Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/2e2c70d9-43f9-35c6-bbb3-95520ca1ed91.roa
File:                     2e2c70d9-43f9-35c6-bbb3-95520ca1ed91.roa (raw, json)
Hash identifier:          TPaw0uQlFYYteQid6OkYVYVEHpHE+OCFw9cxwCrR9hc=
Subject key identifier:   87:54:AB:80:1A:B2:2E:65:D0:7E:8A:42:3D:7A:24:7A:34:B0:C5:95
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F43285849B2AF632502CAECE7C8E79AC0
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/2e2c70d9-43f9-35c6-bbb3-95520ca1ed91.roa
Signing time:             Wed 30 Apr 2025 13:01:02 +0000
ROA not before:           Wed 30 Apr 2025 13:01:02 +0000
ROA not after:            Tue 29 Jul 2025 13:01:02 +0000
asID:                     6939
IP address blocks:        206.125.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:af:63:25:02:ca:ec:e7:c8:e7:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Apr 30 13:01:02 2025 GMT
            Not After : Jul 29 13:01:02 2025 GMT
        Subject: CN=29953823-c86f-4bea-aee4-68abe9f13d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:40:2e:47:19:7a:3c:d5:56:2a:8f:47:d6:
                    93:8f:09:7b:82:1d:5b:35:05:e6:2e:cb:8f:f2:c8:
                    86:e1:41:f6:26:fd:95:77:c0:cc:16:7a:72:b6:f1:
                    77:f1:49:bf:12:2c:5c:cc:47:49:40:a6:5b:b5:92:
                    84:31:b8:19:36:b5:ef:bc:70:3f:07:a5:91:a5:85:
                    92:d0:bd:82:df:c3:27:f9:f5:0f:43:d9:f0:d2:2f:
                    a9:ca:03:9e:6a:8b:f9:93:31:07:9e:1b:24:3c:a0:
                    fb:23:5c:f5:3a:c0:cc:34:0e:7a:b9:de:29:02:69:
                    76:90:f0:14:c9:5b:c8:41:28:90:a1:d6:5a:95:06:
                    1a:fb:94:2b:7b:a5:60:eb:63:4f:bb:01:d4:8a:5f:
                    ab:19:cd:b1:3d:b8:81:d6:87:20:ac:6c:43:cd:08:
                    53:7d:75:31:9d:d6:36:89:84:8b:71:4d:c0:72:6e:
                    5d:1b:bb:77:bd:b2:70:b8:be:a3:5a:09:47:c5:a1:
                    45:24:3b:44:f4:75:d6:65:ed:1e:af:0b:f6:55:2f:
                    b5:3f:33:67:ee:73:56:1b:6c:dd:41:10:3c:af:1a:
                    fa:36:f0:1b:9e:07:42:2b:b3:3d:53:c8:76:3e:ec:
                    a4:3a:9e:a6:74:a4:96:35:e0:37:46:8d:9e:12:41:
                    bd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:54:AB:80:1A:B2:2E:65:D0:7E:8A:42:3D:7A:24:7A:34:B0:C5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/2e2c70d9-43f9-35c6-bbb3-95520ca1ed91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a2:cf:bd:c2:9f:07:38:7d:30:9f:58:56:21:83:66:e4:1d:
         b6:7f:fb:7a:fb:50:fa:1d:0c:c5:9f:02:2d:d7:3c:00:ef:85:
         65:1a:15:39:68:01:0b:b7:cd:91:03:77:df:19:fe:46:3e:bc:
         8d:b8:24:96:2e:5c:dc:5d:59:96:5c:8c:9b:e3:4a:9a:8f:c7:
         4d:e6:6a:3b:45:b8:ea:fc:fb:d3:9a:1a:51:2f:24:49:86:e6:
         ac:1e:73:dc:93:a2:05:fc:16:14:a5:28:c7:43:89:a5:cd:71:
         82:32:99:47:31:83:fd:38:34:e3:3f:21:16:0b:5a:70:af:f2:
         2b:ca:f2:40:29:6f:ea:63:86:ad:de:47:45:e3:e7:00:61:1b:
         1d:b0:26:8e:21:11:99:81:65:a4:26:11:b0:30:c8:1e:83:24:
         58:c9:69:fb:62:f4:c5:28:80:3a:18:ac:c2:50:83:d6:47:24:
         d8:84:5b:f1:9d:62:11:b1:ef:f9:9c:84:b4:4f:a9:3f:4d:df:
         ed:44:db:c8:11:26:48:6a:ce:dd:d8:c4:b2:7b:06:1d:b5:a5:
         da:d4:81:a5:64:8b:5b:e4:27:06:3b:fa:64:9d:e2:92:7f:43:
         a2:68:19:dd:a5:24:96:3f:c7:45:d4:85:8e:54:74:d6:44:cd:
         a2:74:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:25:53 2025 by rpki-client