Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/78c5ad37-a386-39d6-bf00-0437906bd824.roa
File:                     78c5ad37-a386-39d6-bf00-0437906bd824.roa (raw, json)
Hash identifier:          3OtflOxObsaGMkeAtxkeFeYF/qNRE1AlyVfDITb4ImA=
Subject key identifier:   8A:74:E6:2A:E9:37:72:E5:FA:D9:E9:A1:9D:C8:9B:0B:B3:1D:93:DE
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858498CFF07A4B9D0E7A18F3B6500
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/78c5ad37-a386-39d6-bf00-0437906bd824.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     397658
IP address blocks:        206.183.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:07:a4:b9:d0:e7:a1:8f:3b:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=89ccbc2c-11c1-4d75-bbea-debc5457fe00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:75:96:ee:85:80:50:d6:11:25:95:ca:0d:f5:
                    ca:87:e2:2f:44:7c:a6:5a:80:a8:fa:a5:7a:aa:26:
                    f4:cd:ce:c6:dc:93:3a:b2:ed:43:7a:0e:66:1d:d1:
                    36:99:e9:f0:45:d7:8b:64:d6:fe:a7:2e:58:b3:eb:
                    0a:de:86:61:86:f0:37:d3:2f:a7:d7:50:13:71:b5:
                    3a:03:82:a6:52:d6:a9:0b:db:a2:a9:3b:92:43:1b:
                    64:a7:95:f3:28:dc:78:93:1c:cb:c5:30:d2:52:c3:
                    9f:58:30:0a:50:75:d0:df:99:0e:b6:db:80:17:74:
                    e8:22:94:19:bb:30:e5:66:84:9b:ae:66:51:e5:8d:
                    1d:47:46:bf:7e:1b:4d:3e:96:1c:45:d4:1f:ab:28:
                    68:01:c6:65:69:60:26:08:4c:1a:2c:ad:c9:8d:59:
                    00:f9:ee:50:dd:bb:0d:3d:c1:0f:bd:a2:c6:0a:5c:
                    79:1a:ec:7d:40:44:19:9d:19:d6:c9:c7:ce:ef:61:
                    84:dc:19:70:85:22:46:4e:65:b0:1b:fa:43:61:ae:
                    e8:a9:57:75:d4:be:87:34:41:49:a5:4a:74:58:5b:
                    b2:12:8d:39:84:8e:7e:c6:e5:91:98:96:b3:65:ae:
                    d9:04:57:03:1e:a9:32:a7:fc:d3:f7:ca:92:af:15:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:74:E6:2A:E9:37:72:E5:FA:D9:E9:A1:9D:C8:9B:0B:B3:1D:93:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/78c5ad37-a386-39d6-bf00-0437906bd824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:54:ad:c2:67:57:3a:0b:a1:05:d7:f8:b6:3c:e2:be:e7:2b:
         ae:49:d1:a6:c0:45:f8:8c:43:0a:85:e9:5a:b6:33:b6:70:d8:
         d3:2a:f5:5c:1d:56:2d:0d:16:c9:25:bd:cc:50:63:8c:ca:03:
         d1:ce:3d:d3:06:7c:c1:10:d8:fd:98:70:7f:3a:8d:d0:e1:e0:
         cc:95:2e:94:ce:cb:2a:8e:5d:9f:d5:af:e2:45:53:4e:cf:31:
         40:08:22:eb:e0:63:08:d9:e5:d5:69:15:46:e6:76:49:0a:fb:
         8c:73:6d:0d:0f:89:2c:af:22:c4:9c:a8:cc:62:e2:ed:fa:80:
         37:55:8a:77:f3:2b:e7:96:53:73:94:1e:07:80:11:21:d0:ff:
         fe:67:ca:a7:62:c3:65:0d:e5:2e:2e:68:3e:11:41:9e:57:45:
         a4:37:33:81:99:d0:70:e5:d2:7f:c6:50:d8:59:d7:5f:c8:e8:
         bb:71:80:2c:e3:19:cc:d8:17:f9:82:99:0e:5f:48:3d:86:18:
         5f:ce:bf:34:d1:12:10:e2:7c:a2:b5:ff:62:8a:7a:d1:8b:23:
         2c:f0:78:0e:9a:c2:d3:35:ee:0e:44:fc:b8:7e:5b:82:8b:6a:
         4e:b1:25:b9:31:d7:88:4a:df:53:34:4b:0d:57:da:58:14:bc:
         00:a7:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:55:05 2025 by rpki-client