Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6b9bef74-72c2-37e3-a251-73df01a7d6cd.roa
File:                     6b9bef74-72c2-37e3-a251-73df01a7d6cd.roa (raw, json)
Hash identifier:          C44gkxCRmfOjGLLwrdwwv1RDGwFJvCPYGCfH6oNHuiE=
Subject key identifier:   E1:CC:D7:52:78:A4:B1:2E:33:A7:32:95:A2:D5:5A:DF:B3:D8:3D:11
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285849BF3F60F1FA84F7553DCF9450
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6b9bef74-72c2-37e3-a251-73df01a7d6cd.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     376
IP address blocks:        206.167.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:60:f1:fa:84:f7:55:3d:cf:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=5e1073ba-3451-4295-847b-42b54f5e9eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:cf:f9:1a:a6:22:23:50:6d:8a:81:f8:d6:
                    93:37:ef:55:bc:fa:39:c0:31:7a:c7:a0:47:6e:66:
                    c7:fb:7a:b2:61:a6:59:8f:cd:db:f2:a2:4e:9b:61:
                    62:dc:ad:09:1b:5e:1d:7b:ab:aa:76:c1:d3:01:02:
                    38:9c:cd:70:63:8f:22:50:b1:2e:4b:0e:69:7b:88:
                    b6:1b:7e:42:e4:d8:15:1d:95:9f:18:66:aa:eb:b3:
                    a1:63:fd:08:6d:72:64:26:0e:80:a1:3c:79:90:bc:
                    d9:3f:0d:6e:15:8e:d2:78:91:8f:86:a6:6c:3a:39:
                    b9:aa:c8:d0:d7:1a:1b:41:0a:32:52:4f:12:4e:b0:
                    01:20:45:76:22:80:d7:fd:d6:f2:35:10:b6:00:e4:
                    84:86:c5:d9:e6:eb:b0:0f:1a:3a:17:2c:32:ff:42:
                    b3:14:a8:4a:87:9f:9f:05:35:8a:55:e5:7c:1b:6c:
                    e3:3c:8c:39:5b:f5:16:07:92:ac:00:96:86:83:f5:
                    71:68:f9:2d:11:ca:99:27:96:4f:18:73:19:57:5f:
                    03:4c:7c:7a:2b:92:57:75:63:e4:f7:2a:a8:69:79:
                    ee:47:c9:4d:f6:fc:81:92:73:67:d9:4a:46:24:5b:
                    5c:37:31:16:cb:3c:72:c3:20:62:1b:36:76:1f:c3:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CC:D7:52:78:A4:B1:2E:33:A7:32:95:A2:D5:5A:DF:B3:D8:3D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/6b9bef74-72c2-37e3-a251-73df01a7d6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2d:77:7d:90:a6:85:ac:99:a9:68:eb:b4:88:57:f7:5b:87:
         32:9e:a3:91:87:5e:93:7d:67:66:77:5b:b1:27:4a:8d:1d:b8:
         ea:c6:e3:fc:8e:61:8c:c7:f6:38:49:50:04:af:8f:0c:02:fc:
         ad:44:fe:40:fa:31:b1:98:c8:c8:e1:50:e9:cd:e3:4e:43:2b:
         0c:7f:23:9e:95:f5:6a:76:4b:fb:d8:d1:f5:98:e9:b7:ce:1b:
         44:a7:2b:26:38:f1:ce:bc:5f:d0:94:69:08:17:c0:54:50:b5:
         bb:1e:a1:9c:e2:c9:3d:9e:ca:d8:14:83:1a:36:65:31:25:b7:
         b7:1c:cf:81:2b:24:7b:79:33:d8:56:51:e2:34:5c:ca:27:77:
         34:12:14:43:86:75:10:2d:ae:9a:a5:a2:b8:db:bf:ed:61:9a:
         85:2e:70:5b:b5:06:e3:b0:44:c1:29:d0:76:f4:38:f0:15:e1:
         cc:20:c9:19:04:eb:d6:43:f4:26:5c:6b:9b:95:60:83:b9:52:
         b4:d6:0e:3c:27:55:4d:cd:89:d2:05:96:a2:c4:2a:f1:ed:12:
         e0:be:36:5d:19:90:f9:7a:e5:e1:27:07:2d:61:62:34:2c:de:
         ce:24:f0:ef:6b:d8:0c:39:21:a7:84:d2:fd:70:08:f7:f2:fd:
         03:07:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:27 2025 by rpki-client