Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/9576ffce-6534-327e-b131-7cf3d32210b6.roa
File:                     9576ffce-6534-327e-b131-7cf3d32210b6.roa (raw, json)
Hash identifier:          wPFNIzyEquSf6ExaqW2EJ9Ap1F7Vr02pCN8ijsHdAdc=
Subject key identifier:   2E:7A:84:45:5B:39:C9:53:A4:9A:6A:33:D4:6E:12:E2:CD:C4:0F:FF
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829E8CB755FEA3A1F887380
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/9576ffce-6534-327e-b131-7cf3d32210b6.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:e8:cb:75:5f:ea:3a:1f:88:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=3ff84086-829e-4aed-8085-41d5fcdcff41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:8d:98:70:33:f4:b1:e4:b8:54:0c:60:93:
                    92:57:72:a3:71:28:24:e5:c0:e5:70:ce:2c:26:dd:
                    cc:82:b4:e7:22:b5:84:51:d3:eb:f8:63:6b:df:03:
                    8d:28:80:9d:54:c3:91:ef:39:6a:6c:b4:24:d5:ed:
                    35:81:c0:16:9c:e2:a0:3c:bf:f8:3b:a8:d6:10:1d:
                    e9:3e:21:eb:01:6b:18:f9:ad:a2:ee:9b:a7:68:35:
                    6b:c5:b8:fa:66:ff:24:05:5c:b1:1b:e0:f6:81:00:
                    f8:32:fd:b5:f8:74:8f:e7:c4:71:5c:de:61:0e:e9:
                    a0:37:e1:fa:83:af:f7:59:50:08:6e:cb:ba:46:c8:
                    6f:ac:04:2c:19:b8:1a:72:0f:d3:fa:b3:38:e3:e2:
                    de:1a:d3:ef:6e:47:42:fc:17:77:cd:1c:1d:31:be:
                    76:5c:53:6c:2b:c5:48:5a:57:03:a0:89:3a:5d:cd:
                    16:4b:b5:6d:c9:7a:4e:95:0d:0f:11:ea:87:41:3d:
                    47:41:38:15:27:2b:f4:18:76:ba:1f:6e:21:c8:1b:
                    c1:5d:1a:24:08:b0:e3:a8:ec:36:76:cc:b5:16:ae:
                    2b:bf:ec:02:4c:59:29:b8:c0:d0:86:73:26:33:48:
                    76:29:cf:3d:be:a7:6f:c3:2b:86:b0:30:6f:50:14:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7A:84:45:5B:39:C9:53:A4:9A:6A:33:D4:6E:12:E2:CD:C4:0F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/9576ffce-6534-327e-b131-7cf3d32210b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:50:42:9b:6c:2a:a6:ea:b0:e6:46:a4:72:5d:82:5e:ee:d3:
         a4:e6:3f:cf:2a:6f:ce:4b:5a:80:29:d3:94:7d:53:9e:a8:6c:
         d3:83:71:8c:08:27:8f:1c:bf:24:65:02:83:2a:56:1e:95:0e:
         6a:f3:f9:0e:63:35:6f:d1:6e:6d:39:56:c6:ad:b4:f3:c4:f4:
         0b:22:e2:60:5e:e1:01:ba:59:63:6b:cc:fa:7e:60:a7:52:fc:
         03:3a:f2:16:42:a7:6b:1f:b3:1e:02:3f:e5:bf:c1:ff:b9:a5:
         f0:56:fc:8c:be:17:87:16:bb:d0:4b:cd:bd:26:79:20:80:b5:
         82:06:70:c0:0f:a7:45:f0:43:8d:cd:b5:ef:40:dd:7e:37:f5:
         62:34:68:8b:ac:b0:ec:58:13:d1:c6:aa:ca:c0:93:84:24:91:
         37:ee:2a:21:3a:c1:c8:07:62:43:4e:cc:a2:bf:75:4f:44:60:
         a5:89:2c:3e:53:63:78:de:f3:fe:ac:b5:a2:90:35:2a:1a:ef:
         01:6d:25:dd:06:1a:ff:2e:be:19:89:fa:c5:bf:43:ef:16:14:
         a4:f2:34:6c:15:36:3e:ca:9b:d2:98:b6:ce:43:f0:27:19:8c:
         3f:26:5f:a1:f9:2d:d3:ec:91:30:3d:ea:81:28:c3:4d:2a:02:
         28:0d:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:21 2025 by rpki-client