Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/6ee2afdd-3b14-3688-a193-2f9eb26db7ca.roa
File:                     6ee2afdd-3b14-3688-a193-2f9eb26db7ca.roa (raw, json)
Hash identifier:          35LlFRd9Vbe+bbisPiKY75bg91jYWML7OhMcw4/K/O0=
Subject key identifier:   D5:0F:3D:31:00:0C:72:72:51:D2:80:B1:C8:F1:FB:E4:82:34:03:3B
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F43285849730A155B692AEFD6218653A0
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/6ee2afdd-3b14-3688-a193-2f9eb26db7ca.roa
Signing time:             Mon 07 Apr 2025 17:52:06 +0000
ROA not before:           Mon 07 Apr 2025 17:52:06 +0000
ROA not after:            Sun 06 Jul 2025 17:52:06 +0000
asID:                     3354
IP address blocks:        206.254.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:0a:15:5b:69:2a:ef:d6:21:86:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Apr  7 17:52:06 2025 GMT
            Not After : Jul  6 17:52:06 2025 GMT
        Subject: CN=293b3895-a266-4fff-baeb-ab874c7fb06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:cf:1b:5e:73:f4:ef:0b:10:78:30:7e:62:
                    a0:be:fc:2b:23:e7:27:73:98:ca:cf:bd:d0:3f:78:
                    ed:56:40:49:72:2b:0c:7a:fd:00:a7:cb:4c:cd:20:
                    bb:65:9d:36:49:94:6f:14:6f:97:b9:b3:6e:72:aa:
                    b3:8d:0f:23:bd:6f:55:f3:7e:ad:34:80:e8:da:25:
                    c3:35:6e:5b:19:1c:9f:55:d1:f9:ac:bb:8d:ef:92:
                    80:cf:49:1c:96:3e:c3:ef:18:b4:4e:c3:21:bb:0c:
                    72:69:8e:e6:81:90:79:82:09:2e:59:23:34:fa:a3:
                    81:be:b3:23:57:8c:6d:09:bf:62:f6:d3:d0:8b:75:
                    56:7f:b8:1a:2d:41:d9:2e:d2:c1:d9:b2:0c:88:46:
                    73:1c:c5:8b:1c:1e:e2:34:39:52:52:fa:c2:fa:fe:
                    a3:9a:d3:8f:6e:5d:29:d4:03:f2:55:0b:ce:ca:59:
                    58:88:83:25:52:ef:ce:57:13:3d:a1:65:de:ff:a1:
                    9e:d7:a1:64:bc:4f:51:5f:bf:fa:98:89:ba:ac:0b:
                    38:22:a4:13:ce:16:3c:f1:df:a0:4c:2f:6c:4a:86:
                    17:4a:e1:e6:13:ea:08:32:0a:9c:4b:26:5a:65:3f:
                    a8:27:4c:74:08:91:7f:4f:ce:0e:7a:c1:88:9e:0c:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0F:3D:31:00:0C:72:72:51:D2:80:B1:C8:F1:FB:E4:82:34:03:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/6ee2afdd-3b14-3688-a193-2f9eb26db7ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.254.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5c:48:52:ab:59:bc:b2:d3:91:42:9d:3a:6c:8f:a0:7f:f7:
         84:fc:a8:70:ec:dc:34:08:7d:ac:02:df:41:d2:e9:61:45:2a:
         eb:57:36:7b:58:a1:cb:38:90:4e:bc:41:0f:b5:9a:76:93:77:
         e7:e5:24:fd:56:5f:5d:5b:b7:e1:12:d5:d2:f6:34:84:16:86:
         2d:f0:0e:e8:c4:86:e8:da:bf:46:6b:37:aa:b4:aa:cf:89:81:
         92:6a:c6:5a:0d:01:68:87:ba:ca:8d:79:3b:ea:12:38:55:33:
         43:c6:60:d2:a0:11:1c:c5:d9:a6:f0:47:ef:43:4f:85:fa:6f:
         67:c5:e5:84:37:f2:1c:5f:76:27:42:db:bf:9b:90:3a:32:b7:
         da:e6:8f:35:cc:b9:98:e5:eb:d8:06:df:a8:4e:d2:51:79:2c:
         c0:39:5a:b2:2a:70:34:68:26:4c:14:13:62:c9:24:d5:b3:9b:
         bb:21:89:23:3d:b0:fe:e5:da:24:16:1d:e9:f8:a5:d4:78:8c:
         76:e2:b8:a5:5b:ef:cf:f5:16:86:3e:cb:12:93:52:04:89:aa:
         08:d9:a3:3b:c3:0e:33:f1:e9:c3:9c:3d:d8:e7:53:81:f4:c4:
         a3:22:19:f8:39:75:d6:c0:cc:20:38:e2:ef:e5:3f:04:ee:1e:
         64:bc:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:13:17 2025 by rpki-client