Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/8247b842-9eeb-33e6-969e-57260bed6fb2.roa
File:                     8247b842-9eeb-33e6-969e-57260bed6fb2.roa (raw, json)
Hash identifier:          hj1SRnKJlSefkOAwNv0jhfHnLm+NnxqopsjxEgE3c2k=
Subject key identifier:   BB:04:0B:7B:BB:AB:80:98:FB:8F:ED:0D:DE:7C:9B:9E:E0:2C:C4:F4
Certificate issuer:       /CN=fd41f50f-fe94-4803-9998-4983492c4d38
Certificate serial:       010D0C9F4328584AA6F62A8D648E1DFBA86C5FC0
Authority key identifier: C4:08:C1:A9:70:D3:A6:79:51:EB:7F:B5:2D:33:87:D2:98:82:F7:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/8247b842-9eeb-33e6-969e-57260bed6fb2.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        206.126.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2a:8d:64:8e:1d:fb:a8:6c:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd41f50f-fe94-4803-9998-4983492c4d38
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=d03c3534-8488-4d72-8501-8576c3b8db74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a1:2c:50:c8:ab:d8:aa:43:8f:a5:fe:22:61:
                    9f:a9:9c:b2:dd:da:a5:62:a9:db:50:9e:40:00:eb:
                    8c:b0:e7:96:90:6c:3d:85:c9:0b:44:3f:78:a3:b7:
                    e6:da:de:a5:44:63:00:8f:f0:37:c5:75:f1:c4:d3:
                    56:27:89:2b:d8:0d:f6:c8:ef:ce:ac:4d:f9:07:12:
                    2b:f9:7b:9d:e7:c8:c7:3e:b0:4e:14:4b:53:5b:6a:
                    49:da:91:81:da:12:62:88:f3:7b:b6:fa:94:4b:fb:
                    69:25:03:38:f0:b9:b3:c9:34:35:31:d2:f1:90:bb:
                    ef:f0:86:53:d3:c6:f1:94:9c:fe:b5:b2:62:98:6f:
                    a8:88:b6:7c:0d:1d:9a:45:db:b7:65:6d:62:c8:4a:
                    02:03:64:dc:f1:05:e0:2c:c3:b4:68:eb:aa:98:bb:
                    46:09:a5:47:aa:b3:ba:a8:68:40:3d:aa:08:35:15:
                    09:09:01:9f:91:d2:a2:5d:69:73:f1:79:74:b6:8b:
                    28:3e:2e:40:6b:ee:26:0d:b0:40:14:b6:6f:47:1e:
                    a6:2d:b7:60:fe:68:e7:16:fa:81:81:2f:8d:5d:a9:
                    25:bf:26:e8:58:be:e3:07:16:a8:2e:ee:ed:23:ff:
                    63:13:bb:49:53:d8:bc:59:47:96:16:f5:f6:0c:b2:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:0B:7B:BB:AB:80:98:FB:8F:ED:0D:DE:7C:9B:9E:E0:2C:C4:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/8247b842-9eeb-33e6-969e-57260bed6fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.crl

            X509v3 Authority Key Identifier:
                keyid:C4:08:C1:A9:70:D3:A6:79:51:EB:7F:B5:2D:33:87:D2:98:82:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6e:d0:52:fc:6a:4a:45:01:ee:7b:94:3a:e8:52:54:48:82:
         f9:ac:cb:b2:76:31:7f:6e:a0:3d:0a:70:aa:79:40:32:61:e1:
         f3:67:87:44:b7:47:be:6e:cd:11:bb:cf:ac:5e:1e:b5:58:c6:
         03:95:f2:69:c5:05:96:7e:7c:cd:bb:e9:7a:21:75:84:ca:bb:
         4b:0d:5d:0f:88:8a:68:aa:39:43:15:e1:45:e0:67:6e:24:32:
         79:17:2b:d5:32:d4:bf:c0:a2:c1:76:f7:2a:79:ea:2c:43:20:
         bd:d3:a8:ec:2f:e9:05:29:ac:35:94:b1:1c:ad:0d:93:4c:ec:
         2c:a0:d2:ae:1c:be:2a:f7:af:6f:b4:c1:5e:00:b4:b4:e9:8e:
         00:02:12:77:f3:3f:b0:1e:df:f5:15:04:73:94:72:f7:08:19:
         61:df:39:29:65:22:f6:41:c9:63:92:5f:5d:7d:55:45:a7:d1:
         71:23:15:a6:ee:e5:97:ce:11:6d:b2:37:da:e4:e4:3e:c9:b5:
         16:b6:00:ff:4e:ab:c9:61:07:99:aa:21:60:14:46:c6:4d:f6:
         86:3a:b3:de:b1:e0:f2:e0:7e:bc:a6:27:84:e4:90:07:94:c4:
         b4:fc:9f:a1:f7:ce:6a:95:a4:76:c5:ce:7c:e1:d7:9c:34:df:
         cd:c4:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:33:07 2025 by rpki-client