Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/df094277-d2bc-383c-bec8-1ab56e3af9ef.roa
File:                     df094277-d2bc-383c-bec8-1ab56e3af9ef.roa (raw, json)
Hash identifier:          UPn7xWZvBTouoR5npX0hnKd8ag3l6lI9bsk6q5FRyRI=
Subject key identifier:   C7:DE:43:CE:30:05:EA:C4:6C:7F:ED:11:E6:F3:B0:B2:86:FE:06:B5
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849D85FA2AE56BB9687F88A1700
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/df094277-d2bc-383c-bec8-1ab56e3af9ef.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     25899
IP address blocks:        206.192.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a2:ae:56:bb:96:87:f8:8a:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=76da21d5-2bdf-4f33-b35e-d5bc18e73674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:d5:5d:54:6c:c4:22:6c:02:0a:ba:39:40:
                    62:f7:a3:53:67:a1:5d:39:1f:2c:dd:bc:9a:52:29:
                    60:f5:5f:c6:11:65:eb:bc:66:1f:9c:70:43:44:1d:
                    df:d4:af:e4:7e:5b:db:30:08:a7:11:37:34:81:96:
                    c6:0d:31:3e:02:43:06:b5:c3:d4:2f:78:b2:10:23:
                    9c:2b:0c:90:71:9c:25:26:20:57:a7:83:59:16:c7:
                    2a:f8:cc:8a:ed:98:9a:0a:dd:f6:66:64:62:dc:b6:
                    91:28:b7:75:dc:e3:6f:26:b7:c8:6a:c2:be:d8:6d:
                    1a:8c:d9:eb:0f:6f:cc:95:07:0e:00:e0:8d:38:c9:
                    8f:7d:4c:47:ef:db:46:8d:10:a4:b3:99:7c:30:22:
                    32:2f:9a:3f:fc:13:cc:5e:9d:35:c2:3a:e2:96:35:
                    b0:14:56:3b:e1:96:0e:e8:bb:66:95:20:d0:26:fc:
                    3b:1e:89:67:af:8f:5f:e7:b8:f5:08:69:7b:4c:b2:
                    f3:0f:e5:a4:64:1e:bf:1a:ef:b9:e1:09:5c:44:31:
                    77:81:90:ac:79:6d:40:12:a9:0e:01:b9:69:53:50:
                    e1:81:56:30:75:75:65:cb:c8:99:30:15:c0:29:6b:
                    49:35:c9:df:e7:08:25:38:c2:85:0b:c0:3e:44:96:
                    d0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DE:43:CE:30:05:EA:C4:6C:7F:ED:11:E6:F3:B0:B2:86:FE:06:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/df094277-d2bc-383c-bec8-1ab56e3af9ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:07:11:41:3d:33:69:5e:11:38:62:39:67:fb:e8:5f:e1:
         d5:74:ae:24:e1:29:48:26:40:0c:98:8d:d7:e5:38:ac:b5:9d:
         3f:fc:61:0f:1a:3b:34:93:2f:3c:2c:11:b0:6e:6d:6b:9d:2b:
         76:d8:77:cf:08:8e:b2:b6:3d:20:f2:b5:87:0c:5b:52:ee:94:
         a2:98:92:6a:4a:47:a4:73:41:83:a5:de:4d:4f:01:f5:86:46:
         58:ea:90:8d:65:31:a2:44:7f:96:7b:7c:24:0e:ae:33:d1:55:
         65:88:d2:d2:00:0b:ba:c3:a4:75:3c:87:af:3e:c3:e7:f5:f1:
         94:69:0c:95:3c:fd:d3:1a:3e:f1:56:63:19:29:1e:0b:d4:1d:
         6a:98:49:d3:09:b7:b5:fd:a1:ea:a9:56:68:25:ce:43:f8:b2:
         60:01:1a:8c:06:99:9d:98:76:d9:1a:24:d5:9b:1e:ce:ae:e1:
         7c:91:98:8a:f3:79:41:06:9d:7a:fd:86:f1:07:0f:ef:ce:58:
         f8:1b:ef:a1:de:78:09:f1:c9:2a:4e:7b:86:9e:0a:b8:a2:12:
         14:f1:f6:6b:d2:86:c4:49:be:14:b5:d8:94:dd:d0:a4:64:58:
         5d:af:f4:14:ea:65:79:35:b2:59:42:61:d2:8a:e9:30:7e:c9:
         90:91:6e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:49:43 2025 by rpki-client