Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e3756c6c-90b8-350a-9ba8-bad47e2aa206.roa
File:                     e3756c6c-90b8-350a-9ba8-bad47e2aa206.roa (raw, json)
Hash identifier:          O3/g2yEJDC1Nck6Ay35s2x5c9rXIFh+SiNYPyj0a6WU=
Subject key identifier:   9A:F4:4F:C2:65:40:4B:DE:0E:BB:34:50:42:34:7B:9E:1B:DC:B5:05
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584A2D858B76F8ACBB3073B519C0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e3756c6c-90b8-350a-9ba8-bad47e2aa206.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     394437
IP address blocks:        206.198.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:8b:76:f8:ac:bb:30:73:b5:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=6b207f6e-43b4-4e85-84da-e84c78ffc780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:cb:5f:2b:de:c0:0e:b1:7b:28:0b:22:ed:
                    be:79:a1:4d:ef:ad:9f:6e:85:b9:74:d1:66:a8:f7:
                    97:6f:c8:bd:0c:6c:8e:1c:e6:b6:58:87:e3:ee:04:
                    4d:06:94:4a:9b:f3:c5:ae:bd:72:a8:2e:73:07:4b:
                    a5:a8:2a:47:9e:df:a7:16:41:9b:35:e2:15:50:af:
                    26:33:06:e9:f2:93:1a:ff:66:74:e1:f5:93:9e:5f:
                    f1:e7:11:35:0a:32:b9:a8:c0:12:68:5c:2b:f3:b6:
                    73:8d:60:cd:2c:63:04:5e:51:46:05:d2:ce:bc:8c:
                    aa:3c:93:1e:b0:22:58:d2:c5:e3:32:70:4a:99:f5:
                    a8:59:47:37:63:e3:c3:9d:66:72:38:d8:ae:f4:34:
                    49:37:23:74:69:38:81:16:05:75:9f:a9:5c:84:a9:
                    df:41:89:f0:42:69:1f:94:36:ff:0a:ac:f9:bd:b4:
                    ba:5a:7b:62:22:79:39:3a:2b:8f:59:9f:70:08:13:
                    84:b1:7f:df:6d:79:6f:0f:ec:06:e5:88:88:55:75:
                    95:8e:f7:37:58:53:e8:a5:d5:66:6a:ed:26:cb:0a:
                    9b:f0:c9:b9:6c:f7:1b:bc:66:86:d9:ac:b2:e5:69:
                    81:26:dd:c1:36:57:a3:83:39:cc:c8:9f:92:af:2f:
                    9b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F4:4F:C2:65:40:4B:DE:0E:BB:34:50:42:34:7B:9E:1B:DC:B5:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e3756c6c-90b8-350a-9ba8-bad47e2aa206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:66:96:4d:e7:3b:e9:e2:53:49:de:29:7c:ac:db:83:f3:dc:
         6a:78:6e:df:79:4f:69:40:bc:9e:4d:49:84:e5:79:89:7e:51:
         b9:93:b4:37:a5:0f:73:3f:c5:56:e0:04:63:6b:21:9a:1b:bf:
         f5:60:a7:74:36:78:76:8f:09:87:a8:3f:4c:10:b6:d4:66:e3:
         3a:c4:91:25:38:eb:a0:b9:a3:94:fd:c9:fc:38:46:d3:c8:7c:
         cb:fe:e5:8f:05:ef:5b:b7:43:e0:44:7d:e6:ab:a7:23:9a:55:
         bb:37:2e:42:d1:94:78:e1:05:a1:0e:9a:a5:fa:44:4e:30:6c:
         40:4f:71:05:df:57:ba:c6:4c:79:b4:72:e8:cc:b3:7e:f4:ad:
         f4:d5:2e:8b:f9:40:0e:60:0d:3f:57:0b:04:8c:05:9b:44:f5:
         ee:d8:b7:91:9d:2a:c5:c3:83:73:1f:e2:8a:fa:83:ff:8c:60:
         99:29:72:02:9e:13:f8:4a:4b:0b:39:25:ff:19:46:33:38:c4:
         f6:02:f8:0f:67:37:78:de:f3:96:71:04:2f:ee:ac:6c:14:c7:
         4b:c6:8c:df:e6:10:d0:7b:b4:0f:84:40:aa:cc:a5:b3:92:75:
         96:06:bf:95:ee:a4:8d:57:38:c0:ad:cc:8d:a6:dc:95:13:14:
         a6:c0:46:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:02:24 2025 by rpki-client