Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/56432fc1-a38f-300f-b622-fa2bbe7bef7b.roa
File:                     56432fc1-a38f-300f-b622-fa2bbe7bef7b.roa (raw, json)
Hash identifier:          n0IZH+hyIavDuklIoShiQkl3ZvpMaaIDEtQQFndIpr4=
Subject key identifier:   B2:F7:7E:4B:C1:5D:53:85:D4:1E:81:28:43:F1:23:A3:4E:28:C8:28
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584A9D30EA4FF1A1932C2B226C00
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/56432fc1-a38f-300f-b622-fa2bbe7bef7b.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     33211
IP address blocks:        206.41.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:ea:4f:f1:a1:93:2c:2b:22:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=ce6ae8c6-655d-46b1-93e4-1824383d72cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:5f:d3:96:4b:26:d7:ca:97:2a:40:02:ec:
                    8a:ca:61:e9:a0:ea:54:57:db:a1:5f:21:fa:22:c1:
                    56:11:31:df:32:51:bf:49:69:40:0e:88:eb:e6:5d:
                    63:d8:26:53:c6:76:4a:a9:53:8d:ba:3c:3e:71:30:
                    d9:25:16:9b:b5:46:eb:e5:93:66:7d:ab:5f:d2:d7:
                    45:63:f3:ab:a1:b7:38:b4:a7:d5:b9:d7:85:d9:d1:
                    9f:20:5c:e0:f0:43:79:5d:2c:4a:cc:31:77:e2:b1:
                    5a:5e:4f:66:89:82:ad:81:80:8d:5c:b6:25:f1:81:
                    5e:7d:3d:f9:c3:c4:cf:f4:03:aa:fb:89:fe:11:43:
                    8d:a4:72:f8:f4:77:15:ed:10:63:aa:62:1f:4c:ab:
                    6a:2a:d0:55:5d:a5:f6:43:f6:7b:4a:0e:35:84:28:
                    28:1b:67:b3:56:ab:10:34:cb:08:c9:d1:8e:2f:5b:
                    01:ef:d3:fc:b9:d3:cc:b3:14:92:76:3b:2e:88:ad:
                    10:89:52:cf:2d:ce:bf:a5:7a:78:78:6a:c9:5b:17:
                    83:08:d6:27:74:90:72:a3:9a:01:64:f9:b6:c2:8d:
                    63:27:d5:ce:0f:ee:a1:3d:60:f0:24:fb:da:d9:6b:
                    6c:3a:8e:9e:cb:aa:a1:11:15:5e:02:85:b8:67:fb:
                    4f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F7:7E:4B:C1:5D:53:85:D4:1E:81:28:43:F1:23:A3:4E:28:C8:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/56432fc1-a38f-300f-b622-fa2bbe7bef7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5c:ee:df:f7:b1:d6:8c:bb:0e:f8:a4:f0:44:5b:2e:c1:65:
         fd:89:73:07:c3:f5:74:21:51:dd:b4:0b:fb:54:f0:36:96:04:
         ae:57:a5:6a:d6:4b:b4:8c:d5:b3:0a:08:55:a7:8b:a7:9e:b3:
         10:f0:34:c5:a6:84:5d:5d:14:1f:ea:5a:6a:28:ec:3b:41:b7:
         92:38:22:e3:22:b3:e1:12:dc:80:3e:20:a7:ae:12:86:8b:1d:
         de:99:21:5e:1c:78:1e:3c:74:f6:22:37:35:6b:c0:07:f0:28:
         85:37:e4:98:d6:37:af:2a:38:fc:89:2c:f1:30:33:03:de:1e:
         34:29:de:75:d8:63:22:71:4e:5e:4b:a7:ca:9e:67:ef:bf:e8:
         e8:c8:5e:93:bd:ec:84:5f:0d:78:b0:13:ec:b1:6d:02:29:c4:
         00:f6:3a:ee:67:de:5a:2d:fc:7d:67:4a:06:db:36:01:a8:cb:
         02:a5:2b:e4:c3:2d:41:e0:10:c9:f1:d3:47:af:af:16:39:9a:
         1e:b8:5e:9b:bb:96:d6:ce:3b:4e:00:39:fb:cf:99:bb:52:e4:
         22:8a:5b:f1:40:5a:15:e8:71:69:ff:4b:67:7f:53:19:44:88:
         61:2c:d4:f4:34:84:48:fc:78:f0:89:fe:52:04:43:76:e8:e8:
         56:0e:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:06 2025 by rpki-client