Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96d0791b-58ef-3792-b2c9-4281bba87c2b.roa
File:                     96d0791b-58ef-3792-b2c9-4281bba87c2b.roa (raw, json)
Hash identifier:          LwWReQN2Wz6G0+hAEUIOtlOXZwxsO5uInph4V7Es5M0=
Subject key identifier:   FE:F5:66:9C:00:00:BC:31:DE:AF:E0:AA:09:27:A6:22:D3:95:92:9D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849F7150616DC0806AB358E0A80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96d0791b-58ef-3792-b2c9-4281bba87c2b.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     140224
IP address blocks:        206.54.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:06:16:dc:08:06:ab:35:8e:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=8d3140b7-efa3-4d29-8a47-428e2038534a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:81:68:22:a8:81:0f:34:ad:07:c4:39:ee:
                    ee:d7:51:d4:2b:5a:f1:5a:5c:44:6b:6c:36:2f:fd:
                    5b:88:db:ae:6c:48:db:a3:4e:c3:73:1c:96:01:da:
                    48:4f:21:d3:3c:c4:96:08:51:d9:37:c5:4b:8b:75:
                    62:f5:4b:83:1e:a6:c2:a6:30:88:f3:2e:aa:d6:4f:
                    62:aa:5e:88:f5:6a:5a:5a:d1:00:a9:3e:64:07:40:
                    84:07:f8:a4:49:07:55:4e:16:12:04:61:bd:38:3e:
                    cf:86:93:ba:f9:7e:ea:09:39:cc:65:e6:04:62:3f:
                    bd:3c:60:0b:4e:0d:d3:cc:f8:07:0d:44:22:c7:f5:
                    d4:55:fd:3c:e4:0b:05:cd:45:fc:0d:2d:b4:90:21:
                    70:c3:c2:c8:ad:64:57:9d:d5:4d:8d:db:ba:16:71:
                    6c:8a:fd:78:07:39:e6:89:d7:b9:47:c2:6a:27:db:
                    75:f5:91:ae:02:e2:58:6a:d9:a5:c3:80:cc:48:55:
                    0d:21:43:77:22:00:bd:22:c6:d3:a3:78:57:7a:6a:
                    c5:86:d4:c6:88:bf:93:7b:15:93:10:97:92:37:f7:
                    6a:fc:34:49:a6:68:e1:6f:47:68:b8:93:c6:63:b0:
                    48:8e:01:62:ca:d2:31:43:51:88:0e:83:c0:24:33:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:66:9C:00:00:BC:31:DE:AF:E0:AA:09:27:A6:22:D3:95:92:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96d0791b-58ef-3792-b2c9-4281bba87c2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d2:1f:7e:a2:32:9e:4b:e2:29:1f:31:6c:fc:ea:23:36:85:
         c1:75:25:0d:3b:90:16:c0:55:80:66:ac:2d:e1:40:b1:42:5a:
         d5:51:11:17:05:c6:e2:af:2b:5a:5f:a3:cb:22:82:43:92:0e:
         b2:37:f4:0b:77:0a:81:aa:d7:f2:3b:59:d4:0b:92:cb:cf:ba:
         45:13:0e:48:bc:5c:a4:9e:4d:4c:52:f4:a5:be:66:b4:24:c1:
         9e:46:c8:f1:d9:13:2a:79:7b:f4:3c:ce:5e:d2:47:48:3e:7a:
         05:08:a5:58:06:68:9d:b3:38:03:5c:b9:ce:4a:61:39:69:73:
         e1:14:75:09:e6:c5:4f:02:de:31:25:fc:bb:eb:69:f6:85:8d:
         fb:73:69:b6:d7:69:21:83:49:16:8a:27:78:43:d5:71:ad:5a:
         c2:fc:da:da:b3:17:80:45:20:ee:34:79:64:b5:6c:c8:5b:38:
         99:22:d5:59:de:84:ec:0c:f9:48:1b:87:3a:d6:bf:af:a8:b1:
         bc:03:56:2b:ec:31:1d:86:0f:e3:b8:70:85:2a:a4:14:90:d6:
         c5:37:c5:f3:5d:fb:c1:57:19:3d:03:10:f8:0b:4c:1c:50:a1:
         77:c9:1a:3d:68:e2:22:92:62:2d:66:72:b7:f2:c9:66:de:4a:
         f3:11:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:24:22 2025 by rpki-client