Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/47bce724-07ca-32da-b320-05f71a5201ed.roa
File:                     47bce724-07ca-32da-b320-05f71a5201ed.roa (raw, json)
Hash identifier:          24zBAVfGbQ5MufpHU6tBldXlY22l0NaJkRHQriXLJz8=
Subject key identifier:   BB:7D:68:03:2D:16:B6:DC:2C:F6:D2:B2:09:B4:CC:88:3F:90:43:C2
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584AD0D66D22509C667F64583BB0
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/47bce724-07ca-32da-b320-05f71a5201ed.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     546
IP address blocks:        206.219.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:6d:22:50:9c:66:7f:64:58:3b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=55f932a8-4d54-4581-b755-46aec8d7e1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f2:0a:76:98:28:60:c6:79:b6:25:30:70:26:
                    a3:5b:3e:61:57:0e:bb:b9:6f:78:fe:52:bb:72:52:
                    51:7b:3a:e9:c8:92:f0:ef:82:0e:16:ff:26:9c:63:
                    23:e3:fb:3d:82:ac:80:cc:ca:7f:e1:a7:fe:49:e5:
                    19:b2:0a:0d:48:3b:c7:33:85:14:c1:9e:72:f0:87:
                    ae:45:d9:25:47:02:7f:65:ff:51:fe:8b:63:fe:be:
                    16:b8:72:e4:ea:fd:de:98:bd:e3:1e:6f:0a:d1:1f:
                    fc:09:c8:26:19:46:5a:83:aa:29:66:48:2e:3a:c6:
                    2f:e4:76:94:82:b8:5f:bf:43:71:da:e2:17:86:92:
                    21:13:9f:9c:f7:84:6d:bc:e9:9c:cd:e5:35:0b:04:
                    66:d0:cc:22:4b:cf:94:3e:44:3f:f9:ce:a9:11:8e:
                    10:7b:08:0c:19:ed:77:18:04:da:7c:44:62:14:f0:
                    06:7a:20:69:7b:fa:97:ff:53:c4:7f:ba:4b:07:81:
                    ed:c9:60:c8:bd:d0:b6:e7:c5:b9:62:09:c5:08:2e:
                    14:bf:98:76:99:e5:66:97:65:54:c8:68:2c:bb:2e:
                    5e:28:34:f8:70:41:5d:97:6d:66:bf:ac:7c:84:c8:
                    9b:44:58:89:a8:1d:49:04:49:d1:f1:06:cf:ed:60:
                    1c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7D:68:03:2D:16:B6:DC:2C:F6:D2:B2:09:B4:CC:88:3F:90:43:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/47bce724-07ca-32da-b320-05f71a5201ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:97:63:cd:58:09:fd:74:d6:28:56:fb:2a:de:0e:6c:c3:bf:
         6c:8a:8a:d7:10:0b:6f:c8:9c:87:2f:dd:b8:b8:ac:d3:88:d4:
         dd:47:74:fe:ef:69:aa:2d:5f:90:d4:fe:c4:a8:25:ff:1b:5f:
         03:01:03:c0:b5:dd:0b:1c:7e:c7:91:71:8d:a6:b3:57:e7:ae:
         93:5a:e7:79:19:81:ba:b2:c3:b2:dd:8b:56:43:c5:3b:a5:e8:
         cf:b1:d7:bf:11:29:cf:59:c7:e2:8a:c7:fc:ae:db:49:7e:34:
         d9:48:67:4f:2f:cf:75:43:ad:c1:9d:c9:ef:39:dc:87:02:5a:
         b4:d5:c4:93:3f:e6:93:40:62:c9:63:19:0b:72:4b:df:20:27:
         ef:4b:66:7d:5b:95:7e:18:8c:04:ce:05:a2:c7:2a:80:f2:35:
         33:83:c1:9e:0c:53:3d:0a:55:9a:f8:1b:fc:18:2f:18:14:67:
         ee:49:27:0d:9e:b3:75:87:26:00:46:fa:b3:1c:22:55:eb:a7:
         d5:cb:00:f7:c9:69:69:3e:d4:5c:70:e2:c1:ce:31:e3:2a:e2:
         fc:6d:08:e3:e5:66:31:fe:50:f6:23:06:bb:28:b0:c7:a9:44:
         9c:9b:23:b8:1f:86:bd:e4:8e:38:34:ee:ff:2b:7e:61:8e:dd:
         a4:02:f9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:12 2025 by rpki-client