Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/87c25570-4629-3e86-92ae-ad1b08d37561.roa
File:                     87c25570-4629-3e86-92ae-ad1b08d37561.roa (raw, json)
Hash identifier:          DYLL3ehklZPa7x8wiI7WNyuKcqzzbnM1xT0lbPXpQ2s=
Subject key identifier:   F3:93:FE:74:C5:54:72:1A:E0:1A:E6:28:C5:D6:F9:4D:7A:2F:86:95
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F432858493ED3D0989A6E13998B461880
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/87c25570-4629-3e86-92ae-ad1b08d37561.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     22808
IP address blocks:        206.48.244.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d0:98:9a:6e:13:99:8b:46:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=a6062964-15c7-477d-b967-3f15191f0eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:a5:11:3e:92:92:ff:50:e9:80:28:90:6e:
                    ba:4e:47:b2:71:1b:3c:bc:7d:ce:42:48:ba:db:59:
                    28:73:6f:f7:52:8b:4b:2c:2e:dd:9b:1f:7a:69:61:
                    29:37:a9:3d:24:35:4f:4c:43:83:25:c4:14:6d:72:
                    11:a5:b1:b1:00:5d:cc:72:0c:92:27:a0:bd:df:44:
                    b7:0e:2d:08:ee:9c:a7:e5:37:ba:86:e5:1a:a5:93:
                    a5:e5:44:46:27:99:9e:ab:c4:93:d5:96:19:b2:90:
                    ea:83:c8:b1:2f:40:72:8e:24:af:9e:92:e1:f4:cc:
                    54:bc:dd:09:f6:08:98:31:24:93:3d:31:78:0b:74:
                    e3:fe:68:8b:3d:5e:36:8b:0e:bc:fb:34:54:ce:f1:
                    90:4c:50:90:2c:ad:1f:3f:73:2e:26:3e:04:23:4c:
                    8b:e1:2b:21:16:8c:b4:67:61:c6:e9:6b:e9:26:d5:
                    8a:ac:51:f3:04:73:cd:88:37:79:48:5c:ff:eb:c2:
                    fc:25:8a:f0:d0:2c:a6:ab:98:f8:7f:d7:d6:ed:11:
                    0e:3d:b8:6f:60:37:d9:9e:15:16:bb:1f:3d:81:73:
                    0e:08:48:e0:04:72:93:90:00:1a:90:59:27:5c:01:
                    25:06:8e:59:03:d0:69:69:a6:cf:8d:f4:d3:48:6e:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:93:FE:74:C5:54:72:1A:E0:1A:E6:28:C5:D6:F9:4D:7A:2F:86:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/87c25570-4629-3e86-92ae-ad1b08d37561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:49:66:df:0a:38:10:99:70:31:ff:bf:cd:12:89:d3:c3:
         94:fa:e8:d7:c5:31:3f:33:55:3d:93:e1:53:88:b3:ef:96:88:
         9f:32:66:68:26:ee:25:90:14:6f:dd:e0:8a:20:b1:59:57:31:
         ae:1d:48:75:cb:45:17:34:71:3b:9d:81:ac:cf:f9:27:b2:73:
         95:19:9f:b2:7f:2b:86:a6:ab:eb:93:fd:c2:1b:f0:98:04:29:
         40:16:4c:e0:02:67:b0:22:74:5d:e6:3d:bf:36:fb:85:15:b5:
         1e:d1:20:95:b8:76:ed:3e:cf:b0:39:a2:2f:7b:f7:fc:66:09:
         8c:69:d9:50:ad:c9:cc:24:7f:b6:00:51:2d:f4:f9:4f:db:3a:
         30:ee:d0:72:80:b2:68:36:1a:65:3d:57:18:c6:cd:cc:42:34:
         82:e5:4a:eb:0b:59:72:ff:49:37:9e:a8:2a:e5:3d:12:5d:38:
         3c:70:3d:75:bb:79:9a:c0:a3:40:40:e3:cf:f0:08:05:84:f6:
         e1:cb:20:27:83:20:bf:69:26:20:5e:ba:c4:02:24:bd:a1:0b:
         3f:02:cc:18:49:ac:69:d5:8e:2b:d7:0e:d3:53:e6:5d:65:8d:
         ec:9c:aa:65:ef:cc:53:52:6e:d1:77:fc:e0:20:ad:11:bb:c2:
         5d:0c:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:29:17 2025 by rpki-client