Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa
File:                     b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa (raw, json)
Hash identifier:          oPmnUvbFiJCkSFGfmU4j8lZYYIwCSw1PpavMIrizYqs=
Subject key identifier:   3E:BF:0A:1F:05:20:B9:AD:D3:7C:B2:BF:ED:86:A7:32:3D:E2:50:36
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F432858498E647F7B6D644C31C3F97B00
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        216.185.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:7f:7b:6d:64:4c:31:c3:f9:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=a330d575-3987-4c23-90da-7530d68ed5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:77:5c:41:9c:26:a1:b7:10:6e:20:01:74:
                    a6:55:32:84:fa:ec:4e:bf:aa:89:fc:6c:3a:0e:a1:
                    f6:15:32:d3:67:aa:2d:f3:bf:96:99:26:67:2a:f7:
                    00:70:db:c3:53:be:cd:42:f0:2f:6b:2a:80:f1:01:
                    3e:81:81:81:da:06:36:56:c6:5d:74:87:97:69:07:
                    79:06:39:2e:1e:14:3e:14:81:11:f0:a2:98:1c:14:
                    1f:f2:63:a8:ef:c9:2b:a0:c3:3f:0f:5f:15:97:5c:
                    6f:c3:c0:49:d2:20:58:48:8a:a2:40:58:32:0e:1a:
                    ec:16:e2:99:7a:14:51:50:70:13:8f:ce:f2:cc:17:
                    d4:ec:3c:2b:01:ec:31:ed:72:93:20:9f:ff:56:68:
                    12:73:4d:b4:79:84:9c:8a:96:7e:9b:92:43:67:f8:
                    43:09:36:8c:35:de:5c:2c:fe:bb:3b:3a:20:38:d1:
                    0f:b0:10:6e:22:4e:eb:f3:c3:7d:47:9e:11:ca:87:
                    89:d0:52:05:31:9d:59:21:35:f8:e8:09:c0:2f:8f:
                    1c:a7:b0:cd:e1:35:67:f4:48:fc:4a:1e:22:7d:23:
                    eb:c8:2d:f3:c9:d8:7a:ab:21:7a:d9:b1:59:fb:45:
                    8e:a9:82:42:c1:9a:1b:63:40:71:26:99:b9:48:e9:
                    54:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BF:0A:1F:05:20:B9:AD:D3:7C:B2:BF:ED:86:A7:32:3D:E2:50:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:04:a6:bc:f8:06:bb:42:c7:d8:ef:1f:0e:68:52:7f:4c:b8:
         ef:d3:71:b1:16:a4:d4:ba:c7:f1:88:32:e3:54:88:a8:fa:0d:
         2f:4e:32:24:ef:ce:08:21:40:36:41:23:a5:e6:d6:e2:13:75:
         84:d8:b5:f4:32:92:7a:a8:8d:e6:04:5e:0e:8d:8c:2a:9d:d0:
         b7:b4:b1:24:00:80:25:d0:da:a4:7d:5d:97:c6:45:1c:31:fc:
         22:1b:59:49:85:6f:64:05:f2:e3:4c:62:68:0f:74:a9:0b:93:
         19:89:db:e0:69:e3:df:05:2f:9b:14:de:c1:fc:fe:10:5a:56:
         5a:d6:96:52:92:45:72:b1:c7:d6:7b:ae:dc:18:dc:03:47:56:
         2e:ac:bc:68:94:71:5e:df:a7:ed:49:48:c3:5c:f7:1b:dc:cf:
         fb:37:eb:65:32:7e:cc:bf:bb:04:ab:9a:11:93:ca:b6:3d:3c:
         ac:3e:c5:f8:58:6d:40:75:b4:cb:3e:1b:73:4a:6e:18:f8:d0:
         10:32:33:86:2a:56:4d:2f:5a:bf:16:b5:57:5b:6e:51:c3:40:
         f2:35:6a:61:a5:c4:a5:84:5d:4b:bb:31:fe:9f:a1:78:e8:e7:
         10:72:5a:cf:f5:bc:03:1c:7a:e1:60:69:fa:e7:c4:95:98:c1:
         cc:6a:a1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:29:49 2025 by rpki-client