Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa
File:                     4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa (raw, json)
Hash identifier:          KC95oIASq2Bi9x8/R5o/8uaajmG9e1H+ATuGM7ukdIs=
Subject key identifier:   79:1C:F5:AE:A5:3C:66:00:77:20:32:71:92:5E:C2:99:9F:E0:52:77
Certificate issuer:       /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
Certificate serial:       010D0C9F43285849D594E63FBEC982216FACA670
Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     6360
IP address blocks:        205.166.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e6:3f:be:c9:82:21:6f:ac:a6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=3205a850-b2b8-40bd-bb3b-a1b0d197e284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:07:f8:aa:db:37:8c:ef:c1:1e:e1:8e:f6:
                    eb:c5:67:03:65:99:c0:ee:c0:62:02:9b:18:33:8d:
                    33:18:16:7e:7d:d8:80:21:8e:fb:86:1a:d5:62:2b:
                    b6:a6:16:19:78:2f:e9:24:63:09:2a:3d:a5:fa:28:
                    6a:d7:e5:6a:d3:7b:48:d1:d8:13:08:55:d3:94:9d:
                    67:b0:f3:8c:0a:c5:19:d3:7e:5e:fd:8c:d9:c3:05:
                    c4:20:70:d2:85:c2:c7:e0:f8:47:16:8a:ad:69:08:
                    1f:ed:ed:6c:80:13:04:b6:e0:aa:0d:16:33:09:ca:
                    c3:76:22:00:f5:02:ba:c9:06:2f:88:71:35:a9:25:
                    fb:64:aa:92:30:20:f0:3f:ac:cc:f2:b0:82:d2:13:
                    57:cc:3c:90:9a:35:0f:09:0a:23:17:f3:f9:6b:50:
                    c8:b4:96:6a:30:59:bc:2c:bd:26:9f:21:df:92:e5:
                    45:c9:7e:6a:86:05:ce:b3:b4:b0:5c:6c:c4:79:6f:
                    a1:87:b0:b7:b7:92:a8:75:0d:c6:ff:e9:a3:54:7f:
                    85:fa:eb:56:7e:6a:51:0e:b3:66:33:46:9f:d4:35:
                    f7:ee:6e:b7:47:58:cf:a6:88:a7:6c:9a:3b:a4:93:
                    a9:9d:81:69:58:18:89:7a:08:51:ea:55:2c:e2:23:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1C:F5:AE:A5:3C:66:00:77:20:32:71:92:5E:C2:99:9F:E0:52:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/4685c788-cfca-3dbe-b1b6-6ee6f414c366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl

            X509v3 Authority Key Identifier:
                keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:51:f0:85:a9:5a:94:62:a9:4d:57:71:8d:ea:aa:ce:f3:66:
         3c:03:59:5c:7c:6d:73:35:fc:c9:5b:03:75:2c:94:8d:99:25:
         ac:65:d3:b8:d9:dc:f2:59:e0:50:d6:f3:ef:01:f8:fd:d0:53:
         53:cc:78:c0:da:13:69:60:5c:b0:f7:b7:2c:38:aa:51:24:cf:
         0a:4c:38:76:e0:f6:07:3a:8c:8e:23:a1:c4:ed:58:26:e4:41:
         04:44:89:96:e2:bb:55:68:de:45:53:27:47:5a:79:07:fc:49:
         7a:ff:e2:43:b8:00:29:b7:32:82:78:3c:f4:0a:f9:22:51:f0:
         66:ab:de:01:4e:f1:13:d0:44:64:71:e4:12:16:62:fe:62:66:
         bb:a0:84:ad:a4:46:9a:88:18:c5:10:65:ce:69:3d:0a:7c:fd:
         67:2c:a7:79:9d:f7:3a:7d:60:3b:dd:0c:09:f9:25:94:0b:15:
         95:5e:2d:e2:90:dd:9d:c6:fc:28:60:a9:65:1a:d9:5e:d6:5c:
         1a:9e:1a:8b:76:8e:b2:57:26:78:97:7d:b8:32:33:16:41:88:
         b4:4e:9d:4b:72:b0:a6:7b:9f:c2:11:32:1a:75:cf:e8:d1:e8:
         a3:d6:2a:26:16:37:e8:08:0f:5e:7e:ea:eb:5f:ba:e3:4b:20:
         8f:99:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:15:40 2025 by rpki-client