Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS206092.roa
File:                     AS206092.roa (raw, json)
Hash identifier:          xJkxS+vTQxKB57az24Ib18Z0MGd1Egu8kyR9T37HHhU=
Subject key identifier:   82:28:A7:4B:D3:B1:32:F7:D7:BA:29:9A:71:1B:60:92:08:1D:A2:5F
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       019421C513906E1374E3FCAA2B2EA7043C022A53
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS206092.roa
Signing time:             Fri 25 Apr 2025 12:04:51 +0000
ROA not before:           Fri 25 Apr 2025 11:59:51 +0000
ROA not after:            Fri 24 Apr 2026 12:04:51 +0000
asID:                     206092
IP address blocks:        140.99.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 03:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:c5:13:90:6e:13:74:e3:fc:aa:2b:2e:a7:04:3c:02:2a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr 25 11:59:51 2025 GMT
            Not After : Apr 24 12:04:51 2026 GMT
        Subject: CN=8228A74BD3B132F7D7BA299A711B6092081DA25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:b0:36:ff:21:1c:ef:81:26:8e:df:16:ab:
                    ad:73:44:94:45:38:48:7b:ea:f9:a8:fa:ed:59:53:
                    99:21:24:4d:a7:9c:d7:2e:76:fa:12:c8:8c:a4:7a:
                    46:0d:22:fe:1a:47:58:43:04:57:1d:56:47:3c:c8:
                    7a:72:b6:19:74:8d:d2:06:2e:2c:0d:70:75:b2:64:
                    5b:44:aa:31:e4:d3:6a:5c:da:7f:e1:39:df:29:b7:
                    b0:fe:18:dc:e0:f2:6a:e6:8d:4f:d1:86:ba:85:db:
                    83:f0:66:06:e2:c7:d3:a3:2d:eb:7c:f1:a9:29:cd:
                    28:b7:64:e4:fa:41:9f:90:b7:b6:0d:35:37:6c:14:
                    7d:5e:51:9a:2d:dd:e5:91:c3:2c:8a:10:65:69:98:
                    32:d3:5e:f1:e9:fc:5c:ac:09:d0:c0:ed:10:e0:f5:
                    82:d6:1a:55:46:0b:d1:54:86:81:6b:54:99:43:ec:
                    e3:10:cc:0e:aa:7d:2f:54:09:73:9b:83:7a:71:f9:
                    45:40:15:1f:ca:70:d4:bb:a8:07:17:d0:44:e9:64:
                    ce:56:51:c9:d5:a0:31:89:9c:f1:c9:61:95:62:cb:
                    16:b2:76:7b:b9:dc:e4:d8:b6:77:91:8a:03:e0:21:
                    b9:90:0e:1a:f8:5d:9f:83:1c:98:c0:1a:a2:29:a0:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:28:A7:4B:D3:B1:32:F7:D7:BA:29:9A:71:1B:60:92:08:1D:A2:5F
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS206092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:c6:60:10:51:ff:a4:d1:0f:e5:fb:92:5c:62:fd:85:0b:16:
         0e:e9:63:4a:69:51:e0:b3:b6:55:3e:d3:a0:69:00:74:65:8f:
         b1:d9:e5:02:0a:2d:f8:ea:4d:de:a3:66:16:38:70:8f:48:e4:
         41:cd:40:88:ab:31:f5:b7:82:77:7e:09:f0:0a:03:4a:e5:ef:
         bf:3b:e2:92:0e:45:10:6d:9b:40:54:23:87:71:be:2b:69:f1:
         57:cf:ef:e7:29:80:55:4a:d9:42:23:10:b4:9e:e5:b3:61:9a:
         fd:d3:34:95:d2:4a:b6:95:9f:a3:51:22:5e:e4:c4:ca:f5:e4:
         05:91:5a:fc:b3:22:0c:4c:dc:6c:8d:4f:ef:52:e2:f3:3e:c7:
         55:8c:1b:8a:dd:80:07:dc:95:c7:66:71:f4:2a:35:0a:2c:21:
         dc:f4:78:4c:2a:07:65:71:30:8f:80:49:46:df:ae:80:f8:fd:
         e3:02:a0:cc:c8:14:07:7c:0c:44:e6:c2:3e:25:bc:28:a8:36:
         e2:8f:96:92:d7:1b:2d:65:97:71:a8:7a:bd:f6:4a:58:5d:c4:
         da:1a:38:d0:94:79:30:4c:d7:28:a1:ac:9b:cb:cf:1b:65:6c:
         90:9b:e1:42:c1:1e:7e:f9:11:4f:86:65:33:42:a0:06:e6:54:
         ed:37:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:32 2025 by rpki-client