Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/2e1a7be0-e9fe-3c35-bef5-57b0781994d3.roa
File:                     2e1a7be0-e9fe-3c35-bef5-57b0781994d3.roa (raw, json)
Hash identifier:          4Pq0jPPWYD8EzUYT56iSJ/OhU9cWY2tGzyx4vSkj8JY=
Subject key identifier:   9F:53:F9:16:B3:19:25:A8:6C:81:92:EB:02:A4:2D:5C:B0:51:70:95
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F43285849C0A4E0895E46E41749A90800
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/2e1a7be0-e9fe-3c35-bef5-57b0781994d3.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     27735
IP address blocks:        206.48.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e0:89:5e:46:e4:17:49:a9:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=18da1c34-a2f3-496f-8824-7feb0311f77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:7a:86:b3:8d:e3:fa:28:55:c6:68:75:76:
                    d3:41:49:e7:2e:ff:2e:aa:24:bc:7f:65:ad:d5:55:
                    34:58:69:57:0a:ee:b1:81:fa:ab:2f:53:af:1b:63:
                    af:90:f7:0b:44:3b:c9:a2:6e:b4:7f:2b:66:28:14:
                    d1:44:74:e2:80:54:74:38:48:85:bf:42:a5:3a:30:
                    3b:b6:ce:11:26:2c:f3:80:cf:62:43:8e:28:73:1f:
                    ed:e6:e7:74:bd:ce:7d:db:8b:f5:28:da:cb:bf:91:
                    00:e4:57:dc:93:fa:ae:c5:f5:b1:65:2c:de:35:15:
                    d3:2a:1d:59:0e:7a:13:0e:88:84:66:8a:c4:12:67:
                    16:07:86:c2:4e:c7:54:02:6b:42:af:e8:03:b1:60:
                    6a:0a:86:d3:a1:27:d6:23:ed:00:84:2f:45:e2:4e:
                    c8:bc:cf:d8:b8:84:80:59:fd:1d:dc:00:34:eb:8f:
                    66:ed:ac:58:c2:02:a2:95:be:89:07:09:9c:35:83:
                    e8:5d:72:77:b0:b3:af:3c:ae:7d:ec:99:98:a2:e3:
                    dc:e5:df:7b:5e:4f:09:46:73:16:ea:dc:de:a3:0f:
                    f9:1a:08:a8:0c:05:6f:2a:f7:6c:e8:c8:bf:6e:04:
                    60:0c:8f:7c:be:07:d7:7a:9a:b3:c2:30:5c:db:3a:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:53:F9:16:B3:19:25:A8:6C:81:92:EB:02:A4:2D:5C:B0:51:70:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/2e1a7be0-e9fe-3c35-bef5-57b0781994d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:5a:27:c7:4f:00:4e:0e:7a:2f:d0:a8:69:68:29:01:4b:c4:
         4f:8e:b6:c9:77:ad:18:1e:24:d2:e9:0a:a6:da:97:a6:7f:d1:
         bc:47:f8:8c:a9:88:98:e4:bb:09:7d:cc:f9:c5:9d:f6:15:8e:
         a0:25:58:16:23:7a:31:ec:bd:fb:87:09:43:f6:25:a9:a0:8a:
         d9:3c:a1:b8:d8:08:ec:11:25:1d:fd:33:e1:11:a9:1f:f7:d9:
         69:6f:a4:12:38:5d:09:e7:bb:87:fb:26:a8:2a:d1:3f:72:7e:
         72:6d:86:cf:ba:91:2f:29:c9:12:e0:64:b9:89:43:c9:c5:dc:
         1c:e0:d4:c6:c0:b7:d6:1f:6f:8d:58:34:85:99:d9:30:7f:58:
         62:55:10:86:b6:92:0e:97:ea:cf:9e:68:0d:bb:0d:46:16:17:
         ae:56:8a:1a:49:e3:b8:7b:05:25:6d:66:41:8d:a3:c9:6e:1d:
         6f:6c:da:26:5f:dd:c2:d4:55:9f:7b:63:f0:3b:56:4f:de:a1:
         c5:f8:c8:90:7f:55:1c:d4:1f:7a:d4:4c:08:82:f6:55:97:d8:
         e8:d2:00:a6:42:5f:49:b5:66:4a:f0:4e:b4:0f:eb:44:7b:52:
         be:0d:28:9c:e0:06:27:ff:d2:2c:1a:41:01:70:09:e7:62:c5:
         3a:25:2d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:19:47 2025 by rpki-client