Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/bb4f8f51-dffa-3912-8631-c450929a36b7.roa
File:                     bb4f8f51-dffa-3912-8631-c450929a36b7.roa (raw, json)
Hash identifier:          Hwhl1HZqooXeHc2e/iH8VKGfczxKtBw8uJYD6MZKnB0=
Subject key identifier:   E6:4C:C4:2A:81:AF:8F:9E:24:E3:8C:F3:18:8E:B0:97:D2:E1:DD:B7
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F43285849DF5A5DC3B2008F7A675E2380
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/bb4f8f51-dffa-3912-8631-c450929a36b7.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        206.195.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:5d:c3:b2:00:8f:7a:67:5e:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=eeb9d23a-a706-4314-8e4a-3ed51f7f0208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:a3:c8:c8:92:7d:81:83:a8:b0:90:de:bd:
                    a0:a8:bf:65:2f:3f:a7:57:7f:a1:1b:37:7a:f1:0b:
                    3e:25:1f:f5:a5:44:48:18:d6:cf:8f:57:88:88:26:
                    ce:ef:02:76:fa:00:3d:a6:96:e4:d3:fb:4a:65:7f:
                    b5:8d:54:9f:46:26:69:3a:67:0d:7d:37:92:94:81:
                    03:62:c5:7d:c8:4a:49:7f:31:1e:42:c4:4b:0e:a5:
                    9e:87:e9:34:c1:b1:4f:54:5c:03:5f:10:78:03:10:
                    d1:55:6d:ba:a2:9b:7c:ce:b4:fd:48:aa:30:0f:dd:
                    09:d6:f3:12:89:64:7b:47:cb:43:a6:d5:d2:2c:39:
                    f6:be:3a:5f:27:1b:46:af:d6:45:78:14:21:e0:bd:
                    d7:dc:1a:a3:24:18:ff:a9:9d:77:5e:3a:8f:8d:47:
                    1b:d2:30:df:64:53:bc:e7:4a:96:9a:f4:83:5a:34:
                    35:2f:e2:01:69:8f:b9:ab:97:93:be:fd:aa:37:9e:
                    46:80:3b:55:81:aa:db:d9:43:28:5d:ab:ec:5d:79:
                    bc:0b:73:9c:c5:d5:e5:9d:12:71:b1:ef:d3:cc:f6:
                    a7:25:43:a3:64:e1:7a:23:3a:92:cc:52:f3:11:6d:
                    3b:55:c9:c8:a9:a7:17:ea:60:a3:ef:0e:42:12:33:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4C:C4:2A:81:AF:8F:9E:24:E3:8C:F3:18:8E:B0:97:D2:E1:DD:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/bb4f8f51-dffa-3912-8631-c450929a36b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:c6:74:c6:10:15:45:8c:c0:07:99:aa:df:08:01:81:60:
         f6:f3:4b:9c:66:7f:11:24:12:8c:47:74:51:47:9f:1d:25:b8:
         8b:f5:f9:b2:16:cb:84:1e:19:ef:b5:95:08:09:90:46:e4:47:
         23:69:61:f7:b3:e7:65:17:19:b5:da:6d:60:38:b4:3e:5d:8d:
         1f:fa:05:2f:48:ad:ec:99:f6:3f:6c:e2:54:10:45:95:b1:a8:
         5f:5c:19:bf:25:23:0e:70:be:45:30:0b:5a:9e:d1:7a:04:47:
         38:9a:3c:c9:9e:8b:a6:ca:d9:1a:76:54:6a:f0:fa:2d:b9:d0:
         7c:58:2e:a5:71:ee:18:99:62:66:6e:1c:08:70:13:b3:41:fb:
         a5:d5:36:c7:d3:3a:0f:c6:cd:e3:c0:2b:be:91:f5:b8:bf:3e:
         9c:c8:3b:40:8a:44:bc:62:cd:bb:11:57:82:24:c0:aa:6b:3e:
         0e:63:0a:8d:7d:85:0d:fb:40:51:7e:2d:ac:0e:da:ac:80:22:
         ee:ae:2e:93:06:d8:3e:7f:eb:c7:a1:81:65:09:1b:e6:e8:08:
         d1:35:8a:82:78:12:27:cd:4f:d1:e9:fb:83:a7:01:21:44:96:
         5f:d6:32:18:63:c9:94:3b:fe:3e:86:6a:1c:c0:b7:30:60:91:
         c7:a9:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:05:32 2025 by rpki-client