Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/318c522d-ce21-3f80-9f64-c4484a1a5c05.roa
File:                     318c522d-ce21-3f80-9f64-c4484a1a5c05.roa (raw, json)
Hash identifier:          zkjqh1sUclJwDVIo5XVGSvQkJYLZvD3ROfDWk0AVYRI=
Subject key identifier:   A7:D9:F1:3D:67:1B:B2:4B:AF:66:90:76:AF:FB:77:70:8F:4B:1F:F6
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584A7A4B2E3E1A8F4B83A506AB70
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/318c522d-ce21-3f80-9f64-c4484a1a5c05.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        206.219.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:2e:3e:1a:8f:4b:83:a5:06:ab:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=bd14a44a-bc38-4c1b-9b48-c129f500bbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:c4:05:af:36:cd:65:46:25:3f:6f:3a:8a:
                    68:4e:b7:a6:6d:d9:9e:22:ab:fc:b9:bd:8e:47:82:
                    d2:58:f2:86:49:36:8e:b7:2d:65:a5:3b:3b:18:ec:
                    6a:7b:e1:a7:06:08:13:3d:67:ed:78:7a:67:5a:6f:
                    71:23:cd:54:8b:f0:12:04:6c:f4:9e:bf:74:d9:61:
                    df:9d:ee:2e:b7:05:ed:33:a6:09:53:42:44:60:a2:
                    2f:8f:3f:8b:41:7a:29:20:7e:8f:e5:4d:4c:26:40:
                    e5:34:43:7f:63:30:63:52:ff:69:24:a8:1b:02:c2:
                    6a:34:a7:22:7a:db:c9:97:f8:c0:78:94:77:67:0a:
                    e6:df:e8:8b:11:08:25:f0:9a:ad:83:06:ab:7d:50:
                    17:9c:65:bf:93:55:bb:a7:56:bd:58:b7:2c:bd:45:
                    68:d9:1c:96:d7:09:1d:29:d9:9a:9c:e4:d9:66:94:
                    76:57:85:98:2a:d7:b2:f4:66:e0:6e:9e:19:3d:2b:
                    10:17:da:0f:ea:28:00:64:69:3f:bb:ab:1a:fc:40:
                    e2:16:b6:ab:87:86:a6:86:89:7b:11:65:fe:bd:85:
                    3f:20:5a:3b:d3:9d:fc:98:95:80:db:97:92:4f:16:
                    5f:8d:f1:60:cb:c6:b1:b8:12:d4:53:bd:71:92:ce:
                    31:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D9:F1:3D:67:1B:B2:4B:AF:66:90:76:AF:FB:77:70:8F:4B:1F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/318c522d-ce21-3f80-9f64-c4484a1a5c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:40:fc:25:54:f6:e3:99:ac:eb:0f:c2:ba:55:1d:0c:e8:a1:
         0d:9a:00:6b:20:15:56:65:7d:62:a8:30:20:1f:d8:10:e8:cd:
         59:c7:76:63:08:84:bd:02:81:b4:c7:4a:03:02:70:da:b3:9f:
         1c:d5:36:1e:7b:7e:74:e3:e8:16:4c:2d:4e:ad:85:80:0b:65:
         29:8a:52:d7:9d:c7:fe:ea:fe:86:81:e6:d7:0f:4b:55:20:fc:
         4d:9f:3c:f7:8c:0a:36:45:0e:6e:2e:57:27:ed:d9:37:14:24:
         eb:e5:06:50:62:32:a1:3f:36:d1:89:66:64:6e:14:23:7d:b0:
         25:99:d5:a8:33:f9:a1:31:5e:74:ab:b8:78:9e:13:33:66:92:
         2b:f4:6a:5d:7b:1a:84:ec:6c:7f:b4:0d:83:09:b4:a6:23:11:
         c2:81:cb:de:76:94:ec:fb:2f:3b:07:30:dd:83:c9:d2:f2:67:
         ad:d2:95:1d:98:a3:ad:87:d7:cc:83:89:af:d1:6c:29:b0:65:
         8e:5e:31:63:29:ad:9f:a5:89:a7:5d:f9:e7:73:ab:20:0f:79:
         52:84:58:96:23:8d:4c:27:a3:36:b4:a2:ea:14:24:d4:84:42:
         e0:b6:59:dc:ee:54:6f:8d:20:6c:28:33:6d:56:15:f8:4a:f6:
         e9:cc:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:51:10 2025 by rpki-client