Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa
File:                     26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa (raw, json)
Hash identifier:          RwZx0rGg25aoqygp067vBs9B1JEcfNaJjTmwkzAL+Z8=
Subject key identifier:   25:BC:41:95:4F:B2:9F:B0:D3:38:8A:66:D8:1D:8E:16:98:C8:75:6E
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584A07D527BA6CCFA66F31C7BE00
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     14297
IP address blocks:        206.201.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:27:ba:6c:cf:a6:6f:31:c7:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=00e6236c-8b26-4b9b-a065-c690d3d355dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:12:fe:74:7d:30:72:14:e1:98:52:c0:eb:5f:
                    af:d0:74:1b:40:86:65:e8:13:50:ed:08:59:7d:99:
                    3b:ff:97:87:94:20:00:5f:cc:21:7e:cd:e1:48:b7:
                    ba:a7:7d:82:ea:19:f8:80:23:f5:48:a1:89:44:93:
                    42:6b:45:65:5f:f1:60:95:20:a5:7e:24:b3:27:03:
                    2a:a8:55:ce:20:8e:9b:c5:36:21:06:1e:1b:83:84:
                    f5:30:59:80:7e:f5:ce:22:5a:6f:76:6c:d0:dd:21:
                    ba:ae:2f:15:1c:dd:e1:37:3a:fc:b6:7d:9c:9f:1d:
                    6d:d8:60:8f:b0:61:12:88:ba:6c:4e:7c:cd:7e:0b:
                    39:5f:5b:bf:a2:44:5e:d4:99:e9:e7:e6:28:cc:07:
                    43:72:d5:47:a5:6d:ac:34:6f:43:0f:44:41:d6:84:
                    38:10:7a:3a:07:40:23:f2:01:8d:4f:76:3b:b0:cf:
                    9a:bc:15:0e:d3:70:0f:93:99:a4:42:e6:82:ae:61:
                    3b:99:10:89:bb:9c:ac:b2:6c:ea:fa:b7:76:81:ac:
                    b4:26:f8:ea:24:c8:6c:ed:65:61:5c:49:c0:77:94:
                    a8:d2:f4:9c:86:50:5c:41:b6:93:ee:52:da:53:46:
                    5c:ce:e5:a0:91:f5:ac:4e:42:8e:77:30:bf:e2:fc:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BC:41:95:4F:B2:9F:B0:D3:38:8A:66:D8:1D:8E:16:98:C8:75:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/26aabcc7-0ff6-381c-bbd4-94f509fbc1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:91:4d:70:f5:34:5e:88:7a:cb:68:d5:3b:49:86:e7:98:53:
         a4:46:f6:96:f8:91:e9:86:3d:86:f6:e4:92:9c:f7:e8:2a:96:
         3b:d8:a8:87:6f:af:c9:96:21:8a:ff:1b:c9:cb:8f:cb:d4:d1:
         b7:5e:9d:46:6f:8b:3c:14:05:f5:ff:8d:fe:10:13:92:8f:81:
         1c:ac:e8:73:2c:07:f4:25:d5:ae:5c:54:37:b0:c4:45:47:9c:
         24:62:d8:d3:60:8a:3e:6d:15:c5:3b:58:fd:cb:0e:25:2d:60:
         5d:43:dd:16:05:b7:e6:cb:93:9f:7f:73:08:ec:5f:bb:77:ea:
         82:09:96:26:f9:bb:19:94:10:2c:e1:03:40:2d:27:ac:d5:f3:
         7d:ce:d0:b1:48:b8:52:7a:a9:01:2a:22:ab:55:1c:56:38:ac:
         ec:41:98:2b:ab:9b:ad:7a:87:6e:62:f5:ed:6a:96:a9:5e:0f:
         43:5d:7a:62:61:08:c4:d4:1a:13:3c:d5:f6:da:7b:74:c2:82:
         71:3a:db:58:07:c9:f8:fe:09:13:c6:7c:5e:80:ba:2f:4b:19:
         50:e8:65:da:32:6a:58:2c:ae:6c:d6:46:ef:c6:14:ca:d1:a4:
         7e:69:eb:5a:33:b6:f1:eb:09:6b:f4:a2:0d:71:96:f1:26:c7:
         a1:c4:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:50:07 2025 by rpki-client