Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa
File:                     90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa (raw, json)
Hash identifier:          nCnpCM1kreGwLh9ObQVKdOlx2LIgSWtdhDqwz+63mk8=
Subject key identifier:   28:CC:30:A3:B1:BB:2F:67:E6:46:02:44:04:F8:7A:D1:7A:D3:43:50
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B379E92FE4B71DE95C100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        205.206.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:37:9e:92:fe:4b:71:de:95:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=c8672c3e-3656-4d8a-8509-ea10c5de2175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:93:ba:cd:d5:d6:2f:50:0f:55:ea:1f:09:58:
                    cb:b0:59:60:24:05:86:2b:f7:8b:ab:94:8c:fb:33:
                    03:6c:65:02:46:9e:32:a7:16:6f:d5:48:fb:ec:82:
                    be:27:a3:bd:a0:3f:60:b0:a5:21:88:9f:4f:d0:d2:
                    65:b7:60:39:91:9b:0f:27:a5:97:22:21:94:f0:5f:
                    c3:3d:42:18:85:ce:6c:31:00:88:6b:98:ff:e7:62:
                    de:1d:f9:58:5b:b5:f6:e3:69:b8:ff:58:7a:dd:a3:
                    80:d7:19:6d:7d:d8:2e:21:22:c6:2e:b9:79:8d:61:
                    5b:4a:ec:4e:48:2d:2a:96:7a:07:1c:7a:61:7b:1c:
                    eb:df:41:69:6a:fe:d3:d6:62:09:cc:b0:88:56:bb:
                    7a:3d:a3:4d:53:69:34:47:31:37:89:ea:b0:8a:9f:
                    98:14:a7:0e:36:48:74:3b:01:96:c2:43:b0:3c:66:
                    62:42:b0:64:c5:23:a2:59:bd:4a:9e:ad:a0:e3:4a:
                    b6:52:1f:c8:f9:22:9c:93:b9:61:e3:f0:5c:b1:88:
                    a5:90:33:5d:9f:7e:14:55:8c:72:81:cc:1f:3c:15:
                    bd:82:63:95:dc:43:20:9c:95:ae:26:df:71:13:49:
                    9a:4e:bb:06:2d:76:eb:f5:2e:18:40:0f:e4:c9:03:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CC:30:A3:B1:BB:2F:67:E6:46:02:44:04:F8:7A:D1:7A:D3:43:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/90b798e1-ad1e-32f7-b084-31fad4eb8cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:a8:99:dc:8c:7e:31:b8:29:43:d9:83:cd:4b:96:b7:77:bf:
         74:0c:5e:8a:c1:a0:6c:c8:8f:c2:01:a7:cd:93:4f:6d:fd:2e:
         28:db:9d:44:08:a6:07:73:e3:41:bf:30:d9:a4:cd:e9:05:b6:
         1f:88:6b:28:01:2c:aa:66:0d:3b:b8:9f:d4:74:b2:78:19:dd:
         0b:8b:95:2e:d7:25:3c:bd:92:ec:1b:42:84:9b:99:8f:2e:55:
         06:dd:2c:0f:fd:e7:95:e4:46:0b:cc:df:f3:45:80:b4:aa:8d:
         31:b2:ad:42:5c:ed:ee:da:d8:09:83:e4:3a:74:41:c2:54:01:
         ee:33:a6:6d:a2:fb:6b:8b:59:3d:67:d3:34:29:58:d8:e5:16:
         cf:46:cd:df:7b:6b:f1:d7:86:78:ef:f1:1d:d9:d3:dc:09:59:
         72:e4:ff:2d:99:85:37:6c:d3:19:e9:81:57:85:44:d9:ae:af:
         b2:52:60:81:e2:10:3a:0d:88:52:1e:e4:42:a8:07:b8:1e:6f:
         2f:c3:3e:45:f6:30:70:9d:df:e5:03:27:c3:b9:f5:b9:ba:9e:
         92:fb:c9:6b:4a:f3:f3:f1:a8:7d:31:1d:8a:9c:05:49:28:6e:
         c3:4b:11:70:61:3e:e0:3a:97:76:41:d8:f4:8f:5a:71:1d:ee:
         6a:5d:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:23:01 2025 by rpki-client