Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/de50b0d4-4323-3366-a872-b7f78b1a7210.roa
File:                     de50b0d4-4323-3366-a872-b7f78b1a7210.roa (raw, json)
Hash identifier:          frM61zHVXKIXsDR0JFX6wb/rDGMsse09o1xW+h+mqYU=
Subject key identifier:   12:33:87:76:7B:08:90:B5:5E:8E:46:E3:D1:DD:6B:A8:D3:F7:31:5A
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F4328584A549B23655BC6AB7392E22580
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/de50b0d4-4323-3366-a872-b7f78b1a7210.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     397976
IP address blocks:        206.82.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:23:65:5b:c6:ab:73:92:e2:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=76fd7651-82f9-4d24-96da-69ab4959aad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:85:15:f7:af:53:f3:95:4b:49:8d:89:02:
                    19:ca:22:3c:45:fa:04:79:e5:11:c7:c9:fa:bf:cd:
                    d6:eb:ce:3e:6e:80:3b:67:76:52:5b:7c:6a:f9:f4:
                    01:85:a4:42:2e:b0:e1:1a:0a:f5:4b:3d:95:08:2f:
                    c9:33:34:53:c3:a9:2d:a7:bd:60:49:6a:8a:e6:73:
                    bd:3a:cc:33:8e:15:ac:e7:1d:27:fd:be:50:f2:28:
                    eb:3b:c0:fe:f7:f2:2b:d6:76:cf:49:bb:1f:8e:03:
                    98:1d:37:c7:2d:8f:a6:ad:29:ea:ea:1b:5a:bd:bb:
                    cb:dd:02:96:e3:c9:ca:c2:aa:16:c3:a5:7f:b8:87:
                    59:a3:32:16:f7:7b:17:ab:67:88:4b:be:86:cf:59:
                    43:5e:af:6a:3a:97:62:c8:0c:08:ba:02:dd:3c:e2:
                    dc:10:5c:de:18:d8:71:97:f8:d1:65:a4:92:0c:33:
                    78:0c:a8:b2:b4:fe:32:9c:cc:db:5a:43:87:06:67:
                    b5:0e:71:10:4b:99:7f:f2:7a:52:5a:f1:28:ff:04:
                    d7:0c:86:e2:72:8a:3f:a9:ca:86:bd:da:05:1d:9a:
                    39:61:ea:2d:3c:6b:38:c6:bf:aa:ef:51:9b:38:ca:
                    f2:ef:a3:12:93:77:9a:99:d3:19:3a:94:37:a3:d0:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:33:87:76:7B:08:90:B5:5E:8E:46:E3:D1:DD:6B:A8:D3:F7:31:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/de50b0d4-4323-3366-a872-b7f78b1a7210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:94:50:07:fd:e5:d7:3e:a7:1e:3c:7b:e4:7f:83:4c:f1:98:
         5a:30:2c:65:3a:93:76:4f:20:97:2e:69:57:6d:19:d3:30:7a:
         d8:5b:4c:98:c7:3b:93:28:51:70:38:ed:6b:85:30:0e:9f:78:
         4b:f7:8a:c3:23:1c:a0:a9:49:05:2d:74:e5:42:5d:54:81:4a:
         3b:8c:16:bb:e2:48:65:e7:87:23:c6:5e:66:cc:db:73:92:36:
         c5:3f:5b:93:ce:f8:d5:8c:2c:f3:be:2a:92:dd:f1:e0:c7:22:
         2d:94:d7:36:80:64:a4:4e:89:de:7c:c0:92:1e:fb:43:f4:b7:
         24:22:b3:8a:93:05:61:28:4e:25:12:7f:3b:17:71:47:c4:dc:
         53:7c:e3:b9:ce:00:97:39:6a:ad:3c:a0:bf:15:64:d3:98:13:
         19:2d:e4:15:b1:59:36:c5:2c:bc:f5:ad:0d:12:f3:33:d3:df:
         89:27:74:c7:f3:da:cd:8b:18:34:b7:0a:09:c8:ec:30:0c:5f:
         7e:c1:d4:00:d4:1d:04:43:79:12:1d:8a:19:95:17:ac:84:5f:
         9a:8e:3f:38:d0:2c:94:a1:19:39:27:c1:88:25:5a:83:d2:d1:
         9c:a3:9d:9b:a0:b1:77:24:a0:1b:44:e1:a0:69:3d:77:58:91:
         10:c0:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:31:55 2025 by rpki-client