Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/3f53e804-411f-3d26-8742-7edc92741bba.roa
File:                     3f53e804-411f-3d26-8742-7edc92741bba.roa (raw, json)
Hash identifier:          r3esIzA4uuSqueZ6WSA0QIiqxgyNdwWXP5gYVUg/NJg=
Subject key identifier:   A6:69:A7:B4:FA:BD:8D:0E:4D:16:A2:EC:FF:F6:86:54:01:A5:F2:93
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584A7A4B2E8389A668406602F200
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/3f53e804-411f-3d26-8742-7edc92741bba.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     14618
IP address blocks:        206.219.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:2e:83:89:a6:68:40:66:02:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=7c872fa0-1184-4b00-9d29-f9b465cbe901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:99:5b:df:cd:c1:dd:c0:94:ce:73:f5:2d:99:
                    d6:49:e2:89:31:25:9a:37:e6:41:57:e5:0e:a8:77:
                    50:77:6a:f6:ab:11:80:4c:cf:20:d8:a2:41:44:7b:
                    f0:0f:f1:c2:0c:30:77:08:7b:e5:10:60:d4:48:3c:
                    03:f0:ce:e8:f9:a5:24:30:a8:fd:96:04:eb:ca:e3:
                    1d:17:83:30:06:de:79:3f:4a:6b:20:0d:94:82:ed:
                    c9:aa:a8:51:9f:1b:9e:24:0f:45:ec:79:17:f8:7a:
                    ca:d1:76:c4:38:11:3a:6a:80:75:ce:fd:4c:59:37:
                    b6:b3:cd:fe:23:95:bd:b5:f2:f2:61:d7:0a:06:45:
                    b0:9a:74:fc:40:5d:8e:68:01:ca:e8:e9:3a:15:87:
                    8d:5d:ab:0e:9e:25:2a:4c:72:f4:b9:d0:e5:ac:bf:
                    5a:65:20:5a:2f:4c:ce:55:5e:b6:0e:aa:fd:8a:a2:
                    ca:28:91:42:79:9b:e7:50:3e:a9:b9:ba:69:a9:ea:
                    65:27:7d:51:4e:3b:d9:49:16:3e:e2:4f:81:46:6e:
                    23:0c:7f:71:92:33:46:a5:8b:37:51:98:28:9f:48:
                    ac:40:bb:c3:ea:19:ad:25:ec:44:be:f8:f6:68:3f:
                    a0:56:51:c2:19:ae:c2:67:6b:b7:df:87:4b:dd:5b:
                    fa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:69:A7:B4:FA:BD:8D:0E:4D:16:A2:EC:FF:F6:86:54:01:A5:F2:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/3f53e804-411f-3d26-8742-7edc92741bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:39:c3:39:06:9f:8d:47:29:fe:b6:f4:dc:a1:f6:9f:97:df:
         ca:07:60:df:f6:d5:91:04:3f:0f:d1:f8:a8:01:2b:ba:26:7d:
         4b:fe:52:5f:2c:b7:40:5c:c1:fc:59:87:ff:fa:23:b1:d1:e9:
         6e:8f:94:2c:3e:85:0b:14:92:a6:09:b4:da:66:ab:81:2f:da:
         2b:e8:70:e5:2e:51:f1:6e:e6:31:89:2e:22:98:f6:06:5a:69:
         43:aa:b8:57:39:d2:f4:bf:60:c5:a7:5a:73:b5:6d:93:5b:98:
         ff:6e:22:a1:70:46:c6:a3:13:d8:a9:6c:4e:cd:25:dc:0f:40:
         79:37:7d:74:79:e7:01:04:65:86:4c:94:1f:41:0f:ab:e5:17:
         1f:25:f4:56:5a:24:00:ea:7b:47:1c:0e:14:0b:61:65:e0:5e:
         dd:6c:21:86:43:86:09:24:d2:ee:bc:16:a5:f0:9c:52:36:28:
         03:3c:b3:e6:fd:11:a8:be:50:a4:fd:ca:9e:1c:dd:dd:67:90:
         fc:bf:f1:71:e6:d9:14:19:9a:a3:f9:26:85:b1:8e:f1:a9:c4:
         9b:88:6b:49:8b:bc:f8:4e:d6:de:3c:16:b3:fd:a7:69:df:07:
         71:91:c4:a5:d0:de:bf:62:ec:88:d3:9c:3b:b0:d5:d1:bc:99:
         29:aa:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:27 2025 by rpki-client