Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa
File:                     95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa (raw, json)
Hash identifier:          AJqoyqlnqTZtOVo5NoBN4cwFzdDFP7xq0p67PabXjDg=
Subject key identifier:   06:43:10:AF:A8:EA:EE:F2:16:DD:46:9B:09:35:4B:F2:60:05:C4:97
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584AD7D1279B86D1527CCD2681A0
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     33211
IP address blocks:        206.41.120.0/22 maxlen: 22
                          206.41.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:27:9b:86:d1:52:7c:cd:26:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=12219155-ac89-448b-9b5b-30da1ffac876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bd:9d:e6:e0:e2:41:09:57:2a:9a:96:c6:6c:
                    b6:43:47:81:56:91:8b:01:ff:76:2e:aa:3f:01:15:
                    49:11:d6:f6:75:7e:75:6f:52:8c:83:9c:df:bf:99:
                    1b:33:75:59:7c:68:43:dc:a3:33:cf:1b:fb:04:11:
                    22:9e:86:6a:7e:0f:ac:ea:0c:18:12:db:50:69:db:
                    32:8a:3b:29:05:45:16:37:ea:ae:9c:09:db:41:e3:
                    59:cc:f5:b0:2f:b0:0b:ef:c7:27:f7:35:ca:90:f2:
                    8f:40:32:59:c5:5e:d7:5d:a4:8c:13:31:aa:1f:ba:
                    5b:f3:09:7b:9e:84:da:63:b1:e4:88:24:a4:b3:ea:
                    47:55:0b:a8:d2:b2:90:ae:04:c7:39:c6:2b:cf:4a:
                    50:74:3f:40:a0:f0:ef:28:8f:96:af:8e:54:a6:4d:
                    40:8c:63:0d:7f:cc:0e:16:d1:1f:bb:da:4d:97:42:
                    88:48:05:aa:52:ff:19:44:f4:ae:a1:43:69:63:99:
                    9d:8a:15:3b:5d:fc:42:17:15:29:9d:42:bd:4b:d2:
                    3c:19:8b:37:e9:5d:7f:ef:d8:16:ea:42:01:e6:e6:
                    c9:1e:5e:e5:b1:09:fe:9f:0a:7e:91:cb:3f:f5:ee:
                    10:5c:09:78:d8:95:d1:0d:1f:e8:34:c7:2f:1a:21:
                    07:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:43:10:AF:A8:EA:EE:F2:16:DD:46:9B:09:35:4B:F2:60:05:C4:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:35:0f:f1:1a:7c:00:c0:e9:0d:91:1b:b7:c6:05:73:c7:
         ba:1c:41:19:3b:23:3a:11:b4:76:5c:67:7f:3a:ce:a9:02:fe:
         32:8d:cd:33:3c:90:11:84:ee:f7:b1:1a:93:28:a6:83:f6:3b:
         e9:c7:09:8c:4f:51:95:fa:34:6f:ef:5f:4d:27:35:b9:9a:cd:
         51:6d:26:03:8c:68:0f:7c:f2:64:2b:23:1f:aa:fc:bd:01:75:
         af:99:a5:c5:30:36:8f:e7:09:31:80:90:ed:29:45:4a:35:c4:
         c7:74:30:3a:63:06:34:ed:3f:9d:67:6b:68:0c:22:c1:55:d4:
         a0:b3:71:a5:de:4b:db:b6:5e:08:be:54:de:4c:8c:c0:61:ee:
         44:1b:6a:7a:da:95:62:5b:20:ce:59:cb:a6:c2:05:bf:58:94:
         da:45:65:29:f8:f0:55:b5:78:e2:e7:1a:e9:13:8a:9b:9a:25:
         88:5f:ae:68:30:26:bc:01:41:46:b5:40:7c:5c:9e:6c:92:bf:
         78:20:07:a0:04:6b:06:56:06:51:b4:88:ce:64:7e:41:0e:29:
         aa:97:f8:ab:f8:58:f9:93:45:b7:cf:f3:76:aa:aa:b4:62:c1:
         20:6a:8c:88:d3:58:4c:35:a8:43:1f:dc:9e:87:e7:13:a4:6c:
         b1:b4:c3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 21:29:55 2025 by rpki-client