Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b2cc346c-6300-33bb-a69b-78485d036c2c.roa
File:                     b2cc346c-6300-33bb-a69b-78485d036c2c.roa (raw, json)
Hash identifier:          AAYOjvcmhHqHNXMIqGzLorU8Ty9SNHZn36SsKfd1PPE=
Subject key identifier:   E8:FE:5C:96:D0:73:D7:9F:9E:C4:53:AB:F1:C4:A5:6D:B6:BF:AC:45
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584A454040994F8E180538891F00
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b2cc346c-6300-33bb-a69b-78485d036c2c.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     26548
IP address blocks:        206.162.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:40:99:4f:8e:18:05:38:89:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=1f885550-ae4c-4f90-bd90-db9e65b1fc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:2d:1f:bb:4d:d2:b2:18:c9:16:e0:e2:ce:
                    a4:ee:81:8e:3b:58:f5:5f:b5:35:b5:49:97:9a:96:
                    fb:10:17:5f:88:ae:74:60:bf:a1:e0:6d:cf:52:f1:
                    9d:a3:7b:dd:ed:b4:ab:a7:2b:fc:9b:3b:02:34:4f:
                    a5:79:b9:32:0d:31:b6:e7:29:44:47:e8:c4:95:1e:
                    3d:b9:d5:5f:6c:8f:31:45:55:5d:a2:09:6d:49:a9:
                    df:cb:8c:6a:72:0d:11:d8:ab:b0:6f:57:55:4f:b2:
                    82:62:42:20:c6:5b:7f:71:c0:5c:a8:f1:82:0b:5e:
                    0b:05:a1:2b:ab:95:22:b9:7d:4d:4c:6b:ce:19:ac:
                    4a:36:84:fe:84:2b:0f:02:65:8c:c6:bc:f7:ad:f0:
                    17:8f:79:71:7e:18:99:5f:13:33:3e:8f:c4:d3:80:
                    e9:2d:5c:06:d6:e8:68:58:e5:12:4a:1a:b5:85:f5:
                    fb:03:7b:c1:60:ba:cd:b0:2a:9f:e4:eb:a7:7b:f7:
                    6f:73:b4:17:7c:13:80:f4:d2:ee:0c:f5:d3:cb:78:
                    31:ad:4e:37:a5:42:04:83:45:de:d8:71:6d:63:85:
                    bb:1d:f8:cf:6b:59:15:00:8b:0a:09:1d:cd:eb:17:
                    15:7c:d8:f4:60:02:4e:35:50:7b:c8:87:3e:8e:00:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FE:5C:96:D0:73:D7:9F:9E:C4:53:AB:F1:C4:A5:6D:B6:BF:AC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b2cc346c-6300-33bb-a69b-78485d036c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:59:16:ba:e8:4d:f9:91:84:f3:3e:6b:25:50:35:84:56:38:
         c2:0f:90:cc:42:3e:3c:7c:68:27:d3:de:00:ee:74:14:6a:29:
         9a:a7:05:d2:6c:fe:0c:fb:5d:16:75:b1:c0:e8:8a:f5:f2:91:
         19:dd:a5:28:4a:aa:11:21:b1:15:39:e9:50:8a:40:c2:99:96:
         5d:61:5b:aa:a6:21:4a:66:3c:31:21:f7:ee:35:dc:24:1d:85:
         5c:69:82:f1:0e:54:c7:dc:d3:f4:5f:20:bc:fc:95:3e:16:d5:
         33:59:df:d1:d6:05:31:d0:ff:45:b8:61:5d:92:51:f1:2d:13:
         75:fa:60:9f:d2:b7:3f:d8:9a:b1:c1:d1:2a:14:57:73:15:8a:
         c4:17:f4:93:eb:df:79:a4:ff:d0:d1:78:7d:e6:8c:52:0b:24:
         13:9f:07:81:8c:33:90:9f:05:02:b1:06:0f:7b:32:bc:03:07:
         8b:93:26:32:3a:e1:0c:fd:a1:e2:87:b2:a6:80:b6:22:13:81:
         94:23:0e:9c:c6:c0:5b:3c:44:35:2e:47:8f:4d:a0:95:a9:0b:
         9e:f0:f0:4f:45:07:47:b9:62:92:7b:2d:57:5f:47:56:44:23:
         b7:9f:b3:9c:29:50:5d:0a:f5:c4:ee:db:e9:2f:c9:59:40:b5:
         34:90:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:02:41 2025 by rpki-client