Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/fe212a02-0342-3663-9ad4-9aa7126160f9.roa
File:                     fe212a02-0342-3663-9ad4-9aa7126160f9.roa (raw, json)
Hash identifier:          aDrkK4nppYhRWAk6eAS2xWuYdEGzi5rdJfXTvmZqDU8=
Subject key identifier:   18:B6:4A:D6:38:05:82:F0:8D:FF:FE:DA:FD:B5:FD:27:D3:B5:72:19
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F43285849C0A4E06CA2F5D7524C7DA700
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/fe212a02-0342-3663-9ad4-9aa7126160f9.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     6505
IP address blocks:        206.49.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e0:6c:a2:f5:d7:52:4c:7d:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=e9672667-9e95-408f-ba49-829889aad0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:53:f6:ff:33:fd:60:48:33:85:20:a0:4e:
                    f7:ab:60:b6:bf:37:61:a0:63:98:d7:f8:72:da:45:
                    e3:f4:c6:56:1a:2d:46:e9:d8:ed:48:c3:16:e9:7b:
                    db:cf:80:34:f4:37:5b:46:eb:4a:df:8c:f7:01:a4:
                    ea:fb:b3:eb:91:ea:ce:7b:ad:f8:50:36:29:77:20:
                    23:18:1b:15:39:03:d1:dd:0b:62:79:8b:fc:ca:bb:
                    88:bc:00:e7:71:69:92:2b:af:55:7b:2f:af:47:ab:
                    c8:f7:18:80:2d:06:7e:74:b6:eb:c9:27:30:45:a7:
                    91:e6:32:a7:8c:93:28:39:dd:6d:59:80:36:2b:2e:
                    1e:f0:33:03:27:1c:ed:93:8c:2a:7e:43:c7:0c:d5:
                    1a:66:3c:23:db:4c:9a:0a:cf:11:ea:fb:bc:44:13:
                    9e:2f:d7:20:09:2a:c1:91:a0:99:29:1f:eb:71:c8:
                    5b:9f:28:06:32:34:6b:a6:51:e9:ce:b7:c7:79:63:
                    9b:9a:af:58:29:97:7f:b7:51:ef:4d:8e:83:ab:82:
                    e1:d7:e5:36:a9:77:24:23:1a:c6:48:03:41:c6:9b:
                    88:b7:7d:1d:72:bd:bf:22:52:31:a0:a4:f5:0c:83:
                    7f:9d:d0:3e:ff:89:f7:18:f3:c1:59:8a:6f:9c:02:
                    ef:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B6:4A:D6:38:05:82:F0:8D:FF:FE:DA:FD:B5:FD:27:D3:B5:72:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/fe212a02-0342-3663-9ad4-9aa7126160f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:1a:fa:61:f6:cf:4a:e4:ee:3a:0b:fb:06:8f:f4:ac:0a:
         53:2b:58:86:c1:5a:e5:26:c7:a3:9c:50:eb:09:eb:4e:96:12:
         15:5f:56:07:4f:1c:ec:ec:38:eb:92:fe:3a:27:b0:56:c3:48:
         52:ce:7c:0f:0d:b3:1a:17:3d:d2:fb:40:de:6c:5d:de:e9:12:
         d5:7f:42:52:eb:db:ef:1b:6a:39:39:2e:da:c1:4e:92:77:d8:
         e7:b4:ef:98:45:68:ab:bf:55:23:c7:64:7c:72:dd:c6:41:62:
         c4:fd:82:cf:4e:81:cb:0b:c4:e3:50:e1:22:ea:fd:e1:6d:1c:
         f0:ed:83:39:3e:f1:16:44:c3:82:e4:c6:aa:0a:11:f2:9a:c8:
         40:ab:2c:1f:da:d6:48:d1:4b:62:d4:16:c2:69:19:99:c0:09:
         46:3f:fb:36:cd:a9:27:3a:86:f1:0d:52:c7:2b:9b:23:1a:05:
         3f:dc:ca:fd:47:e8:15:c1:fb:a7:1f:e0:5b:c9:88:ca:ab:0a:
         d7:85:02:d6:ff:94:54:dd:bf:61:f7:a6:2c:80:6a:5c:f5:9a:
         85:a0:31:b9:33:f8:63:0f:3d:e5:08:2f:ee:d7:43:87:99:12:
         53:1a:57:fc:68:47:fd:98:08:46:14:5c:82:96:3e:06:7b:7d:
         af:64:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:12:09 2025 by rpki-client