Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa
File:                     e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa (raw, json)
Hash identifier:          1YilD/zh8PoYbKI/L3MHI+JOVZtV3dKFeYOPoXOulJc=
Subject key identifier:   FF:B3:38:97:E0:3A:7E:EA:8A:BE:E2:82:C2:47:33:8E:B7:35:34:4F
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584961B99005A55225E110627180
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        192.206.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:90:05:a5:52:25:e1:10:62:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=bf18adfd-4962-4fad-b2d2-16418835fefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1e:1c:6d:35:38:67:17:30:65:e7:7f:94:6c:
                    fe:13:30:00:97:c0:6f:ea:8e:35:fb:59:43:cf:8a:
                    49:c4:23:8d:29:13:0c:85:47:61:ed:c9:c7:00:9f:
                    71:36:ef:c3:ca:cd:ba:7e:4b:01:22:21:5f:20:37:
                    18:d8:2f:ca:57:51:da:2f:de:4e:2c:fb:12:4d:56:
                    79:65:6c:87:8a:11:6c:a1:a5:e6:64:20:17:ed:ec:
                    36:9d:3d:b7:63:70:27:c9:9e:4b:bb:1e:5e:01:f8:
                    08:78:59:f8:48:76:3e:91:e0:a7:49:3f:8a:59:22:
                    5d:61:be:fb:95:83:0d:6e:57:01:27:5f:6f:20:b4:
                    ed:9f:e9:96:36:72:ed:7c:97:01:96:3c:f0:74:c3:
                    e6:68:23:45:49:a4:06:3f:ff:e9:74:57:25:8f:ab:
                    f3:39:58:98:99:ef:1d:bf:27:7a:0a:c4:2e:34:a8:
                    c2:99:84:5d:a2:63:f6:1e:b3:4d:db:f1:46:ba:7a:
                    ea:10:5b:af:f8:34:36:95:ab:eb:e4:9e:67:ff:b0:
                    0c:f3:de:f6:ac:cb:b5:58:1e:e3:d8:90:d8:83:88:
                    ed:f3:7b:b4:64:cf:4c:0a:08:4e:0f:21:db:a1:70:
                    47:9a:49:19:66:90:ea:98:f4:4c:77:89:31:3d:56:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B3:38:97:E0:3A:7E:EA:8A:BE:E2:82:C2:47:33:8E:B7:35:34:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:2a:a3:66:c9:e5:09:46:85:47:4d:c6:fe:87:c8:37:ac:6f:
         bc:23:04:66:0d:63:e4:4a:43:9c:4d:39:a9:b5:71:19:74:a7:
         ce:aa:7d:7b:68:7e:e0:30:ed:c5:07:9f:e7:44:c1:5e:52:d8:
         3e:68:1a:9a:3b:f5:5b:7a:c4:d2:b9:86:07:3e:1e:86:d0:ed:
         8f:ec:17:a6:fe:98:5d:90:d5:8e:df:2c:93:19:51:b4:15:74:
         86:98:d8:3a:33:75:a4:5a:f0:be:80:8d:fc:bc:9e:69:26:4a:
         d8:62:5a:6e:7f:c7:e0:de:e7:d9:0c:02:0e:37:3c:85:4f:2b:
         35:6d:63:44:cb:9b:bb:6a:76:ff:4b:48:03:b8:9d:07:f0:94:
         ad:b4:e8:fb:a2:aa:cc:a4:70:bf:6b:f6:4a:62:fa:f1:2e:98:
         15:38:c0:30:8c:3b:cb:14:5a:e8:aa:80:bc:23:08:29:11:76:
         44:c3:71:77:37:23:ff:57:b4:66:45:5c:5b:95:70:25:0b:0f:
         11:83:06:c3:f7:8a:6c:42:6e:00:29:ac:6b:a9:6b:33:cf:18:
         c5:9c:f2:d6:47:52:e7:53:63:d8:ca:bf:6e:2f:dc:53:7f:ef:
         7b:10:03:a6:23:90:47:53:32:12:58:3c:38:5f:09:94:45:6b:
         01:1e:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:14:37 2025 by rpki-client