Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/6080afe6-b10e-3243-913a-49f36de4a82c.roa
File:                     6080afe6-b10e-3243-913a-49f36de4a82c.roa (raw, json)
Hash identifier:          HjfRgT0dYha6HTwnhAYo+YI0Gx2AngK3lb2m4S2McxM=
Subject key identifier:   5F:C0:E3:72:1F:CB:B8:71:07:95:67:F5:69:2A:07:B9:2F:F1:86:C5
Certificate issuer:       /CN=856d400d-4340-4d39-9ec7-38c840be48be
Certificate serial:       010D0C9F4328584B4BAC5BE9BF182538A13614E6
Authority key identifier: A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/6080afe6-b10e-3243-913a-49f36de4a82c.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     213339
IP address blocks:        206.183.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5b:e9:bf:18:25:38:a1:36:14:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856d400d-4340-4d39-9ec7-38c840be48be
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=10e9ff07-d602-4413-a84e-c81d699090b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:22:62:d0:ed:50:01:62:3e:8e:d1:77:3b:
                    08:48:4b:04:f3:94:ba:b0:12:1e:1b:41:1b:e9:aa:
                    28:48:88:2b:c8:ac:b4:d0:01:d1:34:7c:13:73:d4:
                    a1:36:09:30:b2:67:57:53:8c:0e:0e:4c:39:89:1e:
                    1b:85:bf:89:b4:15:fe:a6:17:5d:a5:f7:f6:16:a6:
                    8e:84:7b:a5:88:a1:d4:91:03:bd:32:06:74:1b:2f:
                    16:f3:b3:34:47:06:68:05:34:7e:89:f4:55:3f:b7:
                    76:b3:5c:66:cf:c9:2e:43:43:6d:e1:52:a1:d3:d1:
                    50:cf:20:3e:11:1d:de:4e:1b:b7:b9:20:fd:ee:1b:
                    5b:46:31:63:c3:6a:0d:5c:60:85:4d:6c:31:09:a3:
                    a7:9e:91:74:2a:d7:bf:84:aa:59:d1:38:06:58:39:
                    f9:cb:e0:d4:10:ca:96:54:e3:0f:29:ab:96:a1:17:
                    2a:99:47:b0:db:55:f6:03:c1:c5:86:29:7f:af:e1:
                    e0:69:82:5f:97:5f:71:5f:4d:11:89:6a:54:84:51:
                    de:ef:a6:e1:34:fc:e7:46:70:0a:3e:a6:47:5d:54:
                    a0:43:a5:00:78:40:c7:c2:f9:e3:f1:49:8d:59:3b:
                    06:3e:be:85:92:3e:bf:b7:68:3b:fd:d9:d1:8e:a6:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C0:E3:72:1F:CB:B8:71:07:95:67:F5:69:2A:07:B9:2F:F1:86:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/6080afe6-b10e-3243-913a-49f36de4a82c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.crl

            X509v3 Authority Key Identifier:
                keyid:A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:47:61:bb:d8:c9:3b:aa:c8:7f:87:2c:e0:31:5e:cc:5f:6b:
         9c:48:0a:4a:0a:be:56:26:a4:c3:e0:d3:bb:3a:e0:ca:94:fd:
         cd:6e:42:b3:38:ca:97:0d:09:e7:92:ca:a8:22:67:95:f7:b8:
         64:8b:d3:40:7d:e9:51:3c:10:67:42:8a:a6:a4:33:38:df:43:
         bf:74:14:b8:d7:99:58:da:80:6c:63:3d:62:18:b7:be:2e:80:
         5e:11:37:4e:64:ac:57:a1:8c:d8:b1:7d:25:e9:5f:9e:d0:06:
         ad:25:0a:36:6b:cb:7f:d2:d7:96:dc:31:6f:08:5f:94:60:bd:
         b7:cb:3f:d1:8d:7c:78:8c:ee:99:89:46:bf:36:27:f1:72:86:
         86:7d:aa:af:db:86:cb:4c:24:d5:69:7f:37:80:46:c8:d3:0b:
         44:ff:11:0e:99:aa:50:b5:1c:5b:00:3d:87:3d:ca:d3:00:58:
         c8:21:9c:35:cb:11:0b:c8:0e:fe:7f:cb:c9:c9:79:55:a4:b3:
         af:5d:81:40:f1:76:94:02:c8:96:b7:df:33:5f:47:60:6b:6e:
         86:ee:d8:be:2b:f0:f5:5e:b6:ac:35:d2:ae:29:7a:61:62:83:
         b0:e2:8b:d1:a2:d6:12:7d:87:38:10:75:ac:8b:2d:f1:3f:51:
         2a:17:6f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:32:43 2025 by rpki-client