Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b7814186-5f44-34b4-91f6-599bf1844ae4.roa
File:                     b7814186-5f44-34b4-91f6-599bf1844ae4.roa (raw, json)
Hash identifier:          j274aiyvdZ1pnYaI/MZXqmcgDZvLYYiCCNJYZrydJcY=
Subject key identifier:   30:AF:97:2A:B3:CC:BA:70:42:84:9E:E5:6A:FD:C9:70:3B:5D:E0:15
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B21CC2810C395B5993F32F8C0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b7814186-5f44-34b4-91f6-599bf1844ae4.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     11105
IP address blocks:        206.12.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:28:10:c3:95:b5:99:3f:32:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=eeb08faf-bdd2-495b-bed0-fabb55d59686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c8:a3:3b:8f:91:7e:dd:fa:91:00:6c:cb:26:
                    98:3a:16:fd:b6:ef:11:63:a1:a6:ab:59:1c:4a:6f:
                    e8:e6:af:0d:72:93:93:34:29:2a:03:56:4f:98:5d:
                    3d:27:49:ef:5b:59:70:9f:b5:68:b1:2a:bb:b6:f6:
                    29:d8:7f:22:22:a1:2b:2e:d4:08:71:94:52:d3:2e:
                    16:29:06:69:1e:7b:81:5d:67:c0:c0:6c:03:41:3c:
                    55:29:16:a7:91:19:12:b2:53:87:c6:b7:af:7e:1c:
                    75:21:f9:a3:fd:4b:6e:d4:c5:5d:0c:e6:98:6f:9d:
                    b8:6e:06:61:ac:af:a2:ae:bc:0e:c8:77:52:14:62:
                    c9:69:29:68:78:65:30:02:74:7e:c2:b9:15:6a:37:
                    ac:c8:53:d4:96:5c:3d:1b:a5:95:d7:27:2e:89:a8:
                    7f:71:76:ae:cf:7f:bb:1d:6e:9d:5a:cf:fc:5d:5d:
                    a3:85:9b:8e:85:5b:ce:a0:54:5a:dc:c7:3b:9c:4d:
                    b2:98:0a:2a:ea:c8:f8:5a:48:27:aa:90:da:aa:75:
                    65:ea:d2:6c:22:fc:9f:f0:bf:36:84:e9:54:54:5a:
                    82:e2:a6:18:7a:60:80:46:aa:a5:1c:bf:fc:d9:32:
                    fa:79:68:a3:c7:58:76:5f:85:95:13:6c:b9:ce:24:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AF:97:2A:B3:CC:BA:70:42:84:9E:E5:6A:FD:C9:70:3B:5D:E0:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b7814186-5f44-34b4-91f6-599bf1844ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7b:d3:da:50:0a:e1:3f:ef:7a:46:f0:c8:06:30:22:51:a1:
         d1:1b:34:b2:f8:5b:de:1d:48:7a:e1:2f:13:a4:37:d7:bf:ef:
         ef:d3:45:0d:55:6c:fc:38:e2:26:be:ef:53:8e:05:51:ab:62:
         cc:a9:29:0e:0a:f9:da:c4:b0:0a:54:14:30:f6:5c:8c:57:b3:
         a2:96:63:ce:69:21:ab:a4:da:7d:6c:a1:2f:ca:8d:bc:5a:84:
         53:1f:42:6c:2a:76:ca:51:02:44:09:d2:90:aa:a4:92:7c:5f:
         3c:a6:6e:f7:ae:a7:97:94:5d:03:ae:1d:ef:1d:2e:39:b8:24:
         a8:6d:91:5b:ae:d3:25:a5:6c:7b:a1:bb:bb:71:75:fc:63:20:
         63:bf:e7:67:68:8d:62:c3:b4:28:7d:e3:51:00:7a:0f:25:dc:
         48:ce:c3:8a:d4:ea:ca:23:f1:ff:c5:e2:1d:ba:af:fd:b8:b3:
         d6:54:5f:9f:dc:cb:ca:a9:1f:bf:c8:17:ae:84:e6:be:b1:1e:
         d5:fc:60:c1:18:18:a4:5f:1e:a4:07:74:d5:45:00:a0:33:bb:
         dc:11:27:ec:45:7b:48:71:66:41:88:a6:19:e1:64:90:f0:22:
         fc:58:12:52:9c:6c:1f:33:0d:af:ca:28:6f:c6:3c:27:a7:d7:
         9c:95:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:03:52 2025 by rpki-client