Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/e96caa58-3818-374f-85c1-a2e432451e56.roa
File:                     e96caa58-3818-374f-85c1-a2e432451e56.roa (raw, json)
Hash identifier:          jFkI79y28PdvP1uGQJ0rdIKiJDNB5cXVOJWrqsqvL0A=
Subject key identifier:   3E:06:3E:2C:F9:44:85:DE:04:97:EB:3E:A9:06:B3:5A:CF:66:2D:FA
Certificate issuer:       /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial:       010D0C9F43285849E7BA801044EDEA419BEAAA00
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/e96caa58-3818-374f-85c1-a2e432451e56.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     53991
IP address blocks:        206.188.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:80:10:44:ed:ea:41:9b:ea:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=9da9dd4b-ade7-4305-8c6b-864089751ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:69:69:de:de:9e:44:84:94:d3:6b:0a:dd:
                    c0:4f:18:72:ed:55:a5:09:70:5d:61:ba:2a:6a:c2:
                    c5:08:9e:f4:31:7a:2c:d5:a6:90:86:fc:c1:ab:f4:
                    99:ee:ae:e1:dc:79:39:d3:0e:c1:fe:0a:fa:39:c7:
                    d2:d5:8c:6a:f3:0c:31:76:f7:59:a0:c9:8e:60:5a:
                    52:1d:4f:2f:89:0b:34:0b:4b:c8:bd:53:3c:6b:b6:
                    62:7e:ac:e1:36:19:19:54:b8:84:7a:1e:39:b2:64:
                    a5:ad:2e:9f:c2:45:f1:81:56:88:ad:6e:8c:a5:33:
                    3f:8b:e3:5e:9e:f9:38:9f:5d:04:8b:bf:00:8e:99:
                    a3:c0:57:96:ec:9a:01:45:2b:08:e2:5c:ef:24:ad:
                    1c:bc:b8:4b:5e:b4:53:2e:af:c8:d3:69:69:30:fe:
                    5d:81:31:f3:a9:2a:39:48:26:b0:94:ee:22:d6:22:
                    03:7c:94:c5:3c:f3:9d:e4:16:c2:be:29:f5:a2:22:
                    b2:d2:71:3d:4d:11:49:a0:fa:37:68:3e:3a:59:4d:
                    f4:a1:93:98:44:2e:58:0c:3c:b5:4c:03:d8:bc:24:
                    8e:68:00:10:4a:91:f6:43:8e:46:f4:25:b3:db:37:
                    05:9a:41:b8:53:02:75:14:61:c4:41:cc:65:20:d0:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:06:3E:2C:F9:44:85:DE:04:97:EB:3E:A9:06:B3:5A:CF:66:2D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/e96caa58-3818-374f-85c1-a2e432451e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:bb:2e:a4:49:26:28:8e:77:1b:31:44:bf:85:ef:39:90:
         98:c6:2e:7c:3b:f2:c7:ad:a6:84:0d:21:92:3d:45:15:ab:d8:
         8c:a7:5d:03:1a:69:e1:18:c8:aa:41:b4:48:d2:00:b7:d9:f2:
         26:e6:2c:5d:1a:8c:fb:ba:aa:24:50:e7:77:aa:a8:fd:89:ae:
         bd:cb:1e:44:d2:60:4a:44:bf:51:40:90:57:10:3d:23:c7:ce:
         59:ed:a9:cd:e4:09:24:ee:06:0e:b4:e2:be:b5:6e:c4:97:20:
         76:64:b7:71:49:0f:50:75:c8:7d:69:19:63:9f:16:f6:fd:e1:
         47:b7:c7:85:5d:d1:70:2b:08:ec:96:19:eb:46:35:7e:f6:0b:
         47:9d:a7:16:ec:81:c5:12:ed:de:76:5d:2e:22:34:07:38:ce:
         20:f6:12:ec:2b:a1:89:8f:5a:c3:cc:f7:2e:d2:3c:df:b9:27:
         96:2d:e9:01:25:05:76:c7:0b:d1:42:39:2f:f4:52:0a:79:0c:
         8f:ab:19:3c:ab:7e:49:df:67:4a:57:84:1e:f8:02:f4:5f:a6:
         c6:b0:97:e1:89:76:0e:d1:5b:37:3a:ac:58:8f:67:32:87:a9:
         e5:fb:7b:c2:e3:3c:b6:37:71:e2:cd:d2:0c:13:9b:43:8b:d7:
         56:8b:5a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:51:48 2025 by rpki-client