Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/282d2005-2c51-3e25-8999-3772ede60c07.roa
File:                     282d2005-2c51-3e25-8999-3772ede60c07.roa (raw, json)
Hash identifier:          hC5oqZjCr8mUoz0NzOJakdixJP73Gi7mfEvUm51li4s=
Subject key identifier:   5A:5A:12:6C:77:9A:BF:23:F0:43:37:98:96:C3:45:FE:05:C6:DF:94
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829E02E37791B7F7089B100
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/282d2005-2c51-3e25-8999-3772ede60c07.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:e0:2e:37:79:1b:7f:70:89:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=13cd3430-85b5-4786-bc79-ebcfe65eb355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:23:e5:6e:ef:5b:bc:37:6f:99:65:21:a8:
                    24:c9:83:33:1f:70:67:0c:7c:03:81:b1:89:df:f3:
                    e0:81:3c:45:b0:6a:9e:9d:5f:57:70:ee:5c:04:8b:
                    f9:d8:b0:06:81:ca:b9:dc:68:6f:00:e7:e0:08:9f:
                    22:df:72:20:79:82:51:09:38:6d:a4:b4:0a:bf:c2:
                    b8:f1:4e:83:b1:e8:17:8c:42:1b:cc:22:30:2a:c8:
                    7f:a0:2f:d0:a5:2b:b0:78:29:65:98:2b:ee:02:56:
                    9f:89:ff:1d:b7:05:3c:0e:ac:59:61:56:12:4e:03:
                    71:12:9f:1d:e0:06:f8:d7:59:81:c0:ba:89:1d:49:
                    50:0d:53:48:44:44:cc:12:2b:a2:57:12:c4:49:48:
                    84:e7:d1:04:3c:a1:a4:a4:76:11:4a:c5:b2:2a:76:
                    52:79:65:80:95:52:a6:76:bc:93:88:65:c9:9d:61:
                    1d:40:f2:a4:4e:49:98:e4:3f:ed:3b:35:cd:af:b0:
                    c9:33:29:14:74:4c:ff:6a:bf:25:2d:f4:ce:d1:71:
                    9d:29:eb:31:a6:df:db:64:f2:58:a0:4e:ff:c8:24:
                    1b:d4:c0:e7:ee:99:d9:35:a9:d7:9f:6b:4a:37:c9:
                    0d:4e:d1:fd:4d:a9:c8:b0:6a:9d:27:9d:d9:ed:ed:
                    4a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5A:12:6C:77:9A:BF:23:F0:43:37:98:96:C3:45:FE:05:C6:DF:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/282d2005-2c51-3e25-8999-3772ede60c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:08:bb:4c:4f:27:a8:7c:92:9c:b8:0d:0f:95:92:45:da:86:
         1d:97:7c:eb:50:8d:f9:67:06:b3:79:d2:5f:51:e3:8c:66:1b:
         ee:1b:c4:d9:6b:25:9c:2c:70:c0:78:46:5a:db:e8:25:b5:6f:
         15:c2:b3:95:a6:07:3d:1b:bc:9c:f9:90:99:c3:53:10:4f:41:
         81:b1:22:04:68:d2:d1:60:ea:f7:dd:ae:da:e6:2f:22:48:76:
         c3:0c:29:12:41:e2:9d:cf:39:58:ed:39:49:d5:de:f6:d8:75:
         e9:40:17:d3:62:10:68:c7:1a:b7:a1:b8:67:9c:e1:d8:61:21:
         aa:4a:7e:0e:e7:b0:ca:e3:9a:76:22:97:62:59:8e:c8:5e:88:
         d4:25:15:3c:d6:a9:64:9e:9e:5e:90:1e:3e:2b:2c:04:0c:99:
         95:cf:21:8a:da:0e:2c:cb:52:47:65:c5:43:04:c1:4c:d7:b3:
         c3:1a:24:9b:ca:74:63:27:ca:42:6b:2e:9e:47:c7:de:95:40:
         66:82:0e:6d:3e:b1:0e:7d:ea:7c:39:79:44:b4:88:76:8f:54:
         f3:c6:a1:a0:77:3e:46:74:d3:c4:92:3f:90:5d:17:00:8d:73:
         e6:9d:7e:5a:0d:34:08:00:9d:73:c7:18:37:a7:c9:40:4f:97:
         57:03:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:29:09 2025 by rpki-client