Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
File:                     62dd0302-3085-3f70-8edd-449ecdbc6149.roa (raw, json)
Hash identifier:          NsQ73g+V5QAqvif+clVqqLaiSYC08GtA2G0wOV/KHQ4=
Subject key identifier:   89:F5:02:24:A1:88:79:28:84:97:BD:35:A8:C1:10:56:5F:B4:0D:DA
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F43285849C0A4EACCE5547579872A1040
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     33211
IP address blocks:        206.41.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ea:cc:e5:54:75:79:87:2a:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=4e18d492-8bfc-4fab-99a9-b52c050d35ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f6:8a:3d:45:9e:e7:3b:0c:85:3d:b5:e8:c8:
                    72:91:80:87:f5:06:4e:0c:1a:6c:6c:f2:54:5f:91:
                    99:cf:dc:73:b1:9a:85:26:82:1c:7c:8d:f2:71:a3:
                    e6:18:31:83:d7:84:6e:45:80:80:a0:a0:5e:60:57:
                    90:06:b5:d7:48:28:e0:83:cc:f8:a4:24:96:6a:5f:
                    ce:d7:5e:07:24:2f:0d:d9:c8:2a:97:55:50:8d:93:
                    79:23:46:d0:25:ed:c0:38:27:95:c4:7c:84:7d:75:
                    0a:d5:e3:eb:ae:d1:4f:61:12:15:79:c4:8e:b1:c9:
                    71:d1:c9:9c:26:3f:83:ff:2c:6e:95:ea:cb:96:12:
                    35:cb:90:ed:58:dd:12:8e:25:bd:df:1d:2f:f2:ce:
                    fa:26:7f:06:fa:14:a6:22:4c:45:bc:62:47:c1:8d:
                    67:1c:f5:0f:5f:6b:08:f0:96:8b:b8:9b:60:cc:f0:
                    f1:a1:23:b7:0c:9e:9f:9a:d5:7a:f8:34:27:8d:66:
                    66:27:36:0b:00:bf:be:d2:c9:19:f1:bf:68:93:8c:
                    6e:f9:dd:24:fd:e2:5b:75:6a:2b:2f:d7:17:4a:61:
                    ac:f4:b5:bc:33:82:f8:d1:93:04:be:c3:1c:f1:6f:
                    15:17:c2:83:1f:af:f4:3f:49:96:3b:a6:3e:64:14:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F5:02:24:A1:88:79:28:84:97:BD:35:A8:C1:10:56:5F:B4:0D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:4a:10:bb:21:8c:93:c5:39:d5:09:c2:f5:f6:4f:7b:02:a8:
         f2:bb:fe:72:d0:f3:9f:16:5d:9c:0d:94:98:45:e8:1e:04:c1:
         3b:2f:db:d5:d5:11:66:9a:3e:10:07:62:c7:54:03:b1:9a:1e:
         ae:41:7b:90:60:77:bd:09:06:b6:6d:46:53:d7:6e:a3:3c:bc:
         7d:c8:16:ec:f1:4f:27:b4:ae:42:06:1d:da:56:9f:5d:45:87:
         7e:e0:90:5d:5f:81:d6:09:ff:52:4b:2b:32:ad:83:21:a3:4e:
         f4:33:d0:dc:7f:d7:cb:21:19:b5:85:af:1f:a4:e7:7a:99:c6:
         ec:3c:05:92:b8:b2:91:7c:c6:9d:6b:21:88:ef:32:2c:32:58:
         77:88:e0:c9:19:0b:53:3f:4c:0c:57:b0:0b:b1:1b:9b:c9:c7:
         ec:64:c9:c5:53:f2:36:56:ef:82:2c:2e:66:90:75:e9:9f:e7:
         86:6a:c9:9a:73:5e:23:d3:a9:13:ee:e0:54:a8:c7:ed:0e:f0:
         81:fd:ae:33:72:5a:90:db:20:61:6c:28:0f:91:82:0f:d4:3b:
         7a:20:97:a5:d7:83:68:e1:96:03:54:f7:db:f4:fd:ad:e6:71:
         67:26:c0:21:b2:57:7c:83:50:ea:49:1d:2a:4c:1e:a5:38:c5:
         95:96:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:25:22 2025 by rpki-client