Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa
File:                     9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa (raw, json)
Hash identifier:          DvqhqCItfMBNGbhDNPjkblBO+Zfgn0kFrExZeBWcQHs=
Subject key identifier:   EF:B2:86:95:DB:8D:DB:31:04:E9:78:9F:E9:B4:3E:27:52:21:9D:78
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F432858499AF48D5DA3FA30F1D694F8E0
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     0
IP address blocks:        206.53.168.0/23 maxlen: 26
                          206.53.173.0/24 maxlen: 26
                          2606:a980:0:2::/64 maxlen: 64
                          2606:a980:0:6::/64 maxlen: 64
                          2606:a980:0:a::/64 maxlen: 64
                          2606:a980:0:b::/64 maxlen: 64
                          2606:a980:0:c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8d:5d:a3:fa:30:f1:d6:94:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=0d708bdb-2f05-4a6c-bcfa-865cac79a551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:c8:04:ce:27:d2:42:67:cd:ad:6d:07:7a:
                    5d:58:0b:6e:bf:02:9d:f0:4b:0b:cf:ed:d8:3e:eb:
                    7d:11:6b:4f:64:61:ce:f3:8e:f3:4d:f6:20:a6:99:
                    f3:f6:af:b0:61:fc:78:85:a9:ae:9d:e7:81:e3:a9:
                    d4:4d:85:e4:d3:c1:7f:01:78:9a:cf:11:18:41:48:
                    bf:7c:19:d6:e7:e6:e4:83:17:c4:e2:4a:44:bb:91:
                    fd:49:69:1a:89:30:0b:d9:df:b3:f3:a0:77:6e:34:
                    f6:e9:b1:ec:1e:a5:fa:72:15:77:e7:6d:a0:ea:9c:
                    fe:a3:0e:83:d6:d5:bf:c4:d8:e5:57:26:f3:6a:1f:
                    f1:86:61:ea:b8:4b:d5:86:d3:d1:54:0a:0c:d3:0d:
                    d5:08:ad:23:3a:7b:47:90:a8:61:2d:b2:b6:89:eb:
                    66:10:cc:b7:32:aa:b1:d9:05:0f:06:75:f4:16:22:
                    f4:14:b8:bb:b1:2a:17:b7:71:72:e6:e4:39:39:0d:
                    16:6a:11:eb:83:cc:04:7a:f8:2d:52:98:ed:28:36:
                    42:ac:04:ec:53:09:97:e3:90:2e:ed:f5:00:ec:4e:
                    7b:d9:3a:03:56:79:a5:b0:04:c6:60:e6:55:77:e8:
                    88:6e:13:5e:d7:43:dd:6d:53:41:3f:69:01:03:c9:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B2:86:95:DB:8D:DB:31:04:E9:78:9F:E9:B4:3E:27:52:21:9D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.168.0/23
                  206.53.173.0/24
                IPv6:
                  2606:a980:0:2::/64
                  2606:a980:0:6::/64
                  2606:a980:0:a::-2606:a980:0:c:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:cb:d4:3a:f6:85:87:35:9d:50:b9:4b:ca:ce:7b:2f:d5:06:
         75:7a:dd:8b:71:65:4b:d9:da:dc:0a:f3:6e:9a:86:6a:cc:cf:
         34:1c:19:34:29:fb:e3:0e:0e:62:bc:c7:93:66:20:45:79:3d:
         b7:23:ed:77:55:f4:dd:45:ca:0b:c7:13:6f:70:82:d9:4d:f7:
         50:e5:5f:ad:ac:69:4a:b4:3f:7a:0f:35:f6:24:c0:5b:f8:c4:
         34:94:21:ae:a6:aa:55:af:84:c3:c9:5b:0e:c3:18:ce:94:f9:
         72:0e:69:dc:ee:e4:43:60:57:7c:16:c9:fd:77:98:a4:72:66:
         a5:1b:b3:f6:0f:2d:75:b7:f7:b7:67:a7:54:95:48:de:4d:ea:
         e2:99:a5:ff:69:58:e5:95:69:3c:71:5f:da:9d:13:c7:b4:b1:
         03:92:5b:cb:25:ea:86:a2:b1:1b:2a:d6:1f:f8:68:7f:a0:77:
         2b:1b:83:3d:b8:27:bd:ad:81:3a:b2:a4:f2:c7:15:03:2d:b8:
         b4:e2:79:0a:38:55:e9:87:fc:ce:ca:39:7d:2b:7c:47:3a:4a:
         39:ac:49:0b:6b:46:56:0e:c2:8e:81:73:98:1e:04:a5:17:12:
         f9:cd:7b:94:68:76:7f:66:25:95:d4:6a:40:57:d0:01:d0:39:
         1c:f1:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:19:57 2025 by rpki-client