Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/0071e5a2-793e-34e2-a7bd-dd1f17865749.roa
File:                     0071e5a2-793e-34e2-a7bd-dd1f17865749.roa (raw, json)
Hash identifier:          p7KKS+6ZMK7Xzw8+paohHKhxXWdgELeWocCOcszrgQw=
Subject key identifier:   91:D3:AB:4A:6A:60:F5:47:52:3F:4D:E9:F9:29:40:6B:DC:59:10:5A
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F43285849955F20B0D2277DB63CD23780
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/0071e5a2-793e-34e2-a7bd-dd1f17865749.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     16725
IP address blocks:        206.82.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:20:b0:d2:27:7d:b6:3c:d2:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=86cc6563-7fd4-4f87-8618-3b0da62b8d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:37:5f:4c:50:94:1b:d3:b4:6b:42:2e:f8:20:
                    54:b4:fa:f9:c3:ff:ad:a4:be:39:7d:36:7b:4c:e4:
                    7e:1f:69:07:61:39:33:fb:bf:e7:c8:72:59:cc:af:
                    52:30:38:28:ef:b3:18:f9:85:60:9d:d3:79:59:07:
                    c5:26:b6:11:aa:cb:7d:1f:1d:85:f7:76:5f:65:7c:
                    40:d3:d1:a8:d8:5a:ad:f8:cd:19:d0:42:34:12:cb:
                    34:f3:99:b9:7a:97:1b:a3:68:87:ef:90:7d:27:5c:
                    34:9e:53:b0:d7:02:76:4d:96:dd:71:bd:63:0b:94:
                    67:25:7a:87:c3:ad:6b:44:d2:12:4e:88:72:90:d4:
                    2d:91:e9:b1:ea:a7:da:a4:33:f0:23:c3:1c:69:b3:
                    f4:1a:fc:42:6c:a2:a4:f8:4d:56:ab:04:44:43:a8:
                    2f:e2:33:25:c8:59:a9:06:ce:41:1e:59:4d:b6:dd:
                    7b:32:1b:ae:4a:4f:96:20:7a:0e:f7:d0:f8:5f:a8:
                    bf:85:b0:1f:d7:fa:2c:5c:67:02:d1:d3:34:26:12:
                    8d:d3:bb:fa:97:48:ea:b9:e0:7b:f0:e4:69:87:52:
                    c6:32:31:84:17:8e:44:e5:82:06:bb:0e:46:cf:8f:
                    76:38:5f:2a:7c:8d:85:1f:02:b3:ef:aa:da:c0:a4:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D3:AB:4A:6A:60:F5:47:52:3F:4D:E9:F9:29:40:6B:DC:59:10:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/0071e5a2-793e-34e2-a7bd-dd1f17865749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:c3:e3:1b:f4:1d:57:9a:a1:33:39:50:a0:d4:2a:ae:46:
         a5:e9:25:59:ad:26:10:6e:28:d1:ae:81:df:a9:5d:0a:ed:81:
         6b:8b:9c:a3:82:e6:8c:33:c0:ec:9d:99:77:3c:a2:19:dd:33:
         94:28:3c:d1:34:4b:c3:3e:22:bc:38:8c:6e:fa:da:d2:8e:a0:
         91:44:ae:2e:48:c1:07:80:0c:e2:f8:5f:64:ce:94:50:eb:28:
         b3:6f:d9:d2:de:93:07:e1:09:bc:4e:2c:62:09:a8:b4:ce:21:
         5f:27:71:2a:74:4c:66:e2:d2:5d:cb:12:35:dc:2f:8a:85:fa:
         a8:35:9e:a5:20:53:82:ab:5b:d9:15:1b:0a:2f:da:7f:10:64:
         57:18:59:db:87:66:85:0e:88:1c:df:15:52:c7:26:20:c7:7c:
         02:9d:d7:a4:01:d3:86:cb:8f:03:0e:27:51:f0:4a:4a:32:0a:
         b7:07:ac:81:b3:22:f8:da:95:26:35:50:9a:44:fc:f5:e1:92:
         47:4e:d0:58:a3:4f:04:50:c3:c6:86:e6:86:88:a7:9c:f7:2d:
         57:3e:4a:56:ed:ee:31:ec:b9:4e:06:46:f5:4e:ab:b8:a0:c7:
         f8:8a:2a:9e:da:a6:30:4d:b3:3e:b0:e5:34:7e:1e:68:d5:1f:
         cf:e4:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:40:21 2025 by rpki-client