Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76c324c1-6a23-3174-8f54-eab88a4baa0c.roa
File:                     76c324c1-6a23-3174-8f54-eab88a4baa0c.roa (raw, json)
Hash identifier:          uGMIaqrhp24/qk1FHGb2sGrCkMF+9YiL/LOomkprC6A=
Subject key identifier:   64:8E:64:FE:3B:00:6F:D8:3C:F9:3E:9A:77:C9:A5:6B:6D:38:CA:6B
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849A1613948D31D235EC0C5EA80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76c324c1-6a23-3174-8f54-eab88a4baa0c.roa
Signing time:             Thu 24 Apr 2025 08:14:52 +0000
ROA not before:           Thu 24 Apr 2025 08:14:52 +0000
ROA not after:            Wed 23 Jul 2025 08:14:52 +0000
asID:                     9009
IP address blocks:        206.123.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:61:39:48:d3:1d:23:5e:c0:c5:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 24 08:14:52 2025 GMT
            Not After : Jul 23 08:14:52 2025 GMT
        Subject: CN=f4e1954c-3d7f-4e4e-b142-0ba9f7d15493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d3:1f:50:8d:fa:02:cf:3e:fa:e0:ae:c4:59:
                    7f:1c:eb:da:62:ab:d2:5e:33:ef:4e:18:74:ae:03:
                    5b:13:8a:52:d6:90:0d:5e:30:d7:9f:b1:ae:e5:70:
                    7a:d1:9d:a0:75:21:8e:3b:f8:68:58:4c:3a:46:6e:
                    e8:e0:67:e6:64:85:9b:17:b0:e4:64:c6:2e:7a:ef:
                    6b:b9:4d:2e:8e:03:21:9b:8b:60:aa:e0:cf:55:6d:
                    83:e0:36:97:7b:05:80:0b:59:66:16:35:c7:af:ef:
                    eb:6b:53:8b:e3:11:f2:b5:23:4b:95:1c:8b:c5:5e:
                    b4:8a:e8:1a:d2:d4:0c:15:6c:21:db:b5:30:c9:1a:
                    5d:fe:f8:33:4d:6c:40:44:f0:2d:49:89:cb:3c:38:
                    ad:c6:01:a4:76:60:d3:f7:a5:2c:5a:0a:e5:ff:20:
                    35:6a:fe:77:e6:b7:1e:f5:dc:e4:30:23:f6:cd:60:
                    85:6e:2a:b5:db:83:aa:41:0c:2b:5b:eb:f9:57:c7:
                    0e:cf:1f:4f:ab:fe:d0:5a:20:44:09:55:e9:81:c0:
                    d1:d1:da:ff:9a:3f:ef:fa:a3:de:5e:80:76:7d:2a:
                    fb:96:6f:c9:bd:e7:e3:7f:91:bd:e6:f6:f5:86:58:
                    e6:55:1e:12:3f:9d:96:c4:77:e7:3c:3e:63:8a:cf:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8E:64:FE:3B:00:6F:D8:3C:F9:3E:9A:77:C9:A5:6B:6D:38:CA:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/76c324c1-6a23-3174-8f54-eab88a4baa0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:e9:df:c2:ae:28:c6:c3:e7:c6:75:eb:55:5c:cb:52:44:
         13:08:7a:86:ed:38:3b:6c:66:70:c6:3b:f7:3f:4c:26:20:8b:
         c5:bd:58:45:da:d5:60:da:c2:fb:36:64:cb:96:64:dd:9d:5e:
         68:a4:74:f0:f7:a1:4b:9c:4d:40:f6:f2:e1:65:f4:8c:2a:e8:
         4a:9f:0e:54:99:c1:4c:26:d1:c8:57:25:17:14:01:10:68:27:
         12:2f:e5:c7:a8:f4:94:fa:bf:74:90:65:df:70:60:23:19:ee:
         b7:81:9b:02:1c:ce:74:7d:b5:71:e8:de:fb:75:85:3b:34:d0:
         c8:f2:4e:d0:ac:91:e8:19:73:95:52:87:b9:fd:9b:b4:b4:a0:
         07:9e:4e:f6:90:54:90:86:f0:8f:12:11:7f:25:61:f1:dd:47:
         fc:b3:e2:c8:c6:c5:99:1a:5b:a1:5e:49:e6:37:85:37:f7:b5:
         91:12:86:96:89:bb:5e:71:0f:37:82:b4:6e:08:11:4f:4c:62:
         91:93:f7:54:47:8f:d4:c1:4a:0c:da:0d:4b:90:b4:bb:a4:dc:
         8d:91:7c:fe:60:ee:83:bb:d2:16:87:ee:33:59:72:56:8e:1d:
         a0:5f:4e:c4:be:17:48:9d:d7:9a:68:0b:14:c1:1c:48:ac:5a:
         f7:94:f7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:24:56 2025 by rpki-client