Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa
File:                     b09e3c7b-d4da-3052-b836-3ec571164c65.roa (raw, json)
Hash identifier:          5JCtK+Y8vFc/ywd3T7Zvw8g0m0QRN3ZoCgOc9XNir9I=
Subject key identifier:   EE:31:EF:90:D9:0C:23:CD:F9:45:3F:A4:55:D6:BC:32:0D:18:2A:38
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584A6825DD0FBAA0B1F682BB1000
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     22351
IP address blocks:        216.250.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:dd:0f:ba:a0:b1:f6:82:bb:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=8eecc9bc-67a7-4142-8df0-c3c1f4bc10fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c6:d2:89:1d:4a:47:00:fc:9c:52:3e:00:06:
                    73:b2:36:eb:2c:0d:31:4f:15:98:96:bc:e1:11:1c:
                    7e:5c:4a:7d:10:fa:d6:67:be:99:03:73:cf:50:70:
                    e3:83:b8:8e:c6:d2:c9:9f:f4:1c:74:3f:4c:d3:b1:
                    81:39:91:e1:ef:78:70:cb:29:0c:dd:0d:83:53:b6:
                    20:9f:d5:75:fc:a5:2f:64:7f:ad:5b:12:97:2c:59:
                    4e:24:dd:df:40:8c:1d:a0:5f:65:c7:5e:02:8a:de:
                    c3:0f:2c:ca:e2:c0:d4:2c:27:1a:08:9f:57:8c:9b:
                    14:ea:18:79:0f:50:0f:74:a7:38:31:35:93:18:13:
                    d3:0a:ec:b1:80:38:91:f5:ef:46:8d:3a:71:92:48:
                    87:68:8d:e3:07:96:21:d0:7e:5a:45:14:30:de:6b:
                    3a:5f:12:6a:c9:0a:f3:22:db:00:5a:f7:69:17:c3:
                    b0:13:fc:fc:18:73:c9:ca:b5:3a:7a:a8:a4:53:8b:
                    69:a5:fe:6a:c8:5f:27:3a:93:9d:57:b3:67:62:8c:
                    71:90:8f:a5:81:e4:0d:6e:0f:86:89:ef:96:0e:a0:
                    05:0b:48:00:5a:32:22:36:30:d7:60:cd:54:54:bb:
                    32:b7:cc:dc:50:db:88:2a:58:a6:4a:e0:2d:06:5f:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:31:EF:90:D9:0C:23:CD:F9:45:3F:A4:55:D6:BC:32:0D:18:2A:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:5f:63:4b:dc:da:53:22:c7:72:25:0e:e7:62:59:20:20:be:
         fe:41:94:35:62:91:be:71:eb:7a:7c:45:1c:c7:fb:51:f3:2b:
         5d:77:d9:a0:ad:e8:5e:9c:97:e9:f6:eb:54:9b:04:8d:19:79:
         e0:3b:6c:aa:72:e1:78:5e:99:0c:2d:e8:20:a5:55:0a:af:76:
         e6:33:f7:9b:80:b9:7d:bb:f7:d4:ff:fc:a0:ca:10:bb:3b:06:
         41:e9:68:5f:e2:90:28:a2:d9:13:78:3d:65:95:a1:12:83:76:
         90:99:da:16:7f:ed:b8:6c:bf:09:80:ac:6f:20:c1:a3:c9:cc:
         2d:f1:e9:b0:80:e9:ae:e5:82:f4:39:42:2f:e0:f4:7f:ae:94:
         54:69:af:73:0d:35:d5:0b:ad:a6:be:44:b7:e3:b8:45:a9:b8:
         f1:9c:a7:87:42:94:50:71:a4:96:96:2f:30:69:01:1a:e1:70:
         1c:11:1b:53:ae:9a:72:79:fb:c7:b5:59:d3:7d:9d:bc:3d:d1:
         49:99:28:59:99:23:de:67:5d:13:07:d3:cb:2a:99:c0:eb:aa:
         44:22:54:32:c6:a0:11:68:0f:99:07:13:ba:15:50:a5:3b:ee:
         71:bb:d1:8b:c8:ad:84:30:ef:3f:48:2d:93:42:6e:d3:76:4e:
         5b:fb:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:20:12 2025 by rpki-client