Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/20d14446-12cd-3b50-8640-005c2608fec1.roa
File:                     20d14446-12cd-3b50-8640-005c2608fec1.roa (raw, json)
Hash identifier:          VhBQfMcSssbZ8qTKgRv9aeIo7QxNwyiNky0hPJjTQyg=
Subject key identifier:   BE:2D:FE:B1:B9:EB:EF:F3:BC:69:0F:03:EA:AD:4F:45:ED:F2:DE:76
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584965E97B6DC4AA5D64B1C25A00
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/20d14446-12cd-3b50-8640-005c2608fec1.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     26548
IP address blocks:        206.162.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7b:6d:c4:aa:5d:64:b1:c2:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=98321648-8168-427e-81d3-c7246018f429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:00:5e:8c:01:7d:dc:e5:ed:28:6f:16:6a:
                    3a:0d:26:95:a3:30:e5:5b:3c:98:96:6e:a6:e6:d3:
                    68:26:8b:13:e7:62:e3:25:48:1c:44:a4:88:b4:d2:
                    4e:1a:40:c9:37:f3:30:7d:3d:7a:7c:58:6c:29:86:
                    d2:2c:1b:ee:1a:51:91:cc:4e:7b:45:25:de:c2:0c:
                    41:42:30:4a:ba:f6:8d:48:76:48:bb:23:c9:d5:76:
                    80:9f:c1:1f:c3:ce:8a:16:9c:1e:e7:83:e8:d2:07:
                    a9:6a:e4:74:50:ed:2a:d9:1f:49:54:70:82:97:7c:
                    6e:08:9f:7b:ca:c0:4b:05:62:cb:65:8c:00:e2:7c:
                    e7:a8:8f:13:d4:07:e8:5d:49:89:01:8a:95:69:c5:
                    f4:32:d7:cd:86:04:ce:55:01:8f:6f:04:35:f2:4e:
                    68:85:bf:dd:e7:81:25:9c:14:e0:31:90:4e:ab:83:
                    cb:91:d9:c0:a2:e4:a6:f8:b1:4c:3e:48:b3:0a:96:
                    da:dd:2b:0a:6e:80:7d:68:86:d0:43:a3:b0:39:65:
                    f3:00:68:99:8d:d1:40:77:76:c3:60:ea:b6:d1:41:
                    d2:67:42:ca:b3:53:f3:5d:fd:65:63:48:52:af:c4:
                    8b:ae:c1:f0:2c:c9:a3:fa:6f:7c:09:29:7f:bb:9e:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2D:FE:B1:B9:EB:EF:F3:BC:69:0F:03:EA:AD:4F:45:ED:F2:DE:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/20d14446-12cd-3b50-8640-005c2608fec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7f:8c:4c:e2:8f:46:1c:da:af:52:3a:00:db:08:8e:df:7b:
         5c:ed:25:a9:11:1d:91:5b:24:43:d7:cf:0e:e2:f5:28:e8:a3:
         cd:aa:7d:83:8b:c2:74:14:f1:c9:a3:9c:5f:b7:3e:2c:f0:b1:
         90:aa:a8:ae:8f:b8:96:69:ed:eb:a7:a6:82:95:f0:0e:55:3b:
         93:3a:f3:c8:9e:4e:60:ec:b8:9c:d9:0b:fe:52:27:55:3f:72:
         91:83:68:c4:e0:bb:0f:9d:45:25:32:d5:34:26:85:6a:07:c0:
         cd:3b:1d:a1:a1:23:54:71:70:0e:54:25:e9:58:34:12:80:63:
         dd:b2:0d:21:53:64:68:0d:db:a3:60:03:74:e4:7e:e0:7f:69:
         3b:0c:af:8c:28:7d:c9:b7:ce:90:01:f3:e4:fd:72:1a:95:88:
         3a:86:7d:a1:04:9c:41:c4:27:ab:4e:97:73:c7:80:1e:a2:3b:
         7a:3d:7a:46:e3:66:82:69:66:7b:9c:05:9a:63:63:10:5f:b9:
         38:26:82:e0:5f:52:39:e3:8d:47:9b:1b:ea:22:f3:09:ea:8b:
         c8:21:8e:4e:f9:fc:f7:f1:d7:22:1d:84:f0:cc:51:84:67:08:
         f8:38:b4:6f:54:7a:c7:e9:93:d7:27:80:6b:1f:82:0d:96:1b:
         b0:5e:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:21 2025 by rpki-client