Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa
File:                     510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa (raw, json)
Hash identifier:          n7QtruzrwUwMqbFTPXj/4SYBSi70eamdOtA0JHlw8C0=
Subject key identifier:   2D:A6:8B:55:37:D6:9C:AF:73:29:B8:E2:3D:CE:DD:36:BF:27:8A:40
Certificate issuer:       /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Certificate serial:       010D0C9F43285849A61F4461B18BE844274A1D00
Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     0
IP address blocks:        206.71.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:44:61:b1:8b:e8:44:27:4a:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=ffa9ec29-8fca-404f-9276-0287953d584e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:28:9a:bf:a2:73:11:43:e6:d7:75:1a:36:
                    1d:3c:85:0e:f2:5f:02:15:33:69:2f:4e:a0:aa:57:
                    c3:47:51:7a:c7:39:85:5b:d2:ae:47:bb:28:8c:4b:
                    d7:35:00:7d:62:65:10:87:7e:05:2c:b5:df:8f:4e:
                    f2:b4:c6:ef:93:aa:80:15:05:dc:2d:bc:75:4e:f5:
                    79:ab:f3:ff:30:02:78:4a:40:0c:60:45:77:31:bb:
                    9d:ff:1e:15:d8:a5:ae:fc:a8:7c:71:95:ab:47:e2:
                    d7:1d:f0:93:e4:6a:91:61:50:14:6c:31:eb:c8:7e:
                    ad:30:cc:98:8b:ea:c9:ab:95:63:9c:d5:27:61:d6:
                    50:6e:f2:ea:0c:1d:24:bb:52:8b:c5:b3:6b:c2:53:
                    a1:60:3e:15:74:d8:a0:71:79:90:c0:21:ee:dc:4e:
                    f7:3b:9a:30:8b:46:7f:0b:e9:8f:0f:ba:42:96:1a:
                    b5:69:26:1c:4b:01:a3:cc:51:aa:8c:db:7d:45:72:
                    ae:4c:13:2b:af:bf:53:38:f5:87:47:1f:ac:40:80:
                    b2:ce:7c:23:47:e6:b2:c2:9a:79:0c:71:56:93:b3:
                    ec:cf:05:06:0b:a6:3a:b3:9f:55:a9:2b:d5:50:18:
                    94:72:97:ad:5b:08:18:96:85:57:04:70:15:82:86:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A6:8B:55:37:D6:9C:AF:73:29:B8:E2:3D:CE:DD:36:BF:27:8A:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/510b9ef4-643a-3cfc-bb08-bcb321130ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:ac:7a:94:15:7f:e8:f3:6d:73:60:08:cc:e0:8c:01:de:
         5a:fc:32:a3:ba:50:3b:9f:49:a1:5a:2f:0b:22:b1:94:25:9f:
         d4:9d:e6:b6:4e:43:7e:9b:f8:16:21:ba:02:81:9e:98:3e:77:
         8e:42:13:27:9b:01:e3:13:ce:92:7d:a3:7f:47:48:bf:49:3f:
         f6:81:c0:d2:3f:c7:13:5b:86:ed:6a:c1:56:40:60:9e:5d:d4:
         3e:f6:bc:02:b6:88:a1:fd:4b:88:4b:15:18:cd:31:7a:5a:7c:
         fc:e5:17:31:87:01:cf:ea:76:fb:b1:ae:2b:c2:ba:1a:ba:4c:
         f0:43:a1:4d:d2:5b:fc:6c:a6:55:74:99:74:7f:a0:93:76:ee:
         9c:47:c5:26:57:26:55:e1:25:06:42:8a:7c:8d:ee:63:24:63:
         10:9f:02:51:6d:45:7f:a1:98:16:b9:fd:a0:60:fa:6c:1b:35:
         b9:8e:6d:7a:9f:c5:8f:1b:54:b6:68:c6:a6:92:e5:bc:ee:92:
         5d:b5:ac:43:80:c4:8f:27:d2:b0:3e:cc:3d:a8:a2:b7:7b:fc:
         b5:be:d9:46:32:b9:93:f5:2f:b8:23:68:61:96:2d:90:68:36:
         f4:b9:d5:5f:11:49:32:0e:60:f3:43:83:5e:9b:46:9d:53:3f:
         1f:f4:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:44:46 2025 by rpki-client