Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/fdd0c6b0-9f84-336b-a702-2ab455f7e681.roa
File:                     fdd0c6b0-9f84-336b-a702-2ab455f7e681.roa (raw, json)
Hash identifier:          vbQsFxJHXJzgHAD0fjSfQtCZ6y94ct3soCNGFs59mlY=
Subject key identifier:   D9:94:76:AF:9F:76:F1:15:38:D5:0E:BF:48:3C:37:5D:F9:96:5C:CD
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584AC016433A6C2563A220822E00
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/fdd0c6b0-9f84-336b-a702-2ab455f7e681.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     397373
IP address blocks:        206.162.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:43:3a:6c:25:63:a2:20:82:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=4a24007d-1103-4eeb-b88b-26801f85558c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:43:8f:8b:7d:f9:56:f4:ac:c0:10:68:8d:64:
                    a2:2d:d4:dc:36:e9:df:d6:10:25:9e:8c:da:96:e4:
                    bd:0c:dd:e4:94:4c:e3:60:3c:e7:9f:2e:1d:6a:76:
                    81:66:1f:29:c5:d1:ec:02:44:37:48:cb:9d:0f:55:
                    b9:5b:6b:1a:1b:72:a5:52:18:e1:f0:5d:fe:d7:6d:
                    1c:24:d1:5b:74:b2:58:f1:cc:97:e7:67:f0:93:5c:
                    69:7a:a4:d1:be:89:0c:9f:29:42:09:cf:ef:e3:e8:
                    a7:07:13:26:a5:a5:4c:56:d0:a2:7e:d8:6f:f6:a8:
                    a2:d6:7a:30:e1:2d:be:e3:b5:b1:dc:b1:2a:fd:fb:
                    c1:bb:a1:21:a6:25:12:b9:c2:7c:2d:24:fa:41:94:
                    df:57:ec:f2:41:ec:d3:45:d5:5d:62:a7:67:bc:4d:
                    93:76:49:ed:60:49:3c:2b:a2:35:56:fa:f7:9c:a4:
                    9b:b2:27:29:a2:69:38:9a:ce:58:31:99:d5:5c:dc:
                    60:fc:a9:70:3e:2a:a7:fa:c1:f9:af:af:6c:ad:f2:
                    e5:8a:33:76:6e:5d:05:0e:55:c0:e4:b2:98:8b:2e:
                    a5:83:ec:fa:7e:c8:64:2b:e0:01:9b:ad:75:b3:b7:
                    5c:a1:28:be:95:8a:a7:40:34:d8:b2:e4:79:3c:f0:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:94:76:AF:9F:76:F1:15:38:D5:0E:BF:48:3C:37:5D:F9:96:5C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/fdd0c6b0-9f84-336b-a702-2ab455f7e681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:49:00:94:38:9e:ac:6d:b0:5a:36:13:ab:29:aa:40:bb:99:
         24:01:ae:0b:7a:be:e1:2f:8b:52:d5:47:fc:75:f5:3d:16:a9:
         0b:12:0e:19:bd:31:20:36:7f:a3:28:d8:b7:06:91:d2:f6:9c:
         ca:84:7a:fd:81:1d:6c:ab:7d:4c:5e:4c:b5:2c:9b:b8:4d:29:
         b2:24:40:21:53:5c:ab:69:9e:70:b1:f6:a4:fa:cc:19:fb:7a:
         26:95:39:a8:9d:11:9d:7a:a5:dc:fd:d8:5a:b5:ed:f8:d9:a1:
         fa:bf:13:43:d4:d8:68:fc:28:33:c7:36:33:50:59:11:b8:6a:
         50:fc:4c:a6:07:04:79:4f:85:98:5b:5c:ce:dd:a3:8d:e3:10:
         5c:e0:3c:c4:63:3f:95:43:2b:14:1b:e3:a3:c8:c6:10:98:d5:
         4d:4f:89:6e:5c:de:31:6d:96:3e:bd:b6:bb:fa:7b:6d:84:a4:
         6d:8d:02:0f:db:9f:91:7c:89:b1:49:74:b0:90:6e:3c:b1:18:
         9a:8f:95:f5:38:e6:2d:4d:3f:29:f2:a9:d7:51:18:c4:cf:6d:
         48:7c:43:e8:60:8e:6e:71:44:96:0a:e7:0c:be:8f:98:10:84:
         aa:a9:96:29:94:ed:e4:0c:29:60:b3:41:dd:06:8b:bf:66:6e:
         b2:ca:cb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:49 2025 by rpki-client