Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d92d84e2-697d-3b38-8393-e84a63856f89.roa
File:                     d92d84e2-697d-3b38-8393-e84a63856f89.roa (raw, json)
Hash identifier:          aqsYadI9evKrQPyvnDk4xaI9+DNx4rECSSVCkl586qo=
Subject key identifier:   22:A5:17:76:37:2B:B7:E5:05:61:06:FC:EB:E1:F9:C8:E1:2C:54:6B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858499DBF3C40F46EEB2AF5BD9880
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d92d84e2-697d-3b38-8393-e84a63856f89.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     7029
IP address blocks:        206.206.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:3c:40:f4:6e:eb:2a:f5:bd:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=fbf88f8d-814f-4364-a4f6-708814729964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:59:ba:18:91:e9:4b:e9:f5:85:45:06:89:
                    dc:20:a4:33:f6:cc:87:ca:dd:4a:a5:4f:3a:ad:e0:
                    e6:db:41:41:b3:c5:af:44:e1:78:69:26:31:57:66:
                    03:ff:e1:34:fd:f5:9c:6c:d9:be:ce:c2:fb:b2:35:
                    26:33:29:48:d8:1b:c2:88:c5:29:11:b5:f9:44:70:
                    22:ce:01:8e:fd:28:b4:dd:4d:94:c1:07:85:e7:a7:
                    81:76:e6:d7:1c:ab:71:64:9d:8c:10:94:cd:b8:6e:
                    9d:eb:f1:c0:e0:0f:72:0a:99:dd:1a:98:9b:4b:7f:
                    4f:39:cc:b2:76:1d:49:1d:da:55:e4:56:46:68:2a:
                    26:bd:66:93:0c:d7:3b:5e:aa:88:e3:8a:e9:14:69:
                    f2:40:e5:64:df:8a:11:69:c1:c3:a8:83:6d:0d:a1:
                    a6:94:1d:86:7a:64:89:b8:e6:48:b6:f8:b5:43:da:
                    14:30:a0:f9:81:49:1d:a4:e3:57:6f:51:8d:2c:cb:
                    b2:06:9a:c8:6c:23:bd:65:f7:39:a5:40:02:8c:ed:
                    3b:89:ce:7e:5a:6b:b8:2c:f5:bb:57:48:2c:45:a6:
                    64:b9:b5:65:e9:e3:cd:4e:2c:e4:d8:1a:3f:15:1c:
                    3d:11:a9:23:32:17:12:f2:33:75:e2:45:c5:9e:0b:
                    20:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A5:17:76:37:2B:B7:E5:05:61:06:FC:EB:E1:F9:C8:E1:2C:54:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d92d84e2-697d-3b38-8393-e84a63856f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:f4:56:8f:76:ca:78:12:ee:c9:40:b6:28:00:26:e9:6a:
         d9:7b:48:41:fd:24:bf:4c:47:0c:93:33:b1:63:bb:d1:9a:44:
         d7:aa:94:b8:40:86:69:60:e5:c3:3d:78:81:e2:f2:6a:3d:fb:
         10:43:b1:21:85:3b:32:41:97:f8:2c:c0:ed:75:9f:17:c4:b0:
         75:a6:2f:8d:95:5d:5d:bf:9e:39:bc:4c:a4:08:7d:e3:dc:ec:
         6f:23:eb:76:9a:17:56:27:9b:1f:8d:fe:69:13:37:e2:76:3c:
         44:c3:eb:a5:54:97:69:62:ae:30:6f:d1:63:84:8b:6f:5e:9a:
         ed:41:30:88:e6:89:8c:57:91:40:4c:84:a1:e5:df:34:75:e6:
         69:bc:5c:af:80:43:b2:b8:5b:76:75:4e:f3:44:24:cc:7e:74:
         d4:ab:14:33:4c:95:3f:61:b1:bf:d7:d4:50:99:33:e8:bd:85:
         e9:b0:e2:db:38:c6:cb:63:fa:d5:52:b7:2b:aa:b9:19:47:1a:
         9d:5b:ee:8a:33:2f:c0:71:70:5c:fa:fc:87:0d:cd:02:a7:bb:
         ee:89:c9:4f:7a:41:20:3a:20:7c:e2:89:8c:72:2d:6d:8d:e1:
         a5:b0:7a:55:a5:3a:f8:28:09:95:65:fd:61:12:bf:73:f1:5d:
         64:05:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:51:28 2025 by rpki-client