Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/96f40c4e-eaed-3729-8b73-8d30b44b2ec9.roa
File:                     96f40c4e-eaed-3729-8b73-8d30b44b2ec9.roa (raw, json)
Hash identifier:          OecXLu82TnFtCgkMFabnSvyRlRB9IEB7NFwylhpALXY=
Subject key identifier:   BB:F3:B5:69:17:FC:9C:E2:A4:84:B6:B7:99:00:D6:4E:D5:A4:9B:88
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F43285849F715136083C45ED6DF27F290
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/96f40c4e-eaed-3729-8b73-8d30b44b2ec9.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     26848
IP address blocks:        206.195.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:13:60:83:c4:5e:d6:df:27:f2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=5bb6534a-5720-45ee-bcf3-f8279e8686b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:a6:06:20:50:44:ad:8d:d5:62:c3:66:94:
                    7d:78:ee:68:15:64:24:e0:ab:f4:08:90:94:c4:07:
                    cd:1f:c8:66:b5:9b:72:0b:25:50:c2:8c:ba:47:0b:
                    b2:fc:c1:c7:5c:43:df:9e:99:7a:3d:8d:da:b7:fb:
                    84:14:ae:fd:44:cf:2c:60:6b:34:18:da:99:5f:08:
                    11:93:6b:57:d3:6e:8a:a7:dd:a0:85:10:33:41:d2:
                    fa:43:8e:a6:f7:94:46:53:bf:26:b0:56:ff:8d:e8:
                    b3:ac:87:58:6e:1b:5b:1c:9f:3f:e7:e8:d6:23:f8:
                    6b:ba:70:df:33:ad:95:42:15:5d:81:08:7f:a7:9e:
                    4b:19:3d:c3:82:d1:54:a3:07:79:db:bf:17:80:63:
                    fb:9f:f5:7d:06:d0:f4:9f:93:57:77:50:3e:b7:88:
                    d3:08:e2:77:e1:38:b4:ea:e1:0d:3c:6b:12:61:ad:
                    48:88:a8:a7:8c:cf:e9:fc:f1:ae:2c:42:31:ac:13:
                    08:8e:8e:71:0a:3f:85:57:65:fa:32:90:74:d8:ef:
                    55:ce:5e:cb:70:78:2f:d8:15:80:55:4e:15:a9:ec:
                    35:23:b0:f4:d6:0c:70:ea:91:7d:11:c9:a2:03:25:
                    a6:c8:42:f0:e3:fd:52:2f:91:0b:40:5b:98:d1:d6:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F3:B5:69:17:FC:9C:E2:A4:84:B6:B7:99:00:D6:4E:D5:A4:9B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/96f40c4e-eaed-3729-8b73-8d30b44b2ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5e:96:6e:cb:fd:9a:66:e4:6a:19:c6:93:92:a2:fe:88:e9:
         89:1e:ae:5d:87:47:c0:7f:85:a1:da:0a:35:54:5e:3d:bf:f2:
         c4:57:62:8c:fe:3e:22:7c:ef:d5:03:50:8c:e0:cb:4f:48:df:
         60:28:c6:1a:a9:c1:f2:58:31:1b:e5:e4:eb:9b:b7:89:97:65:
         54:f2:d6:fb:88:b2:15:de:cd:80:39:c8:df:bf:3f:a0:2a:52:
         f9:a8:41:73:99:02:52:56:eb:be:81:b4:c5:c4:6b:1d:82:45:
         22:f0:d6:03:07:a3:c5:c3:f9:9d:73:b7:3d:e3:90:65:c8:13:
         47:62:4a:3f:13:c2:cd:b5:1b:45:46:0b:80:03:ca:4d:d6:91:
         93:9a:cb:cf:a5:5a:cc:5f:13:e9:0c:2a:8f:f6:b7:3b:23:17:
         9a:47:8c:d3:02:ad:73:1c:06:a8:ed:0f:95:e4:c8:79:19:2c:
         16:3d:8b:9d:81:7b:09:0f:b3:68:8c:e7:26:3f:a4:19:1b:9d:
         53:81:17:f9:46:50:06:f9:71:38:0e:d7:80:6d:53:86:6b:48:
         4e:82:f7:3e:b1:69:0d:a5:dc:6c:a0:4f:f7:cd:d8:fd:1e:77:
         a9:e9:4a:6f:04:83:18:9c:8b:2d:6d:45:a4:1b:e6:73:a6:2f:
         ec:0d:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:34:14 2025 by rpki-client