Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa
File:                     630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa (raw, json)
Hash identifier:          Gay57Txim7bacrBPq7npgvsla134OS+o9Ysx/CWBT9Y=
Subject key identifier:   4F:2B:0B:CA:19:6C:6B:A0:F4:81:02:49:23:2C:FD:A0:04:BA:3F:20
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584A8C70C3BEE81178B535329680
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     834
IP address blocks:        206.162.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c3:be:e8:11:78:b5:35:32:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=94bee499-6779-4628-aa95-a1e755376015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:e8:99:22:3b:f1:cb:73:ac:9a:82:f5:1a:
                    a2:a5:d5:14:0a:d4:3e:fe:c6:86:c2:84:c2:74:aa:
                    d2:3a:ee:d7:3e:f7:db:60:d2:61:83:d2:15:6d:f5:
                    e4:19:7c:5d:82:33:1b:b2:84:8a:ec:b8:68:71:8b:
                    d9:13:9a:53:ef:e6:18:1e:ec:f1:24:78:d3:4e:dd:
                    d3:6b:c1:11:9a:79:a8:e0:aa:7b:68:94:1a:3f:b5:
                    cd:21:98:9f:1e:2c:c9:48:d7:d9:84:53:27:46:77:
                    e7:fc:8c:8a:55:12:4d:44:e5:49:5c:03:44:83:3c:
                    fa:62:56:13:41:a2:f6:5a:15:b4:c3:f1:69:1e:e4:
                    07:c8:79:20:9a:0d:69:96:d4:40:76:eb:04:61:58:
                    a5:38:1d:c3:af:4b:bf:c6:b9:bf:aa:41:8d:85:e1:
                    42:2c:cd:9d:d3:25:2e:3e:9a:72:06:92:99:7c:b8:
                    07:cd:75:ce:f4:0e:02:4c:b7:cc:70:62:42:67:53:
                    01:0f:07:07:25:66:9b:6e:62:d5:1e:ae:8b:62:ea:
                    61:c1:4d:d2:e3:af:f2:45:63:51:eb:e9:f3:09:52:
                    00:99:0b:d8:e2:8e:66:4a:d9:69:58:d5:ca:7a:48:
                    b5:00:56:b8:b1:cb:e8:b3:7a:a3:c6:72:a3:1a:ff:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2B:0B:CA:19:6C:6B:A0:F4:81:02:49:23:2C:FD:A0:04:BA:3F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3d:39:e2:a4:56:1a:c4:38:93:92:65:ad:40:17:36:5d:15:
         ef:71:2e:0b:70:d8:90:cf:0d:e7:63:20:35:e1:5c:55:f6:6c:
         0f:4d:9c:f8:64:4e:e9:41:ec:6a:03:c3:ab:bb:01:8d:4f:ed:
         2c:02:8a:8f:3b:67:57:43:64:6c:6f:5a:f6:2d:dc:51:23:aa:
         d9:2e:b8:3e:3c:03:51:2f:19:e9:c7:a4:a3:5e:51:56:45:7d:
         60:5f:3f:96:a9:52:dc:8d:c0:fc:fd:65:76:ce:05:1c:45:44:
         17:77:51:9c:8c:b5:90:e7:dd:3e:11:f1:cf:f9:68:0c:e4:a7:
         d9:f8:af:51:6a:1e:c5:9f:08:f8:12:45:cf:85:3e:6c:f6:4f:
         54:49:56:f3:2f:2d:aa:ed:dd:f9:5b:0f:8f:9a:ad:04:9b:97:
         4e:3f:67:16:4b:a1:d0:92:77:1e:fa:14:5c:6d:c4:c9:20:e7:
         2e:b2:44:b8:ea:0d:33:ff:57:db:80:ba:c8:75:b8:cb:50:bd:
         80:8a:67:b4:c4:f4:60:d4:1a:5b:0e:8d:43:72:26:fa:5f:e9:
         3c:56:69:f1:31:db:3d:7d:97:7e:9a:bc:21:ba:88:4f:21:e2:
         7c:e7:63:8d:30:e9:18:a1:b4:c1:6a:08:a9:44:cb:46:13:9f:
         aa:91:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:34:11 2025 by rpki-client