Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1abc4e93-8f19-3acb-9a0d-da4cd1a9850b.roa
File:                     1abc4e93-8f19-3acb-9a0d-da4cd1a9850b.roa (raw, json)
Hash identifier:          BcwF0dlKEqGPSt+gRVMAtb/w4f5wGek+0xX86PGJxzk=
Subject key identifier:   7E:70:25:E9:0B:03:DF:FE:41:B6:99:79:DE:20:B1:6C:9A:0D:A9:05
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A03A55441A0307989161455C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1abc4e93-8f19-3acb-9a0d-da4cd1a9850b.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        206.198.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:54:41:a0:30:79:89:16:14:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=0329888a-9e7c-4734-869a-6b1e2a2f9db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:27:c2:f1:e6:c5:14:dc:7d:50:ef:15:96:
                    b9:a0:a7:6a:a3:e3:bc:d2:77:9c:ba:be:61:29:0f:
                    e3:dc:6e:ac:04:75:e7:e0:a6:c2:f0:cb:a7:83:21:
                    5a:fc:7c:4a:86:f4:24:c5:f6:c8:ad:90:97:de:07:
                    c3:84:90:b0:a4:ed:83:9d:8c:0e:1a:69:32:3b:af:
                    61:8b:44:fb:e5:8b:fd:a0:84:85:a1:d2:df:ca:0c:
                    29:ff:ec:7d:28:d2:ce:a3:19:b3:2a:de:c1:c5:be:
                    8d:67:fa:45:27:54:05:fb:69:58:1e:67:e3:c0:76:
                    f7:35:f5:48:59:95:19:76:e9:6c:d2:1c:2c:59:dd:
                    31:a8:d1:eb:6a:bd:1b:45:52:92:b5:f9:ca:ea:ee:
                    32:1d:74:bf:be:97:70:3e:0f:9b:44:34:8d:90:e8:
                    bf:44:f9:87:78:f1:94:f3:13:0f:d3:a5:1d:93:14:
                    56:f0:5b:b5:c6:3c:15:39:d5:fd:a5:d0:53:ed:96:
                    6a:d0:19:72:b4:37:af:d2:ae:4a:de:db:66:ba:43:
                    00:19:91:10:8d:8c:d0:11:c1:46:45:9d:2c:f8:6e:
                    7f:ce:e2:54:ca:2f:b5:22:76:98:52:89:df:26:2e:
                    5d:ab:3f:70:85:34:4e:64:4c:4b:27:1b:3c:1e:ea:
                    7d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:70:25:E9:0B:03:DF:FE:41:B6:99:79:DE:20:B1:6C:9A:0D:A9:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1abc4e93-8f19-3acb-9a0d-da4cd1a9850b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d6:1c:18:93:4a:a6:88:21:66:4f:b6:d1:9d:1e:b8:de:ba:
         d4:54:76:d3:c6:58:5c:be:fb:3b:d8:3d:6a:4d:6b:81:07:05:
         3e:60:4d:a9:4b:1a:60:9c:7c:51:d5:16:ca:ec:c7:48:dc:66:
         06:45:2a:e1:cc:42:22:02:94:5f:75:f3:cb:26:51:d2:d6:3d:
         9d:10:1f:29:72:a2:40:f8:ff:bb:ed:bd:ae:d2:b1:b1:7b:a1:
         75:fb:56:8b:48:49:c7:89:ff:81:2b:1f:8a:1c:2a:e2:33:8a:
         5f:5b:b2:84:54:71:e6:01:48:c0:a9:2a:da:3b:b2:21:50:67:
         4a:f5:3a:75:20:b3:6b:89:28:dd:c0:18:c4:56:fc:9b:e2:2a:
         84:18:de:3c:a3:aa:1f:5b:a5:cf:87:e0:86:27:d0:a3:38:22:
         2a:53:bd:25:dc:bb:0a:7b:90:0d:b9:40:78:83:73:52:69:4b:
         53:03:67:14:36:52:c8:5f:4f:56:5c:e9:11:fc:60:ab:5a:87:
         9b:9e:f0:ea:80:9a:09:67:6f:30:16:17:9b:b6:e8:c9:dc:d2:
         c2:60:d6:ff:50:6f:e5:0e:c5:0d:06:ca:79:55:36:d7:55:1f:
         86:2f:a6:4a:40:b3:ae:58:11:94:0b:05:3d:55:cc:60:89:e9:
         2a:ca:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:22:38 2025 by rpki-client