Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/bdbeb109-129b-3a41-a568-4c84dfe71340.roa
File:                     bdbeb109-129b-3a41-a568-4c84dfe71340.roa (raw, json)
Hash identifier:          zCSrbymL2rzM5RkwC0Opu+NY+haOObSUt8d0AjOyM8E=
Subject key identifier:   56:3E:E2:A9:8F:3D:E8:F1:87:35:04:C8:C6:A2:93:33:6B:48:55:91
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584A430F1FC8192AE4CD3821A980
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/bdbeb109-129b-3a41-a568-4c84dfe71340.roa
Signing time:             Sat 21 Jun 2025 06:10:24 +0000
ROA not before:           Sat 21 Jun 2025 06:10:24 +0000
ROA not after:            Fri 19 Sep 2025 06:10:24 +0000
asID:                     6922
IP address blocks:        206.254.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:0f:1f:c8:19:2a:e4:cd:38:21:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jun 21 06:10:24 2025 GMT
            Not After : Sep 19 06:10:24 2025 GMT
        Subject: CN=7fa5e106-c665-4d82-87ac-25e65867d2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:34:9e:cd:3a:e0:34:c8:48:b2:04:da:4f:74:
                    95:14:af:70:fb:52:c6:5c:c9:34:45:8f:8c:37:38:
                    a8:28:f3:b6:c3:aa:d5:0c:31:86:0e:dd:6f:97:ad:
                    b0:f1:fc:b7:be:6c:02:3d:45:ca:30:62:0a:35:e8:
                    30:0b:ba:75:c1:38:93:76:14:99:1f:f6:2c:8b:1b:
                    ac:55:5c:6d:6d:eb:81:3c:ca:80:84:30:10:37:97:
                    9c:d5:02:db:b6:ee:9d:8c:e1:8c:a8:4b:12:e7:be:
                    3d:dd:ce:bc:e8:96:55:be:64:8f:43:17:f8:8a:d9:
                    aa:2b:5a:6b:9c:91:82:ac:85:1e:ee:39:67:31:3f:
                    3c:5c:94:50:9d:d2:88:e2:77:9d:9f:63:39:0f:a2:
                    aa:71:96:b9:f4:69:93:df:61:7b:2d:c8:a2:5d:88:
                    a3:25:71:a5:bb:09:6d:4b:2a:24:16:53:ef:c4:e9:
                    e8:92:a2:1a:ed:e1:47:e0:ef:21:19:8a:02:a1:83:
                    2c:e2:4d:f8:95:c5:fa:ab:df:88:fb:4e:06:96:66:
                    c7:b4:53:3b:65:f6:18:e0:fd:35:d4:58:a0:e0:d6:
                    99:1d:6c:5f:a1:12:2e:08:9d:f6:78:c3:fd:54:0f:
                    56:dc:de:d9:9c:ac:b4:f6:08:05:d3:71:77:a9:0e:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3E:E2:A9:8F:3D:E8:F1:87:35:04:C8:C6:A2:93:33:6B:48:55:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/bdbeb109-129b-3a41-a568-4c84dfe71340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.254.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:22:fd:ad:cb:8d:17:73:6a:91:9f:88:6e:91:0e:d9:57:4e:
         b9:27:9a:ff:2f:9d:20:8c:a4:d9:f3:2b:12:01:10:13:81:c4:
         40:8c:b3:a4:50:b9:75:a9:52:b2:00:c1:48:2e:f9:12:28:ef:
         a1:6f:d1:97:0f:63:d7:97:58:7b:3d:56:43:54:80:d3:e1:4a:
         2a:50:e9:53:37:ad:08:4d:55:ca:c1:b9:de:e7:d2:7c:76:95:
         56:db:58:6f:b0:76:4d:67:ac:e6:cf:d7:98:a6:ef:4b:ec:c6:
         6c:c7:07:8d:49:1c:f1:15:05:69:67:09:d6:37:aa:d3:ca:fa:
         9a:b9:a2:b3:69:f6:32:42:af:02:3b:4e:7d:f7:2d:51:69:ca:
         f5:fe:62:25:4f:7c:b1:c6:c8:df:fe:1f:01:b9:e3:e8:cc:98:
         1f:6a:0d:2e:e0:0b:2f:bb:32:63:39:8c:40:09:e2:58:b6:d7:
         44:5a:ce:e2:1e:b2:37:7d:0c:4b:0e:f8:be:8b:fa:73:1b:3d:
         8f:82:62:40:43:1b:af:29:3d:7d:01:26:b0:00:53:bf:fe:72:
         a3:8c:4b:75:5e:76:5e:68:d5:5e:7c:30:e3:0f:5b:11:9e:a4:
         af:ea:40:ef:86:ae:ff:ac:8d:52:d4:85:3b:3f:be:7e:8c:6f:
         56:e8:47:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:14:21 2025 by rpki-client