Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/bd12479a-3542-333c-ae66-e6effd0880bd.roa
File:                     bd12479a-3542-333c-ae66-e6effd0880bd.roa (raw, json)
Hash identifier:          Aqsgj9KIVuP5OSkR7EELOlp6I0JsTl34n1sgbm6mywQ=
Subject key identifier:   7D:35:8F:4A:60:32:BC:AA:98:F6:AA:54:08:D6:4B:DA:A3:47:05:EB
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C05767E7ADBC0A7055C6380
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/bd12479a-3542-333c-ae66-e6effd0880bd.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     393740
IP address blocks:        206.180.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:76:7e:7a:db:c0:a7:05:5c:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=82c9b84b-7e8a-4678-b82f-39890945bce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:e6:db:b6:9e:e2:55:2e:d9:44:5e:47:53:
                    e9:47:a6:0f:57:24:db:92:b9:0f:86:64:61:3c:14:
                    0c:c3:74:70:09:91:ce:f1:79:4c:93:0b:6a:e4:1b:
                    a4:10:9f:df:d9:98:05:61:52:fb:9e:01:e2:58:f5:
                    d4:19:4c:d5:5f:5a:9b:5d:c3:2f:b5:ef:37:77:62:
                    e8:0f:8e:ba:45:3f:a9:60:37:d2:ba:e9:69:a9:df:
                    60:09:0e:76:96:5a:3e:10:51:96:27:5d:88:e6:e6:
                    00:b5:63:20:61:71:ef:e8:d3:8c:73:da:a3:80:3a:
                    9f:fa:8a:22:b8:96:04:bc:d7:b6:19:76:cf:bf:f9:
                    c1:e1:32:95:7d:7c:db:f9:04:73:3b:6d:80:17:a2:
                    2b:5b:29:31:f4:75:6b:5f:5d:3f:01:9d:31:a3:a4:
                    18:99:3e:5f:03:0e:20:c2:13:7c:e0:db:c9:cd:83:
                    cf:db:23:ef:7a:4a:85:b1:31:95:73:8f:87:dc:43:
                    d4:af:db:c2:53:3c:73:cd:6b:1d:3d:44:7a:d4:8a:
                    84:a7:8f:41:81:60:43:01:f8:33:f4:e8:a9:02:86:
                    17:41:ef:74:ef:3f:03:83:7a:c1:61:13:14:11:f9:
                    b5:ab:91:83:59:f5:5c:15:2b:a0:e5:32:8f:de:69:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:35:8F:4A:60:32:BC:AA:98:F6:AA:54:08:D6:4B:DA:A3:47:05:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/bd12479a-3542-333c-ae66-e6effd0880bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:00:c6:82:49:b1:b0:36:f5:66:45:9b:0e:f3:3c:c1:f8:a3:
         be:05:8e:fe:3e:3c:73:68:07:56:be:1d:da:9b:a3:59:4a:55:
         53:dc:e2:ca:50:0e:87:8b:34:01:9f:0f:f1:f1:94:6e:31:4f:
         c5:6c:c8:26:93:ff:6f:b8:8b:16:30:af:12:64:61:ac:fe:55:
         77:f4:cd:34:db:b9:f0:09:5c:7b:5b:3e:84:de:f0:3e:e7:74:
         be:3b:58:54:5e:22:c6:7a:7d:b6:2f:ca:4c:31:4d:57:3e:41:
         e2:7c:79:59:aa:c9:d8:82:73:19:4c:2e:ac:5f:84:ef:57:56:
         3c:67:0e:29:e9:52:24:18:d9:5c:b4:03:0c:83:ea:0d:68:0f:
         fb:24:1e:be:96:0c:f5:e7:6c:14:8e:ee:6f:0c:12:3f:47:89:
         ae:e7:6f:83:ae:55:ca:70:71:4c:78:5c:d1:9c:37:ec:1f:d7:
         02:91:35:52:ad:21:06:2b:24:d3:cb:ea:96:33:cd:3d:5c:72:
         c9:4d:cb:ea:13:cc:cc:81:52:9b:11:fd:b8:4f:e5:4a:d3:b9:
         d6:bc:d0:fb:f9:19:52:7c:89:62:4a:76:ae:77:ed:95:5a:14:
         09:fa:38:b8:41:c9:f7:d8:51:8a:7e:0f:b8:63:c7:ac:1e:a1:
         ce:61:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:31:14 2025 by rpki-client