Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/df820e25-8db0-3c7e-93b1-1100c8628b64.roa
File:                     df820e25-8db0-3c7e-93b1-1100c8628b64.roa (raw, json)
Hash identifier:          u6lggGKzzBRrBQuSh4LEvVp3c7rIwcOZuMRp6TsZBIQ=
Subject key identifier:   E4:20:BE:E4:ED:2E:2C:CA:50:92:44:DE:FA:5B:E5:DF:A5:2A:F7:A9
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584AA2C645C2BEEC0D0688DDCAE8
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/df820e25-8db0-3c7e-93b1-1100c8628b64.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     22418
IP address blocks:        206.71.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:45:c2:be:ec:0d:06:88:dd:ca:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=e47cf203-4b0e-46cf-8804-18b4c8480ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:f5:34:c3:a1:1c:c0:15:7d:04:c7:e5:60:
                    f6:61:9f:2f:17:e2:90:d8:60:d1:c5:95:15:9f:df:
                    39:e3:fa:d9:50:5e:45:02:8c:16:23:4f:dc:be:21:
                    f4:4e:b7:da:73:57:3c:e7:3b:ad:7b:04:c6:2d:14:
                    b2:b4:d3:68:1e:f5:59:82:94:a7:d0:97:69:5e:07:
                    7e:a5:37:c7:fb:2f:50:2d:00:4f:50:61:dc:6c:02:
                    10:ab:89:d1:97:7b:ba:f9:82:ac:14:61:4e:df:cd:
                    12:2a:ed:80:87:37:7d:b9:51:30:c3:4b:6f:7a:c6:
                    2f:d3:90:3a:24:85:21:59:0f:c6:74:35:d5:28:62:
                    bf:56:3e:2c:f6:24:a5:c4:39:22:b7:1c:60:8b:ec:
                    29:fa:f7:77:51:5e:61:1f:6e:22:09:2a:c9:3d:a7:
                    9d:ef:f0:3b:a5:2c:a6:67:a2:4a:5e:3d:92:4d:7d:
                    c1:ad:48:bd:73:af:a9:82:05:ad:88:54:08:6a:a0:
                    9c:ce:dd:6a:80:12:b3:30:06:52:28:b2:c2:95:d7:
                    2d:3a:30:7f:66:8b:90:ed:18:46:38:d1:71:2a:58:
                    ec:05:9d:58:ba:82:a3:d4:fc:40:7b:07:43:d6:70:
                    96:af:bc:fd:ab:7e:cd:42:4e:aa:84:f6:19:50:0b:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:20:BE:E4:ED:2E:2C:CA:50:92:44:DE:FA:5B:E5:DF:A5:2A:F7:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/df820e25-8db0-3c7e-93b1-1100c8628b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:f5:60:69:a3:7b:b4:df:e0:bc:72:67:51:d3:45:6c:ca:
         34:60:d7:44:f9:04:44:03:fa:ac:80:94:2d:4d:7b:4e:a6:19:
         27:f3:2b:d4:81:51:08:7a:c6:55:2c:fc:68:3f:d3:a2:a0:f0:
         6d:3a:1c:1e:4e:96:e2:87:d6:76:0a:d2:55:0d:57:6a:c6:06:
         c7:a7:2e:19:1f:75:5d:61:45:ee:76:3f:ab:61:14:12:5d:52:
         bb:51:8d:b9:22:73:37:4f:77:a3:27:46:3f:b7:a1:cc:21:0b:
         65:c2:ce:0b:5c:52:78:88:c8:94:b5:da:54:89:fc:50:be:ef:
         a4:31:9f:63:01:26:88:5b:63:3c:0a:02:57:9e:8b:de:24:e7:
         95:86:ba:89:b0:5a:94:98:a8:ab:cf:7b:09:c5:ce:89:cd:1d:
         23:f2:42:2a:76:73:15:8d:8d:40:9a:ab:73:8e:cf:cb:43:68:
         da:7a:e7:6a:14:f3:1f:cd:04:e2:e2:35:bc:e8:0f:91:f1:d7:
         62:ee:00:59:61:92:86:c0:24:07:44:72:dc:a4:bc:97:d9:99:
         31:90:d9:43:77:66:b7:13:34:c2:3b:ce:10:f8:d5:51:9e:e5:
         56:9d:25:3d:e0:3a:59:7e:e7:61:ff:4e:6d:4e:e7:2f:a2:28:
         1c:39:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:00:43 2025 by rpki-client