Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/651613d9-f95c-3260-aabe-7b3ee1849c7f.roa
File:                     651613d9-f95c-3260-aabe-7b3ee1849c7f.roa (raw, json)
Hash identifier:          bXC9i4UO88olkxTsUlpFyET5j9D5IkDY3J2VVzqnj/g=
Subject key identifier:   1E:12:1E:D3:51:AF:98:06:65:58:A9:AB:D7:3F:FE:C6:23:63:03:CD
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F43285849DC8FAC9F10610BACE1368100
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/651613d9-f95c-3260-aabe-7b3ee1849c7f.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        206.55.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ac:9f:10:61:0b:ac:e1:36:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=fe8d14f8-dbba-4351-9ea1-527aa32dc2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:32:d3:de:b6:4d:fe:b6:d9:03:c7:9b:b8:16:
                    31:0f:66:20:1e:cb:9c:1c:3d:f5:0b:3a:c3:cb:bb:
                    f9:aa:00:65:ab:89:6e:62:79:99:16:5e:83:bc:68:
                    68:56:80:fd:8b:53:01:98:82:97:fa:a8:7e:74:6e:
                    d1:aa:9b:30:d8:ce:f6:2e:21:f1:63:1f:dd:24:92:
                    91:2e:cf:ba:0b:e3:a6:6f:80:d5:71:1c:4d:4c:d8:
                    e7:8a:02:6d:91:8a:c0:66:08:1c:c7:0d:f7:10:b8:
                    e7:03:24:14:0e:fb:90:8b:68:08:3c:8c:7d:be:49:
                    54:d9:99:1a:a4:0d:0c:9c:cf:67:0f:b6:a3:89:be:
                    ae:f9:27:90:0e:ba:65:10:e9:ea:54:34:14:76:ee:
                    aa:ea:8a:fb:72:db:e2:21:a0:c4:6f:08:2c:58:3b:
                    ed:45:9a:ea:32:9e:52:20:f0:7d:87:dc:2e:5e:84:
                    44:c0:86:e0:1d:8c:75:cc:5c:b3:9e:7d:6f:f8:30:
                    01:49:5b:f1:6b:de:1d:bc:15:8b:7a:88:68:68:81:
                    0f:95:7c:ad:d7:ab:f7:38:7f:51:b3:f6:37:41:ff:
                    c7:e1:7e:6f:c7:d7:b2:7f:07:5c:ff:07:93:d0:33:
                    5b:ee:62:e2:33:e7:a1:0a:19:1c:60:29:b5:ce:29:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:12:1E:D3:51:AF:98:06:65:58:A9:AB:D7:3F:FE:C6:23:63:03:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/651613d9-f95c-3260-aabe-7b3ee1849c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:01:c5:62:a3:8f:53:bc:28:d0:59:1e:7d:df:78:75:46:f0:
         ee:49:a5:0d:b3:40:66:53:0d:f6:c0:05:7b:06:82:5c:fb:ce:
         ce:c4:36:ca:41:e3:8a:a7:84:b3:1a:d3:4b:e6:e6:e9:43:37:
         96:2c:21:04:bf:a9:3e:0c:59:23:0c:36:a6:69:04:b6:eb:72:
         9c:cc:fa:da:58:e6:92:82:ff:f7:cb:e7:df:ee:f0:aa:00:7c:
         0c:8f:26:8a:ff:66:6a:18:69:fc:cb:d3:f1:ed:f2:f1:23:7f:
         9d:66:46:63:82:dc:e1:e7:15:87:db:24:8b:2c:54:c2:e6:c9:
         57:93:38:f9:b6:67:b2:a6:59:0a:20:8e:d6:92:b0:29:fc:e1:
         b7:6a:ea:cc:39:a8:a2:9b:77:62:c8:94:96:29:dc:ad:6f:e3:
         76:8b:14:d1:8d:0a:89:60:57:b1:ba:aa:af:c0:78:b2:c4:ad:
         a4:a8:73:3c:a6:ea:5d:f8:7c:81:09:55:dd:f0:f7:d8:df:b8:
         b8:44:e4:f8:9f:88:63:39:ce:62:84:0b:6f:dc:32:07:f4:80:
         c7:58:90:f2:d6:2c:c8:a0:51:e8:c2:90:68:3b:d4:21:cc:60:
         97:2d:57:ba:50:83:cf:8f:2b:a0:14:92:7a:8c:94:48:4b:4f:
         0a:30:d7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:07:15 2025 by rpki-client