Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/48b08723-5307-366d-96b6-1550226da095.roa
File:                     48b08723-5307-366d-96b6-1550226da095.roa (raw, json)
Hash identifier:          2oDNbJoDsRChx4AC8mdif/KOloFBSP8uEeuWgQ0ZokY=
Subject key identifier:   15:09:BF:4E:87:D8:57:47:34:A1:72:E8:F8:35:B7:E1:08:25:01:AD
Certificate issuer:       /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial:       010D0C9F43285849E654E98B0847642BB0ACC1C0
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/48b08723-5307-366d-96b6-1550226da095.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     7029
IP address blocks:        206.174.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:e9:8b:08:47:64:2b:b0:ac:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=ebff55d8-68c6-4033-978b-f16175f23a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:6f:81:00:35:39:11:1a:7b:71:df:c0:e7:
                    98:4a:95:fa:c8:a6:6c:57:99:cb:38:02:35:c7:c7:
                    af:90:16:cc:4d:36:e9:a3:3a:00:3e:a6:cd:56:0f:
                    39:58:ad:7e:8b:bc:6f:2b:5e:bc:d0:15:53:02:2b:
                    b9:67:ae:aa:b1:7d:86:72:b6:84:95:f1:e9:ce:69:
                    2c:f3:e4:35:2d:2f:06:1d:f3:5d:8f:09:03:d6:c9:
                    73:68:a7:5e:f9:16:ae:70:00:b7:3f:9e:dd:de:d8:
                    b2:74:b9:ec:ab:b6:aa:d3:a1:a8:61:8b:e8:61:25:
                    c2:8a:4e:a0:ac:62:0c:44:e7:79:3b:d6:ba:f2:d1:
                    17:5a:33:b7:9b:95:54:5d:3a:59:0d:a8:64:fc:c4:
                    2a:a7:df:0c:0d:44:fe:c3:9c:96:53:e0:cf:8a:33:
                    01:b4:00:8e:50:51:14:9b:7a:2d:07:0c:87:7f:0c:
                    04:80:e2:f0:53:9e:67:58:16:36:1b:39:c0:dc:f0:
                    8b:65:ef:cf:67:2a:ad:e7:40:3e:48:3c:cd:7f:27:
                    43:ed:d3:75:94:11:54:48:a8:54:b9:98:94:cd:28:
                    3c:f5:ec:ae:a3:70:68:b6:62:fe:1f:e5:1d:f9:7f:
                    11:71:36:85:4b:e6:51:a8:35:7b:04:f5:e1:cc:28:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:09:BF:4E:87:D8:57:47:34:A1:72:E8:F8:35:B7:E1:08:25:01:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/48b08723-5307-366d-96b6-1550226da095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.174.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:88:c6:bd:ac:8a:e7:15:17:2a:29:7d:e4:2b:b9:84:cc:
         a1:f9:5e:c9:cf:02:5d:2e:cc:ce:cb:8f:f4:53:4a:4f:03:24:
         3f:22:b4:24:70:29:62:a7:b7:69:90:a9:a0:6b:58:83:7f:c9:
         18:2d:59:ac:01:87:76:33:73:6f:04:57:f6:61:04:cf:f7:3f:
         a8:c7:9c:35:f2:46:6b:d9:41:fd:96:2e:17:36:44:8a:46:55:
         72:2e:a0:4d:2b:5c:82:45:aa:86:b3:b6:04:2b:f8:f7:84:f6:
         9f:69:f4:4f:2d:c8:de:87:f7:d9:9f:72:d6:d5:a5:04:10:f5:
         21:1c:21:b9:7c:fa:88:af:80:0c:4e:69:8a:bc:d3:73:07:24:
         50:e4:12:6d:b1:fc:25:e5:5c:4e:1b:71:5d:9c:af:c9:a8:25:
         77:19:4e:eb:83:91:45:b3:13:85:05:7a:0e:25:cf:58:b4:6c:
         21:ac:7b:60:4b:80:a1:fa:65:c9:f6:30:aa:b4:6a:56:12:9f:
         4c:61:d3:02:8c:a4:a7:f9:ef:cd:13:46:ee:85:0e:7e:3a:87:
         08:18:60:77:8f:06:ba:68:cf:89:56:a9:0c:d5:6b:2c:18:ca:
         26:ea:ed:53:0a:12:8d:73:9c:25:a2:47:4c:92:7a:45:7f:63:
         e3:a2:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:01:08 2025 by rpki-client