Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa
File:                     630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa (raw, json)
Hash identifier:          H8rDNM9IgOzuVnGFuKZ1C8R+995giXfRaxkcc4HWG/Q=
Subject key identifier:   BF:46:6E:B7:05:98:AF:BE:3E:47:61:BD:F6:56:27:76:77:7A:6E:5C
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F43285849AD1A0215169C93EAD8EA2500
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     834
IP address blocks:        206.162.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:02:15:16:9c:93:ea:d8:ea:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=97aa5769-19c7-400d-8b0e-81054468026f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:ee:0c:c9:0b:bf:d9:99:23:6f:d1:37:a9:
                    7a:bd:df:15:69:31:aa:90:73:ce:d0:ba:15:ce:67:
                    cc:03:d1:21:a0:bc:b6:05:a3:c5:7c:0a:3e:d1:49:
                    1f:00:9a:99:4c:b3:bf:2b:08:e0:f6:25:fc:32:bc:
                    35:b0:73:92:df:fc:ab:92:6c:8f:9f:80:f5:14:94:
                    2c:2f:3a:ee:e7:ad:53:90:90:e4:19:b8:b9:c5:be:
                    d5:18:e5:2a:81:25:6a:3f:eb:3d:a6:25:93:42:6d:
                    6b:ad:3e:f0:8a:0d:82:91:03:d8:e7:cd:47:ed:bf:
                    71:f1:f4:8e:49:e6:d5:d0:c3:e7:50:1e:39:be:d0:
                    8d:29:0e:90:7f:e5:3e:eb:20:6e:83:62:65:21:a1:
                    41:85:8c:02:5d:6f:83:eb:4c:05:83:05:88:10:7d:
                    3b:2c:cc:c4:2b:38:8f:1f:85:35:46:e1:35:3e:3c:
                    13:cb:b9:67:c1:5f:9c:c2:7c:11:4b:d1:c6:8b:fd:
                    25:7b:66:7d:f8:13:ef:09:77:82:76:bd:ab:8f:7f:
                    93:59:eb:3b:c7:fc:a3:e1:eb:3b:d3:cf:e9:d0:6e:
                    10:f6:52:44:a2:6c:ef:c4:92:61:dc:11:1c:22:b5:
                    80:df:02:c5:13:a0:e0:4f:cd:0e:a8:8d:63:90:e2:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:46:6E:B7:05:98:AF:BE:3E:47:61:BD:F6:56:27:76:77:7A:6E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:af:62:c3:1e:23:c2:4c:8f:70:dc:1c:55:88:22:31:7a:63:
         85:cf:90:f7:a0:25:d3:a7:c6:79:0b:44:f6:93:d3:fb:86:2b:
         b6:ab:ff:24:ff:9f:ce:8f:74:32:f5:89:5f:71:18:19:db:bf:
         13:4c:0d:98:2c:3f:e2:2d:23:7d:c2:5f:cb:19:3d:3d:3d:4f:
         ad:03:dd:b2:16:e0:fc:f5:71:38:92:96:3a:89:8c:28:3d:ff:
         cd:52:9c:53:c3:53:1d:1f:61:95:ed:fb:b9:db:51:1a:56:91:
         d6:7e:81:22:41:df:63:0e:a4:b2:45:41:ec:12:25:a8:dc:40:
         72:06:88:de:69:18:a7:85:48:0e:6b:97:a2:d1:eb:7a:57:61:
         ba:15:71:cd:c6:1d:4b:51:70:77:a1:25:11:a6:82:34:39:47:
         76:75:4f:96:ee:61:51:82:c7:37:21:49:0d:9e:0b:7f:d2:fd:
         cb:b9:98:ee:61:62:cd:70:e2:6f:29:e8:b0:a5:77:50:7f:d2:
         9d:08:16:c8:4d:0c:b1:d4:04:f3:84:8f:bd:82:12:dc:5c:e5:
         c8:66:e8:1b:9d:14:d2:e8:d8:22:da:8c:bd:43:f7:16:ee:b5:
         db:96:17:64:8c:88:eb:b0:3d:f9:08:cd:01:9c:82:9b:45:a2:
         f3:52:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:44 2025 by rpki-client