Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa
File:                     ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa (raw, json)
Hash identifier:          eguYmRs1CGRFMLpFzomOWbIVaePQChIY+v2MXwThYIc=
Subject key identifier:   12:10:A6:AF:D3:B6:4D:3B:B8:4F:96:DD:25:90:BF:CE:C7:A3:14:AD
Certificate issuer:       /CN=f229bba4-1d66-4a9f-8e40-159e94bdd015
Certificate serial:       010D0C9F43285849CE9A4FBB6C3F71A84A48BD40
Authority key identifier: 56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        206.198.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:4f:bb:6c:3f:71:a8:4a:48:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f229bba4-1d66-4a9f-8e40-159e94bdd015
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=f26ca753-846b-4650-8d30-75b041a4af42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4b:ab:4a:00:22:95:1a:8f:df:54:e3:eb:79:
                    09:8a:82:5e:84:f3:9f:95:3b:f9:3c:4c:c3:26:96:
                    20:78:64:c5:40:22:3f:14:06:a2:96:2a:d3:e9:df:
                    6f:c1:6c:1a:d5:e0:41:90:48:8b:39:a8:83:99:99:
                    44:c8:a3:65:fd:6e:26:d6:52:1c:5f:9c:07:11:9b:
                    d2:40:12:5a:64:50:ef:94:39:49:ef:ee:5c:7f:be:
                    b6:24:9b:6d:af:38:7a:c3:42:eb:e9:16:22:b6:5d:
                    25:8e:81:6c:ff:e7:07:14:67:2a:25:ee:63:1f:b5:
                    6f:84:70:af:e1:1a:5e:72:ff:1f:6d:e5:4b:a2:df:
                    0e:54:27:8b:23:83:7b:2b:c2:b6:1f:dd:f3:83:96:
                    41:a6:66:ff:d7:1b:92:cb:28:7c:ab:1f:25:14:02:
                    93:8b:07:46:45:f2:cc:9d:99:4c:5e:06:41:43:df:
                    2b:c6:d5:30:ad:d4:8e:f1:4a:bb:70:08:ce:96:74:
                    e2:3b:90:19:25:eb:6d:b7:d4:fe:40:57:b1:8d:2a:
                    fb:95:bf:6d:11:4b:78:7d:b3:46:87:0d:c0:35:86:
                    47:c7:00:60:d6:b3:39:01:43:e6:d5:bb:91:55:7a:
                    a3:64:9f:0e:b6:ff:8a:fe:71:1c:3c:2f:1c:35:db:
                    59:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:10:A6:AF:D3:B6:4D:3B:B8:4F:96:DD:25:90:BF:CE:C7:A3:14:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/ac8bfafd-782d-3f2a-bada-8f51073a92ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015/f229bba4-1d66-4a9f-8e40-159e94bdd015.crl

            X509v3 Authority Key Identifier:
                keyid:56:41:D8:48:AC:B9:29:79:0A:18:8C:CD:74:E2:54:9C:3D:F5:86:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f229bba4-1d66-4a9f-8e40-159e94bdd015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ca:85:39:56:8d:00:98:3d:58:2a:02:aa:ae:15:e7:7a:f3:
         35:50:e6:a5:e6:d7:49:b6:bf:c2:98:d3:d0:28:5b:9e:a1:19:
         85:7e:38:6a:1a:68:1b:40:cf:51:ab:77:11:8e:e8:1f:23:13:
         39:97:2f:0d:71:07:df:47:c4:7d:19:14:95:2c:9f:e1:36:5b:
         06:54:3a:a1:de:14:f7:09:c5:58:79:f6:a1:0d:2b:14:4d:5f:
         d1:53:9e:fd:b8:14:58:43:b7:1b:a0:a0:be:a2:bc:4b:de:5f:
         a5:30:21:85:47:ab:d7:54:5f:c5:1d:c6:9c:16:cf:8d:29:93:
         51:bd:68:50:40:17:2a:b1:51:4b:b0:a8:69:f0:b0:a5:65:57:
         2a:3c:e5:6f:c3:f0:a0:6b:56:02:e1:d9:2f:08:65:6f:4a:71:
         a7:01:a4:0c:6d:ba:53:0f:7a:d9:46:cc:8d:0b:8b:b6:42:70:
         f6:a7:8d:5d:2e:46:b5:6a:6d:bd:63:d3:21:ba:b0:6c:1b:d4:
         29:f6:10:e1:1a:61:b5:9d:4b:62:80:1f:65:a2:72:7a:fa:6b:
         2a:7a:fd:cb:48:45:cf:a7:45:b8:cc:67:e1:ba:a1:90:95:e5:
         b9:ee:41:d6:ca:84:35:6e:64:ca:be:c6:d4:6d:01:99:d9:6a:
         65:08:36:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:01:25 2025 by rpki-client