Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/6c0c07b4-bbaf-3587-aaae-dc9ee78a1648.roa
File:                     6c0c07b4-bbaf-3587-aaae-dc9ee78a1648.roa (raw, json)
Hash identifier:          6KN2MnnD5GLEuTpvSsZwVIurzzaogEU7SiMBN6lVZ/0=
Subject key identifier:   B6:ED:50:E1:91:10:70:2A:55:30:AC:72:3D:9C:5A:2F:FD:12:3B:F9
Certificate issuer:       /CN=74d72927-c457-49f5-98e1-a37443a035e6
Certificate serial:       010D0C9F43285849D2CA1BD5A999EF1DDCB5DC9D
Authority key identifier: 91:EB:C2:5C:4E:35:C2:22:A9:A2:CF:44:B9:90:9D:59:F7:04:CD:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/6c0c07b4-bbaf-3587-aaae-dc9ee78a1648.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     14301
IP address blocks:        206.208.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/74d72927-c457-49f5-98e1-a37443a035e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/74d72927-c457-49f5-98e1-a37443a035e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:1b:d5:a9:99:ef:1d:dc:b5:dc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d72927-c457-49f5-98e1-a37443a035e6
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=0ceec75f-64b4-463d-818b-2ad3072afb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:b4:35:4c:de:60:3a:e9:81:72:d3:8e:cf:
                    f2:2d:0a:41:97:e4:f1:ff:f9:6d:ff:a5:60:35:78:
                    87:b5:57:ca:a5:fb:b4:7d:98:fc:68:41:6e:d9:a6:
                    99:31:a3:04:78:f7:e6:4a:b0:6c:c8:3a:b8:e1:dd:
                    ff:c1:c1:32:64:1e:56:71:1b:c7:c3:f4:bf:17:88:
                    cb:ec:c3:4c:c6:c7:45:76:0d:3c:c1:e8:e1:89:5f:
                    be:d8:a5:af:d3:40:65:8d:91:da:dd:9a:2e:c9:d2:
                    a7:ad:50:ed:c0:5f:4f:59:87:59:75:4c:77:e5:a2:
                    5f:a4:52:2c:10:3f:58:fe:7a:94:f1:1d:64:41:76:
                    ca:36:34:d1:57:59:bf:94:ea:aa:f1:73:93:d8:94:
                    86:05:b9:2b:9c:cd:c7:b2:ac:92:33:75:45:59:dd:
                    e5:47:69:6e:eb:60:19:f6:a1:99:1d:c2:d9:b4:07:
                    89:8b:c0:fc:d6:06:bf:98:e2:a8:00:78:31:dd:d6:
                    bc:8e:d0:53:83:02:8f:16:bc:04:ca:84:cb:f5:47:
                    b2:7a:ee:8c:c4:d5:0f:b6:fc:f7:66:6a:9d:c7:86:
                    86:2c:d9:5e:b9:31:8e:71:0f:a6:d2:b5:29:cc:5a:
                    dc:51:03:49:aa:61:e8:6a:5b:ed:12:24:f4:8f:5b:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:50:E1:91:10:70:2A:55:30:AC:72:3D:9C:5A:2F:FD:12:3B:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/6c0c07b4-bbaf-3587-aaae-dc9ee78a1648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/74d72927-c457-49f5-98e1-a37443a035e6.crl

            X509v3 Authority Key Identifier:
                keyid:91:EB:C2:5C:4E:35:C2:22:A9:A2:CF:44:B9:90:9D:59:F7:04:CD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.208.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:68:99:b3:a8:3c:0e:20:13:d8:dc:52:57:b8:85:b5:d0:85:
         06:69:cd:bb:cd:d3:9d:67:cd:51:b4:c9:aa:a2:1b:45:f5:43:
         fa:92:80:c2:18:e1:5e:83:a9:84:de:42:6b:65:5c:9e:de:f2:
         1f:b1:f6:14:fd:8d:98:86:b8:ef:f6:85:4e:58:8a:c9:8f:e5:
         07:2b:39:f2:5b:87:d9:47:73:c5:a9:52:e2:ef:75:e3:7e:e8:
         2f:04:6a:27:80:8e:1d:5b:77:61:ef:61:91:f4:59:da:fe:ef:
         06:53:0e:2b:05:98:ac:5c:bc:6f:d8:1a:c5:8e:13:59:16:a6:
         bf:16:52:c0:77:47:7b:7b:c4:d0:75:26:0d:9e:d0:16:86:73:
         e1:d2:1f:e0:1c:b3:71:2e:63:a3:68:e6:b8:1a:e4:63:b9:2b:
         8c:74:aa:32:f3:88:a6:05:5e:7e:73:f8:13:59:ce:4b:28:83:
         0d:58:d4:82:80:92:81:4e:68:a2:7f:c1:83:bc:d6:f6:f6:54:
         17:24:41:92:a7:93:33:f5:b2:c4:9e:97:2e:97:7d:f6:11:4b:
         1a:ea:0a:3e:4b:12:6c:9e:1c:65:42:46:38:2d:4e:72:a7:85:
         cb:68:07:3d:95:a4:cb:84:1f:19:f9:fd:21:69:c5:18:ed:de:
         91:5a:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:15:46 2025 by rpki-client