Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
File:                     f4f0a900-b310-382d-b883-64f958388735.roa (raw, json)
Hash identifier:          FJdikcdILu2M6BiBa2nTuTI6hMaqsKBwy+Dz7Tb15As=
Subject key identifier:   32:40:02:93:1C:DA:35:21:2F:09:0B:76:1E:70:49:F1:1F:E3:C2:1F
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584921841130DEA5192AC7B11800
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        199.166.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:11:30:de:a5:19:2a:c7:b1:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=02fd5e70-543c-4ca1-930a-81392158a19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:04:64:79:f6:6f:4d:c6:47:95:12:53:bc:af:
                    12:0d:f8:ac:54:16:ce:b0:b6:bc:df:7a:b0:5b:93:
                    36:0d:02:85:58:91:15:3e:32:7d:b2:33:9e:08:9c:
                    3d:40:22:31:82:98:52:cd:36:59:0d:c2:e0:f3:e7:
                    e8:e6:67:eb:6c:4a:f0:55:92:9c:b0:24:3c:0b:a3:
                    63:7c:ce:01:d9:e8:0f:3f:1c:66:f8:82:9c:93:c8:
                    02:c2:4e:5e:e7:6f:ca:28:28:9e:21:9d:7a:14:bc:
                    43:7e:29:0f:d5:b7:33:7b:78:12:ef:ce:1d:82:9c:
                    af:0e:cc:c9:26:e1:a0:98:0a:b7:8e:a9:f2:9b:27:
                    be:c0:0b:1d:61:98:c9:42:f5:93:63:05:97:9c:b8:
                    b8:cb:7a:d2:ae:c3:22:e9:45:68:d0:4f:3a:0c:bd:
                    a1:30:10:02:60:85:6b:7c:84:be:02:53:49:d8:31:
                    e4:f8:e4:10:52:ad:6c:53:94:e9:d7:1d:7f:f3:f6:
                    68:49:36:42:59:6c:9f:df:54:30:5b:32:ef:51:2d:
                    e5:e2:00:e1:54:b4:4f:47:18:5e:31:8a:0e:9a:4b:
                    7a:14:db:c6:51:6c:5e:13:8c:26:c7:10:8c:84:3b:
                    1d:d1:50:f2:b3:04:ae:0b:44:40:b0:79:55:7e:f3:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:40:02:93:1C:DA:35:21:2F:09:0B:76:1E:70:49:F1:1F:E3:C2:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:77:e9:e0:c5:bb:df:da:f6:3a:ea:70:92:b9:5f:18:c3:5a:
         2b:83:43:11:3d:60:3d:ba:03:99:9b:32:29:72:9d:2c:01:12:
         e4:1f:e6:99:b4:73:44:80:13:48:ed:8a:f2:8d:0d:2c:36:a9:
         cc:7b:da:83:b5:34:5b:82:86:57:c4:93:27:fc:a4:8c:9f:d6:
         92:6a:3a:1d:3e:9e:a5:27:5f:8b:be:25:9f:af:3e:d6:1d:a9:
         32:58:22:2e:64:c7:3d:b5:07:2b:2e:14:09:29:e7:30:5f:f5:
         7e:82:fa:cf:45:02:f8:d1:f2:a3:ed:28:36:ca:34:b4:c7:db:
         55:4c:b1:39:bb:59:75:e1:48:57:50:99:7c:7a:c7:0f:02:b1:
         11:89:74:e5:10:3d:0e:79:e1:a0:06:92:81:ed:ea:82:37:78:
         ad:56:ec:99:ce:81:5b:81:40:64:cd:ad:41:a1:2c:fe:df:3b:
         83:09:0a:0e:99:23:4e:71:b1:f8:3a:3e:7d:de:d6:84:c4:c5:
         55:7d:45:34:d6:59:cc:4d:3a:8a:b6:54:7a:f7:77:b0:18:da:
         39:86:6e:56:33:49:f8:a2:d5:70:ed:f0:bc:44:ff:0b:62:a0:
         30:86:1c:be:e7:07:17:e9:36:31:b3:5c:9c:d9:07:4c:14:9f:
         13:29:dd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:30:22 2025 by rpki-client