bc:04:98:53:c3:
                    f5:f3:65:08:2a:c0:b5:8f:4f:3e:52:ca:dd:85:c3:
                    a4:b1:11:39:54:7c:a0:61:12:c4:3f:83:69:54:93:
                    bf:b7:d9:51:25:ae:07:a4:5a:93:22:6a:2f:9b:55:
                    78:6d:f2:ae:0f:4e:ff:20:06:cb:35:95:a8:51:59:
                    bb:82:64:13:7b:a2:02:d3:d4:3b:ee:84:e2:78:91:
                    0a:e5:ae:3f:fc:db:ae:fd:98:60:70:1e:01:d5:03:
                    25:10:04:a4:1c:e3:b8:ec:b5:dd:e4:0d:2a:fa:28:
                    58:c8:2d:8b:6f:5a:7d:b0:d1:f5:0f:15:5f:ae:fd:
                    8a:3b:14:0e:48:18:88:17:35:68:36:ad:fa:f1:88:
                    9d:b2:c2:de:c8:90:da:87:5c:a0:d2:05:ac:27:86:
                    8f:e1:2d:a4:9b:70:5d:86:2e:b3:b8:a4:5d:52:71:
                    1b:73:be:24:df:45:a8:55:2f:ad:ea:ff:12:12:cb:
                    f3:59:ab:40:d2:ea:47:fe:e4:72:cf:1c:3a:29:86:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:53:2C:6A:E4:DB:3E:B5:1C:A9:46:D3:76:F5:35:0A:E0:E3:B4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.crl

            X509v3 Authority Key Identifier:
                keyid:BB:E4:F8:D9:20:DD:C2:23:75:FB:B4:A0:FD:34:2F:65:04:BC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.182.0/24
                IPv6:
                  2602:fced::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:7c:79:5d:07:81:f6:0f:1f:da:8a:cb:cd:9c:30:37:5a:89:
         41:54:26:43:84:60:58:f3:68:60:79:e1:5a:87:fd:d3:ce:e3:
         76:11:14:1e:a4:f4:eb:7f:ce:7a:a2:13:cc:18:d4:2c:cd:23:
         33:c2:8b:9d:05:ef:0f:09:d4:7e:83:02:b2:2b:5d:51:e9:60:
         4d:04:17:1c:75:4c:98:76:c9:9f:fe:a0:5b:72:2a:8a:e9:f1:
         bb:f4:ed:5d:eb:e2:62:59:e2:06:a4:e9:22:5c:a1:a3:a2:b0:
         10:ed:27:04:0b:c8:44:00:8e:26:de:b2:f4:e8:b2:5f:c0:ab:
         4f:d5:99:73:fa:1a:dd:25:48:a4:86:20:a7:50:97:12:78:be:
         82:8b:f9:e0:09:14:e7:c2:c3:6e:2b:35:84:fa:98:df:36:88:
         2a:18:6b:24:bd:81:51:66:ca:52:dc:34:68:f5:e9:2b:26:c0:
         a8:4a:6c:62:bd:4c:ae:ee:24:09:6e:5a:51:9f:f9:3a:4d:9d:
         34:ac:90:3a:41:95:89:c1:3c:09:12:e6:aa:49:f0:c8:63:cc:
         1f:ff:00:23:a7:7e:e9:dc:62:b7:7a:2d:68:b4:f6:d1:6d:c5:
         d7:ea:8f:a2:0f:7e:8b:57:20:fb:a7:df:2c:fb:7b:dd:9b:9c:
         41:c8:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:26:06 2025 by rpki-client