Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/f24b5d7f-695e-3bc4-a6ea-fb317350f59a.roa
File:                     f24b5d7f-695e-3bc4-a6ea-fb317350f59a.roa (raw, json)
Hash identifier:          aa9m2Pgek3Ulol8+oqqYfHhawfuIuNFlgQ62wphZK9Q=
Subject key identifier:   DF:49:09:3D:2A:44:2B:6A:7B:92:10:15:6D:CF:94:0C:98:0D:A9:66
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F4328584ABD4B782A71201CA343CA3700
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/f24b5d7f-695e-3bc4-a6ea-fb317350f59a.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     14618
IP address blocks:        206.55.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:78:2a:71:20:1c:a3:43:ca:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=0dae8e72-d217-4ec8-9325-988927957b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:87:68:25:6a:ff:46:33:02:43:39:a4:59:
                    fa:7f:9c:55:01:46:a2:44:e4:2a:0e:98:d3:2e:f3:
                    54:a6:e5:63:53:7d:6c:65:8d:d5:52:90:c5:6f:fd:
                    dd:23:49:be:44:95:f0:5d:8c:12:68:ae:7a:fb:b3:
                    a9:20:cd:a1:63:27:7c:5f:f2:bd:1c:11:96:29:ce:
                    3f:25:96:36:14:9b:04:ae:a2:50:75:50:00:a2:a5:
                    cd:6c:1b:36:6c:94:be:1d:5e:7b:f6:d7:9e:69:eb:
                    bf:8f:bb:d0:a8:cd:bf:52:27:b1:8c:7b:cd:4d:35:
                    5c:f3:ea:89:e7:0a:37:12:6b:4c:5c:47:43:fa:44:
                    e7:e3:cb:4a:00:6e:28:25:9b:bb:db:db:bc:94:4a:
                    c6:a4:27:cf:83:f0:a1:9a:28:76:07:b1:8c:5d:c6:
                    c5:f9:c2:87:03:3c:0c:47:9b:cd:bb:97:b5:4f:70:
                    9b:9a:e9:76:65:e1:b1:28:55:dd:44:78:ac:cb:44:
                    62:0c:63:a8:83:42:33:69:ae:a1:18:f0:a8:d7:6c:
                    f1:91:5d:dc:eb:fe:3f:95:31:23:fd:f5:d6:3d:c2:
                    1a:5c:31:a2:8d:a4:71:d0:cb:fc:fa:d1:2a:25:d3:
                    e1:c5:f3:34:7e:68:bb:35:ce:8a:07:d0:ce:61:14:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:49:09:3D:2A:44:2B:6A:7B:92:10:15:6D:CF:94:0C:98:0D:A9:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/f24b5d7f-695e-3bc4-a6ea-fb317350f59a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:c6:ee:2a:cb:f7:ec:6e:81:fa:6f:37:56:1e:e5:44:ef:d4:
         9c:03:ed:33:b5:fe:74:29:57:64:04:03:99:96:02:1d:47:ca:
         e0:d4:89:9c:3f:bd:f9:1d:dc:c1:4a:e7:bb:e2:63:66:ea:4d:
         80:25:ae:f2:b9:54:52:bc:03:75:15:81:c2:d3:a1:24:8b:b3:
         08:81:30:c5:7a:5c:c3:b8:1e:d8:e6:86:cd:4f:21:23:36:a0:
         00:21:56:f0:31:3a:ab:97:6e:d0:6f:7e:6e:af:51:19:0c:79:
         a2:c6:2b:af:54:0b:04:88:41:e5:7d:39:20:7f:20:5f:55:50:
         18:28:20:fd:ae:6b:c8:40:52:62:44:f3:94:82:d0:68:ca:5d:
         88:aa:58:72:fa:5d:da:d8:f5:44:41:27:6e:96:9f:1f:b6:68:
         f7:d3:ed:61:b5:ea:6c:aa:eb:40:b5:05:1c:9e:90:95:50:ad:
         57:1e:81:50:ef:36:23:7c:29:e9:c1:44:6a:cc:0a:bb:ba:fd:
         c9:9c:ad:3d:ed:16:e9:19:41:3e:c5:97:62:e3:23:0e:a5:c7:
         9a:13:7f:92:86:57:27:bf:a2:bb:ae:ca:27:4d:af:3b:80:75:
         73:2d:67:26:5b:9d:9d:cf:70:3a:d6:be:eb:38:86:49:9d:9e:
         b5:16:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:06:53 2025 by rpki-client