Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/605faebb-bb3f-39e5-86b3-c16c7c853eda.roa
File:                     605faebb-bb3f-39e5-86b3-c16c7c853eda.roa (raw, json)
Hash identifier:          I6feoTKVPk0zDMj0SoByB5Tg9vDrb4V9S0BloF2Eyfo=
Subject key identifier:   D1:4A:02:5F:64:1C:93:05:1B:43:A3:EB:70:37:12:E2:C8:1A:75:13
Certificate issuer:       /CN=fd41f50f-fe94-4803-9998-4983492c4d38
Certificate serial:       010D0C9F432858497C3EEDDCDEC40576602508C0
Authority key identifier: C4:08:C1:A9:70:D3:A6:79:51:EB:7F:B5:2D:33:87:D2:98:82:F7:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/605faebb-bb3f-39e5-86b3-c16c7c853eda.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        206.126.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:ed:dc:de:c4:05:76:60:25:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd41f50f-fe94-4803-9998-4983492c4d38
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=fc951116-da89-4732-b218-33d18d87d693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:86:ea:b6:e1:8e:72:3f:2c:9c:ae:bf:cb:
                    ed:88:2d:3a:4b:f6:75:80:4b:8d:5c:f9:b7:64:b4:
                    a5:a1:17:6c:18:69:1b:c7:45:c9:3f:8d:4c:5d:ed:
                    ef:2c:d9:83:1e:30:33:0c:67:50:ff:b8:5f:fd:e5:
                    72:0c:ec:5b:5d:5b:e9:10:36:ae:55:aa:92:fc:52:
                    76:a5:c0:3c:ad:ca:8a:6a:71:dc:24:5d:79:bc:7c:
                    cf:1b:91:c3:91:af:06:cc:44:30:13:57:cd:7a:2e:
                    de:95:ef:56:a8:74:42:f8:be:dc:94:bc:c5:4d:42:
                    f6:39:70:59:06:6e:f8:59:2c:4f:5c:23:24:87:a3:
                    0c:ca:c2:ea:fa:97:f2:9f:b2:87:84:43:10:04:86:
                    b5:1e:a1:3b:55:81:0b:d3:bc:79:cb:9c:5b:5e:26:
                    42:c1:30:c0:3c:76:fe:20:ae:ad:9d:62:bd:17:34:
                    c7:22:99:b2:53:28:47:2a:25:8d:e0:53:c2:87:89:
                    55:13:39:43:e9:42:fa:65:88:5c:83:a5:d0:c3:03:
                    85:46:8a:8f:38:98:df:e1:c1:ab:51:ee:50:7f:64:
                    ab:a8:7a:da:f6:e1:80:39:d4:8e:0d:48:c0:98:92:
                    11:0c:af:60:08:60:89:e1:0f:ae:f6:a5:7c:54:d8:
                    7f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4A:02:5F:64:1C:93:05:1B:43:A3:EB:70:37:12:E2:C8:1A:75:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/605faebb-bb3f-39e5-86b3-c16c7c853eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.crl

            X509v3 Authority Key Identifier:
                keyid:C4:08:C1:A9:70:D3:A6:79:51:EB:7F:B5:2D:33:87:D2:98:82:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:64:a1:bf:ad:1f:d4:7a:b2:bd:b9:b6:d8:8f:89:11:16:
         e5:bf:38:6d:24:d6:81:2e:81:c9:59:34:62:e4:39:54:3d:cd:
         a4:f2:74:8b:29:7e:c5:56:12:f8:27:c2:0d:74:d3:62:a0:44:
         11:16:32:3d:75:4e:29:95:56:08:82:e4:e2:06:2f:82:a9:75:
         f6:6f:c4:52:16:c8:c7:dc:df:62:89:9c:de:10:54:2e:71:63:
         88:f5:a7:18:52:95:97:f0:a5:51:81:6a:b6:64:c8:3d:0b:43:
         e4:3b:c1:bf:73:22:ff:11:a1:ab:f0:1d:a4:cb:41:f3:3c:66:
         30:8e:f6:84:a0:bd:dd:ad:85:b9:35:ca:d2:45:12:7b:2e:99:
         be:45:9d:51:a5:bc:52:d5:95:f6:03:0b:92:a6:e6:c2:c1:cf:
         0c:15:96:8c:e0:d3:10:0c:1f:db:e4:02:ec:23:69:65:4f:55:
         de:e3:35:fd:60:d5:70:dd:5c:9a:ad:bc:f5:33:8f:69:7f:3c:
         74:b9:51:c3:26:25:db:c7:dc:58:13:25:f8:c6:2d:6a:e8:e5:
         1c:2a:3e:02:93:2a:6a:7b:a6:dd:09:b9:8b:a9:ed:e9:a8:f6:
         45:89:03:a0:49:c4:c8:76:d0:75:ba:f4:b8:d7:43:11:9d:b3:
         a4:39:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:20:40 2025 by rpki-client