Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5a0703e5-24b8-37d9-9eeb-74244b211ead.roa
File:                     5a0703e5-24b8-37d9-9eeb-74244b211ead.roa (raw, json)
Hash identifier:          23u9OOvf+vKF+lZthar+7O84L1pJTFIwZhLAiJmMsRs=
Subject key identifier:   EB:D4:70:0A:23:0E:D3:FA:58:98:B4:58:F2:FC:07:CE:1C:7B:F4:5C
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584AAB264D2AA9BE25B0CEE3EF80
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5a0703e5-24b8-37d9-9eeb-74244b211ead.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     263214
IP address blocks:        206.48.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4d:2a:a9:be:25:b0:ce:e3:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=d30494ba-9825-4abf-ae9c-4d23e442be9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e6:8b:2d:2e:13:be:3a:7c:e7:52:73:59:9f:
                    a0:1d:bf:6a:23:73:07:9b:da:46:f1:7a:c9:69:9a:
                    f3:4e:75:ea:ec:84:a3:98:39:f3:de:df:fc:5f:4b:
                    20:7e:75:e9:f7:78:8a:68:0d:d9:54:5b:00:fb:61:
                    05:a6:55:7f:7d:b9:ec:e5:bd:ed:8f:ad:cf:54:eb:
                    73:16:d4:51:b8:e0:3e:dc:fe:3a:c9:02:1d:07:2c:
                    09:e8:81:1a:2c:a6:3e:7b:bc:ee:d2:3b:ae:7b:50:
                    67:39:97:ae:23:b5:4d:39:65:1d:68:eb:c5:cf:54:
                    e4:e2:65:06:4d:3e:08:65:48:89:58:28:01:5a:94:
                    5b:1d:09:70:5b:f3:c8:ad:a4:0f:4d:18:fc:9a:c5:
                    59:5f:2c:36:ea:d8:f5:b5:37:25:7c:20:2c:64:d6:
                    80:8f:de:b9:f4:da:0b:37:e2:ae:0e:38:b6:0d:44:
                    a1:6c:76:af:4f:39:b6:db:ec:f9:ca:c5:5c:db:18:
                    8c:52:83:e1:88:cf:38:5b:d0:9c:45:2c:73:36:69:
                    3f:b1:45:56:32:35:a1:27:ee:d1:e8:1d:d5:e8:35:
                    ff:d4:ea:35:af:9f:86:bb:2c:41:e5:87:79:6a:eb:
                    9f:76:28:3a:68:46:1c:fa:72:9a:eb:7b:7e:02:f8:
                    09:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D4:70:0A:23:0E:D3:FA:58:98:B4:58:F2:FC:07:CE:1C:7B:F4:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5a0703e5-24b8-37d9-9eeb-74244b211ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:76:a1:d2:b2:9b:6c:6c:6a:db:17:23:51:0b:7b:55:ed:f7:
         5d:27:d6:cc:2a:45:c1:2d:39:9a:5e:3d:dc:0a:b4:35:28:20:
         c5:6f:0f:29:62:35:fb:bc:d1:52:91:2f:de:f9:f0:53:db:91:
         d2:73:e8:28:7b:49:f6:6c:5a:42:8d:22:db:cb:d8:78:b9:b5:
         96:c7:66:21:6c:de:08:dd:66:30:7f:eb:71:4a:6b:58:14:e0:
         26:5a:6f:62:a1:7a:6f:e4:32:ea:a2:4e:62:42:d4:8f:dd:99:
         39:5b:02:d7:f9:b5:4e:13:e2:e8:c2:87:5f:39:7a:b8:39:02:
         c9:21:57:1a:db:50:78:ea:bf:f8:78:11:02:bc:ed:60:9c:e4:
         0a:e4:44:00:78:6b:7b:15:a8:ad:b9:c6:d0:20:d9:ea:01:4c:
         76:b9:d5:20:43:15:3e:f8:d4:cd:ec:ee:74:56:6b:5c:27:8b:
         f8:27:b7:81:66:00:63:30:d4:4d:76:8e:4b:70:d1:e0:43:39:
         9d:bb:ff:e8:e8:44:c9:b0:21:e0:08:bf:f3:d2:fc:5f:e8:06:
         a0:8c:f4:0e:53:e8:9c:11:c1:10:3b:ae:4a:09:2c:24:67:bc:
         8e:cc:ca:4e:5b:f6:be:4b:33:06:42:6f:14:b6:bf:4f:05:70:
         ee:d3:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:04 2025 by rpki-client