Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/20154855-3f56-3707-b01b-ab8e6f474c03.roa
File:                     20154855-3f56-3707-b01b-ab8e6f474c03.roa (raw, json)
Hash identifier:          F2G3KjWqRZC5r5T519069GqFCEiYg+wcogC4qW72Oto=
Subject key identifier:   4B:9A:01:B0:1A:28:92:06:EC:15:AF:7E:A4:B1:34:B3:A3:21:2A:FC
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584A0C0567B585F52BE4CA493D60
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/20154855-3f56-3707-b01b-ab8e6f474c03.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     2734
IP address blocks:        206.223.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:67:b5:85:f5:2b:e4:ca:49:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f1457b97-a282-4d0d-b857-70b3e12a8526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:ea:51:1e:cd:1e:13:bc:04:1a:90:0f:4a:
                    6c:1c:4f:fa:fc:bf:af:4f:80:ad:ac:57:b2:68:bc:
                    f9:a3:22:05:bc:f0:8b:1b:d4:07:a1:39:2d:c0:f8:
                    68:7d:31:f6:b7:01:bd:85:5b:71:cb:29:ba:88:c1:
                    df:32:fd:c2:85:dd:db:52:b7:d6:57:ff:77:98:60:
                    4c:9b:79:64:b7:75:75:6a:66:fa:d9:00:f5:17:d4:
                    3a:2c:64:04:5c:f8:b8:4a:64:89:8c:38:a9:82:31:
                    aa:a3:83:bc:50:85:e4:c2:c1:e8:cf:8b:20:ae:63:
                    86:62:03:8a:89:3b:a8:ea:1a:af:9a:df:0e:4e:19:
                    6f:b0:20:8c:4a:52:bd:73:80:60:8d:82:77:40:80:
                    57:1f:a7:ff:a4:d9:0d:eb:eb:f5:46:ff:2f:2a:32:
                    f8:1e:b1:ee:e6:20:75:7b:06:0f:a1:a0:0c:96:8a:
                    8d:e0:9e:a9:07:f9:33:d5:a6:a5:e8:10:63:8b:a2:
                    c8:aa:bb:8a:ad:78:95:20:77:8c:71:cb:47:9b:bb:
                    a7:22:f8:8d:f2:a1:c4:7d:94:45:48:40:a1:11:3c:
                    12:72:7f:5b:06:a5:59:79:4e:5a:40:18:6c:85:e2:
                    d6:e4:e7:bc:8f:d8:18:f6:21:f4:46:87:27:e1:2b:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9A:01:B0:1A:28:92:06:EC:15:AF:7E:A4:B1:34:B3:A3:21:2A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/20154855-3f56-3707-b01b-ab8e6f474c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:78:b2:f9:77:4e:b2:f1:f8:d5:84:a2:5a:94:ac:76:da:1d:
         e2:a4:a4:47:03:72:16:7d:8b:74:8f:f5:c3:75:46:84:85:ba:
         1b:8e:c6:13:e7:29:4f:8d:e1:6b:8a:d6:66:bf:fd:ef:83:48:
         4a:35:0c:db:28:fd:71:83:13:79:b2:22:a8:f9:44:7b:d5:bf:
         06:9c:a8:34:e2:fd:ea:eb:13:95:6d:c0:32:a4:4a:6d:38:ad:
         5b:f5:ef:aa:b9:ec:eb:5f:2e:27:c5:de:d9:6b:c1:76:7d:70:
         e7:de:c3:6c:4c:b2:56:b7:00:21:ab:aa:43:66:89:65:c9:8c:
         c5:3b:76:7e:45:43:d5:42:cc:9f:25:04:d8:69:36:06:6b:7a:
         c6:9e:3b:07:b3:bf:b5:20:53:ff:51:eb:03:3f:3c:e9:0d:a5:
         34:7e:33:1b:ac:8e:1a:9e:3c:bf:7a:33:ab:61:7b:da:c3:fe:
         18:bb:6d:dd:86:f4:fe:1c:e4:47:bf:f1:e6:8d:ba:df:29:52:
         c9:17:f5:18:a1:5f:c0:30:73:f4:94:42:9b:59:88:73:d3:d6:
         2d:05:17:6d:57:bb:7d:8c:33:03:5e:c3:85:35:6e:86:d2:f8:
         24:f6:74:ee:cf:55:9c:f7:9b:e4:34:cf:01:b2:a2:20:8b:68:
         6e:af:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:38:57 2025 by rpki-client