Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b995eb-586f-39ad-969c-884580b42a0e.roa
File:                     f2b995eb-586f-39ad-969c-884580b42a0e.roa (raw, json)
Hash identifier:          /YryPSh4uS7yZjYDSmaMNdmo+RLeV0ckIbWKfKOd5jY=
Subject key identifier:   37:05:23:5E:EA:C0:90:AC:60:C9:15:30:01:A8:AC:17:E5:9E:DD:F0
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584AB91BA9ECAEABF418D00E9700
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b995eb-586f-39ad-969c-884580b42a0e.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     25899
IP address blocks:        206.192.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a9:ec:ae:ab:f4:18:d0:0e:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=d6a24d06-d6ca-428c-87a8-f55796341bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:7c:80:1e:88:88:55:69:01:7e:7d:1e:73:
                    67:25:69:cd:da:d9:91:6b:02:de:98:99:40:9d:91:
                    b1:ce:95:34:23:42:4b:f3:d4:b8:00:1a:c8:24:82:
                    99:16:50:af:d1:48:84:bb:a3:8a:6e:97:4c:f2:69:
                    b7:55:2f:de:b5:73:dd:34:f6:e5:5e:8d:24:f2:b3:
                    e0:fb:4b:e7:a5:05:7d:be:e2:5e:db:5f:3d:c7:68:
                    73:e0:d5:56:5c:ee:1b:84:01:08:b8:9a:1e:01:94:
                    71:6b:47:c1:26:58:d8:b8:15:16:a2:c7:78:85:9b:
                    fd:09:df:8e:5b:86:d5:7a:c3:6f:46:68:13:8a:a7:
                    31:bc:e1:56:80:26:1c:60:6f:55:05:ad:be:90:2c:
                    1e:d3:ea:d8:91:a5:37:60:85:b1:50:92:3c:51:12:
                    14:18:92:36:7e:e5:f5:53:87:66:d7:c9:e9:7e:bf:
                    d5:7c:68:3e:3a:56:12:f8:a6:d0:db:a9:d6:32:68:
                    d2:10:e3:cb:4e:fd:72:9b:20:83:4a:7e:70:1f:db:
                    44:3a:73:54:68:2c:8c:c8:2d:9b:7b:b3:44:b8:08:
                    82:0c:35:1a:0d:21:6b:d5:98:56:6e:97:4f:a7:59:
                    9d:bc:8e:8d:95:7f:b6:55:fb:81:40:56:1e:54:16:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:05:23:5E:EA:C0:90:AC:60:C9:15:30:01:A8:AC:17:E5:9E:DD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b995eb-586f-39ad-969c-884580b42a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:56:18:4f:e0:07:9a:35:58:c1:40:4d:80:9b:d3:da:98:73:
         b6:47:0c:c4:d3:5c:ce:2b:87:ae:e6:47:4e:58:a1:8d:92:0d:
         a4:86:1a:ae:74:50:79:a8:14:c9:a1:4d:0d:17:39:6c:61:a8:
         27:a7:66:aa:79:03:97:17:44:45:47:bb:88:0b:d6:12:99:62:
         82:b1:02:75:bd:8d:d8:a3:69:b3:92:98:7b:01:b0:75:7a:13:
         43:67:64:c5:98:98:97:b4:97:98:00:97:11:4b:93:59:6d:34:
         c7:42:79:a6:11:75:9a:41:3c:9b:21:aa:05:31:13:87:cb:5b:
         6e:60:d1:4d:cd:a3:5e:f2:ab:1e:43:37:3b:8c:57:0c:2a:37:
         4a:e2:87:da:74:08:d7:de:b0:2e:24:bb:a5:5a:41:3d:64:bc:
         2d:24:15:8d:c4:a6:21:3a:eb:0d:aa:a7:4e:c6:d5:64:6d:90:
         21:b8:88:ce:0b:d6:20:66:7c:f3:95:cd:30:7d:21:d2:c7:3e:
         18:28:e6:64:68:ab:7b:d8:b2:dd:71:ef:05:b6:04:ad:de:62:
         b0:63:89:6f:fd:20:56:88:55:9c:d4:86:a4:66:06:a9:57:d1:
         e6:22:ce:d1:de:f1:9d:18:77:c7:58:16:59:bb:83:6c:7b:c8:
         a2:05:2e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:47:04 2025 by rpki-client