Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa
File:                     7e94502a-45eb-379b-b267-18d68fcecb1d.roa (raw, json)
Hash identifier:          L8B0dP8Nfg1mUxofriMwl4/6gZdg4wG4cE0BJtThLuk=
Subject key identifier:   8D:BB:B0:02:A6:91:90:EB:06:55:7D:73:07:FE:26:C7:10:50:DF:0E
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584A89A6206354A522A2E41BC380
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     4760
IP address blocks:        206.161.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:20:63:54:a5:22:a2:e4:1b:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=7a074e45-9f6e-4c22-8394-e6ab0ec24aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:b1:2e:52:75:ff:18:b8:71:70:72:97:36:
                    c5:75:e7:33:ab:77:54:05:4e:28:93:01:93:8d:30:
                    70:00:9c:7e:0c:97:49:80:a3:1f:20:ee:55:b3:91:
                    2e:e6:90:a8:d4:f4:03:eb:b4:ff:89:af:fd:16:e8:
                    97:0a:6f:1a:a6:d5:14:38:bc:f1:96:e0:6f:d0:af:
                    c8:ee:56:2a:7e:24:f3:ef:2c:60:54:c5:28:7b:5b:
                    f2:c3:9e:9b:49:09:8c:81:f3:55:d6:10:62:b3:4b:
                    52:90:a9:06:20:58:03:a4:9b:55:16:f0:15:84:91:
                    98:03:d9:c0:f9:a9:3b:02:8c:b8:35:98:4a:8b:ad:
                    61:c0:3b:2b:a2:81:40:7e:b5:b7:f9:6d:24:fc:76:
                    63:6d:7e:ab:41:01:00:7f:4e:8c:ec:59:bb:0c:c2:
                    a5:86:f4:f0:9b:fc:77:bb:6a:e9:1d:cb:57:64:d0:
                    9b:c8:fe:0e:cc:c1:bf:42:cf:fa:8f:80:2e:c4:69:
                    2b:b0:6f:ea:8c:2f:7a:36:3f:55:ba:4f:ca:48:c8:
                    39:1a:8e:03:ce:ad:41:13:10:b8:1b:4a:f6:d5:85:
                    b3:d8:49:96:1f:7f:14:b1:f7:e6:e4:39:b8:e7:c6:
                    8f:a8:94:29:d8:4f:b8:0e:ed:5e:50:8f:02:92:ed:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BB:B0:02:A6:91:90:EB:06:55:7D:73:07:FE:26:C7:10:50:DF:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.161.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:bf:21:85:7b:e3:b1:41:1a:86:cd:41:fc:cf:4e:ee:37:77:
         06:3f:3f:7e:10:e8:85:6c:f3:43:6c:75:19:74:58:f1:9f:9c:
         da:ca:6a:34:f3:96:9d:e2:f3:5a:3b:e4:44:49:f3:de:36:83:
         91:d1:65:ae:f6:8f:8b:59:7c:36:be:86:e6:60:61:83:f2:ae:
         c2:dc:e8:36:2b:f1:ac:02:33:f2:23:b6:ac:5e:42:06:b5:0a:
         8e:b7:af:6c:46:fe:01:f2:2e:6a:8a:56:1e:21:06:00:ae:a2:
         65:39:80:35:6b:81:d9:fe:60:5c:4d:9d:2b:fd:16:30:eb:96:
         63:77:95:84:b1:db:b1:f0:37:a9:ad:dd:ad:e2:48:bc:83:0f:
         ae:29:34:54:69:71:21:6e:ce:85:62:8a:5c:8b:14:d3:92:c1:
         a6:ec:7a:3a:e6:74:a5:0f:27:0e:11:88:a8:1e:e6:13:eb:ac:
         f2:fe:6e:26:6d:aa:c6:04:a2:33:f9:26:fd:ae:94:74:4d:6d:
         24:1f:7a:be:f0:e6:bc:8b:63:d2:04:05:a9:91:67:e0:db:29:
         3d:ba:ff:f8:61:a7:c0:91:77:21:24:ed:34:ff:1c:20:d5:5d:
         71:d2:9a:6c:2c:92:96:09:05:f8:bb:a3:ef:4f:11:11:2e:aa:
         ae:0b:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:48:21 2025 by rpki-client