Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/c3cb1251-5ba7-3e59-87e6-04d5d0743621.roa
File:                     c3cb1251-5ba7-3e59-87e6-04d5d0743621.roa (raw, json)
Hash identifier:          xRiCAa2kIfxa+I8QiFrrKP9EFijkxNALo1UVpGbo9do=
Subject key identifier:   AA:98:51:55:25:7C:82:1C:ED:5E:E1:4B:EA:B6:30:7D:2E:A7:25:85
Certificate issuer:       /CN=d06852c4-a6c0-43d5-ba94-22fab637697a
Certificate serial:       010D0C9F4328584A7CA786BEFB76922E2FDC8F80
Authority key identifier: 30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/c3cb1251-5ba7-3e59-87e6-04d5d0743621.roa
Signing time:             Fri 11 Jul 2025 21:18:33 +0000
ROA not before:           Fri 11 Jul 2025 21:18:33 +0000
ROA not after:            Thu 09 Oct 2025 21:18:33 +0000
asID:                     9304
IP address blocks:        206.72.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7c:a7:86:be:fb:76:92:2e:2f:dc:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06852c4-a6c0-43d5-ba94-22fab637697a
        Validity
            Not Before: Jul 11 21:18:33 2025 GMT
            Not After : Oct  9 21:18:33 2025 GMT
        Subject: CN=621477e4-c260-4dfd-b950-6306980bbc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:13:0c:c2:c8:2d:99:1e:e3:f1:95:12:6f:
                    8b:0c:04:c2:c1:c8:24:31:e2:60:50:27:05:ca:ee:
                    0e:1e:fe:19:c1:a1:c1:aa:b6:72:f2:8a:e5:21:8d:
                    73:b1:6a:8f:89:d2:aa:4d:9e:44:65:64:3b:11:01:
                    14:0d:1a:52:9a:9f:00:3c:41:0c:f0:b5:a5:df:7e:
                    73:af:1f:2f:6c:f0:34:fe:ca:59:37:68:67:6b:72:
                    6d:44:89:01:87:d4:01:98:be:ee:38:ff:8e:1d:d0:
                    fd:e1:2a:dd:fe:e5:2e:78:3c:f2:80:55:51:10:de:
                    14:f1:b9:c4:1b:53:c7:4e:a8:01:5c:4f:13:c0:16:
                    2a:b1:aa:0b:b8:68:8c:28:80:11:90:07:35:f6:c2:
                    9c:a0:99:27:1d:47:04:56:81:c6:9d:b9:a8:a3:6c:
                    59:17:dd:b1:ff:b7:38:17:bf:55:12:be:87:97:01:
                    b3:6b:44:c7:2e:63:4c:c6:d8:f3:9a:ea:4f:6b:7e:
                    99:d5:89:4a:85:62:c9:39:0a:f8:11:1b:cc:c2:73:
                    3b:b6:c0:19:f2:91:a2:37:76:5e:1b:b4:c2:1e:78:
                    ce:a2:e1:4e:a8:b6:ac:e0:f9:da:42:14:a4:f8:f4:
                    84:f3:3d:47:4b:a2:42:d6:ab:74:90:1b:73:eb:32:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:98:51:55:25:7C:82:1C:ED:5E:E1:4B:EA:B6:30:7D:2E:A7:25:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/c3cb1251-5ba7-3e59-87e6-04d5d0743621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl

            X509v3 Authority Key Identifier:
                keyid:30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.72.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ab:f9:04:92:a8:8e:c2:15:27:71:b6:26:38:ae:0a:a0:e1:
         ed:75:76:bd:a1:88:da:ca:a6:5d:ef:4d:b8:3f:e3:b8:0f:5b:
         1e:21:85:5e:ec:c3:2c:77:90:5d:de:a1:27:1d:1f:ef:7b:3e:
         4d:8b:70:ef:e2:6d:4e:68:01:6d:5a:21:fe:a9:04:f0:c7:33:
         67:d2:91:4d:2b:e3:9e:68:7f:d7:e5:9d:d1:78:60:b1:f2:73:
         c8:63:3e:ef:31:c9:64:40:8f:eb:a2:4d:49:de:88:4e:d1:5f:
         c8:e5:1f:84:21:f8:8f:e8:08:35:f5:a7:13:3d:a5:f8:a3:35:
         cb:01:00:44:4d:05:49:11:d8:6d:8e:1d:c0:3c:27:be:2a:81:
         4c:e1:7d:9d:7e:e7:ed:9b:1e:73:5e:69:69:33:2e:cd:76:f5:
         2c:05:3b:38:46:69:54:61:c0:8a:aa:54:76:4f:df:65:5d:49:
         d0:50:33:b6:b6:01:18:85:18:d9:48:fb:4f:7a:cb:0b:b1:f9:
         c5:fe:f1:55:dd:28:86:70:5e:a4:3d:0f:c9:d5:55:55:a4:67:
         45:4a:c2:40:cc:aa:a1:62:12:cf:a3:03:d2:ce:22:fa:74:30:
         98:35:91:d2:96:21:66:79:d9:bd:7f:3e:18:d3:f9:20:b8:91:
         c0:8e:2a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:20:22 2025 by rpki-client