Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa
File:                     a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa (raw, json)
Hash identifier:          7YPJU7/F0xlmlCmppXKo9YDEPXQTfPjq0+7B1l7bDyE=
Subject key identifier:   DD:62:6B:72:F5:7F:42:46:07:51:75:B8:06:83:BD:43:1F:04:32:3E
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584AAB264A08E78EA43FEFC19C80
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     42
IP address blocks:        206.223.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4a:08:e7:8e:a4:3f:ef:c1:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=36733d8a-07f5-47c1-987c-e89e83e2d823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:47:2e:30:da:82:98:b9:a2:93:0b:b7:ad:
                    7e:77:63:3c:f4:35:c6:45:0d:a7:4c:c7:b8:4b:52:
                    d0:6c:b7:5c:c9:25:2e:09:3f:26:39:71:0b:66:e4:
                    01:09:ee:4e:6a:2c:4a:b5:ef:03:f2:08:a9:bd:f2:
                    24:d6:62:39:cf:26:e5:f9:03:7c:43:1d:e3:11:9b:
                    70:b5:7c:41:cd:f3:a2:ce:e9:61:03:e7:42:a2:34:
                    6f:bc:f7:2a:4c:5d:c8:22:23:ed:0e:98:6e:af:4f:
                    e0:af:3f:94:d4:f4:d4:b8:1a:4e:17:1a:ad:ef:d3:
                    66:4a:4a:92:62:ce:c0:21:5c:8f:2d:22:f0:7b:47:
                    c2:a2:3a:24:d5:ac:d4:71:92:2e:4b:e5:3a:92:fb:
                    87:7a:79:ed:be:1b:f5:df:57:da:68:13:ac:45:58:
                    1c:60:f6:f0:a3:a0:08:1e:37:6b:46:02:8b:4d:15:
                    39:ee:74:ca:3f:69:a6:68:29:2b:37:c0:d4:4d:70:
                    82:69:13:49:1c:c9:9a:2a:18:ae:8b:c0:04:e8:bb:
                    26:92:13:df:bb:a1:2e:f4:70:f0:1f:0d:c6:19:91:
                    70:9b:76:1e:79:33:53:ae:c4:e4:ba:ff:64:03:37:
                    96:6d:c7:a1:f7:53:69:94:80:1c:36:d5:2c:f3:a6:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:6B:72:F5:7F:42:46:07:51:75:B8:06:83:BD:43:1F:04:32:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fa:e5:b4:3a:7e:27:31:69:e9:82:00:22:32:92:36:39:de:
         f4:18:f9:1b:d3:f2:88:c3:4e:47:d2:bc:14:03:d5:78:d2:39:
         02:d9:67:cb:b4:d8:9e:1c:a7:37:1f:1b:e0:d4:67:13:ca:ec:
         8e:86:b1:32:f1:06:a2:a6:87:1d:a8:d6:cb:13:4f:cb:50:cf:
         72:87:aa:b4:54:09:1d:4f:eb:4e:48:52:70:57:b0:66:91:43:
         07:73:fa:c2:7b:3a:02:f7:cf:5b:22:5b:1a:af:cb:a9:d9:7c:
         7f:4d:a9:f7:6f:12:0d:36:30:9d:a2:2d:6f:1c:6a:e3:38:6b:
         52:82:4e:a1:3e:2a:d8:58:7e:d0:e7:c3:89:5a:38:9a:83:f2:
         b4:13:c8:ac:17:d4:f2:1b:04:9b:40:6a:98:c4:06:59:62:0b:
         20:4a:5b:50:4c:e3:ce:94:43:1f:e4:2c:e9:86:cd:ac:7e:f7:
         6d:dd:82:47:15:67:7a:1c:99:02:9a:12:f9:18:e9:3d:19:4f:
         86:5c:df:e6:6d:4a:02:50:23:2b:48:0d:7c:f0:8b:cf:05:b3:
         6b:14:57:fd:1d:8f:f7:4d:f8:3b:95:77:99:12:c5:be:c4:54:
         2b:51:8f:98:42:d3:d5:7a:70:f2:9d:73:ad:e8:63:e6:36:5f:
         73:36:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:04:12 2025 by rpki-client