Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/c92d47f5-c689-3e9a-a17a-61ddb453c3e9.roa
File:                     c92d47f5-c689-3e9a-a17a-61ddb453c3e9.roa (raw, json)
Hash identifier:          P6hgP8tj7+gpbgkcpChVn3rMsMlDVmJi8aYsV0j1Vf8=
Subject key identifier:   8E:0C:A7:A6:F3:8A:7A:5F:A6:18:BF:67:F0:74:5A:74:8E:6E:09:AE
Certificate issuer:       /CN=ac04797e-f41e-4575-a76e-d3656d2d0da3
Certificate serial:       010D0C9F4328584A374ACDFA183017890BF6EF00
Authority key identifier: 00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/c92d47f5-c689-3e9a-a17a-61ddb453c3e9.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        206.252.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:cd:fa:18:30:17:89:0b:f6:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac04797e-f41e-4575-a76e-d3656d2d0da3
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=ca7598a2-f6c8-405d-ac08-73146cb1b8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b7:30:ef:c1:79:13:86:9f:a4:f2:ca:93:cc:
                    84:18:76:d0:a1:1c:df:54:0b:79:25:d7:d8:96:53:
                    63:f2:60:8b:4a:f7:9f:88:09:48:2e:c8:10:61:37:
                    f2:79:a5:6d:9c:53:aa:30:53:d2:a9:33:02:d5:9b:
                    d2:c4:bb:96:97:da:76:1b:fb:f5:95:22:66:39:f0:
                    0c:ae:73:2a:45:30:12:7a:7a:53:c0:16:90:36:82:
                    04:38:f4:ba:3a:f8:86:2a:70:a2:18:76:f4:83:f9:
                    09:9b:93:89:bd:92:ce:6a:91:a1:db:3a:23:54:6c:
                    52:25:a9:e0:3c:e8:f7:50:ac:d6:74:b7:e4:8b:69:
                    3a:1e:3f:6d:9a:67:69:49:b2:4e:f8:29:cf:de:e2:
                    eb:5d:69:f9:ab:a8:b8:a2:6e:31:c1:11:da:b3:a5:
                    f8:58:60:cb:4b:e6:1f:88:80:7d:f4:21:dd:a5:27:
                    67:d6:35:eb:84:68:04:6c:f2:b2:b2:46:53:2b:bf:
                    6b:81:f6:3e:89:bd:bf:53:59:19:e5:0e:e0:7a:38:
                    1a:14:8a:44:32:cc:98:c5:2f:7c:0b:4c:ca:c8:7a:
                    a7:cf:d7:01:51:55:99:89:0e:d1:91:4d:b6:c1:23:
                    14:4a:89:a7:83:05:e9:f8:7b:05:d6:c8:e2:ce:9b:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0C:A7:A6:F3:8A:7A:5F:A6:18:BF:67:F0:74:5A:74:8E:6E:09:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/c92d47f5-c689-3e9a-a17a-61ddb453c3e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl

            X509v3 Authority Key Identifier:
                keyid:00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:31:f0:6f:c5:d3:34:fe:d0:51:e3:a8:52:54:bc:2d:06:9c:
         0f:f0:d4:61:ee:e0:e7:86:f3:0d:ef:79:78:13:0a:67:f4:dd:
         87:b7:4e:cf:5c:04:04:38:d7:39:11:9d:be:32:34:f3:ef:9e:
         74:63:c1:0b:3b:9d:ab:24:fc:56:25:63:87:e3:52:03:71:cf:
         57:ac:f7:ae:ce:d3:15:df:e7:7c:16:ce:85:1d:bc:50:bc:7d:
         66:a8:b0:0d:80:9f:81:00:09:f8:5b:b8:3a:17:b9:51:33:d2:
         d9:85:09:6b:77:00:8c:d0:0b:f4:00:cd:69:4a:be:87:68:00:
         b4:ae:ad:d2:94:7b:79:2f:3c:4f:00:db:3a:79:ad:75:b7:dd:
         e8:78:4e:27:8e:89:26:19:94:0a:d6:b7:68:e1:23:5e:36:77:
         cb:d2:75:20:e6:57:ac:b1:a3:2c:5e:d9:f2:f5:53:c3:4b:f9:
         b0:d8:f6:29:ff:a0:4a:b8:33:d9:eb:57:73:7e:60:9d:28:ac:
         3b:56:0a:27:c6:8d:65:1f:4a:76:d5:41:3f:77:7e:78:50:93:
         da:b1:78:64:80:67:95:7a:52:6b:fc:23:b1:64:75:f7:15:70:
         3b:66:74:7a:59:bd:84:98:3a:28:d0:23:a9:ae:18:b5:6e:ab:
         f2:aa:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:53 2025 by rpki-client