Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/c1738741-658a-32cd-a4c3-18dc5ad14fc2.roa
File:                     c1738741-658a-32cd-a4c3-18dc5ad14fc2.roa (raw, json)
Hash identifier:          NJuqFaOZzfluE3AdUWa+CVLyc5xVIJkRRgrbRyuP5mA=
Subject key identifier:   6E:AE:7C:F8:3A:82:8F:6D:8E:3B:AC:98:98:BD:02:3E:14:A9:53:EA
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584B6FF7452FEE9B579E4AB42A40
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/c1738741-658a-32cd-a4c3-18dc5ad14fc2.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     33211
IP address blocks:        206.41.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:45:2f:ee:9b:57:9e:4a:b4:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=07f410bf-b4a6-46fb-b687-7b704441e737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:71:2b:47:9f:04:6b:5e:be:50:fa:a8:69:
                    05:6d:38:b5:78:11:d4:bf:d3:54:23:61:a2:dc:b1:
                    3d:17:42:c6:fe:e9:7c:6e:f7:d6:e7:b0:9d:b7:00:
                    61:92:31:1e:6f:ab:d3:7e:87:48:1a:86:06:76:81:
                    7c:0d:d9:02:16:62:6d:09:36:52:4b:0b:7b:de:98:
                    0a:7c:18:f1:7f:93:ef:f7:46:8f:27:bf:05:d1:7e:
                    76:e7:be:e1:25:bd:6f:cc:a0:2d:a6:e7:24:cc:f8:
                    1c:06:c1:91:15:2b:5b:fc:5b:e3:f1:30:35:da:89:
                    6e:d2:f5:d9:17:d6:03:6f:8c:9d:b9:e0:d6:16:b7:
                    bd:ed:de:93:f4:6c:7a:c8:ff:f3:9b:b3:43:34:b5:
                    74:84:19:33:9a:16:95:de:ac:c4:53:30:c7:13:71:
                    c0:99:fb:2b:70:51:7f:3c:29:b2:de:56:68:58:37:
                    08:1a:cc:26:d3:2d:9a:e5:b5:11:e7:9c:56:4f:1c:
                    48:18:b4:fa:1e:6d:46:85:74:1e:e6:fa:af:fb:c6:
                    39:dd:47:29:23:89:e3:d2:3a:2c:dd:2a:aa:0d:90:
                    3a:80:f9:9a:16:ff:23:87:c9:df:a3:be:a1:7d:36:
                    22:ad:fd:fb:aa:a4:26:23:9c:0b:58:2f:32:c0:66:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AE:7C:F8:3A:82:8F:6D:8E:3B:AC:98:98:BD:02:3E:14:A9:53:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/c1738741-658a-32cd-a4c3-18dc5ad14fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:67:a6:97:8c:8a:de:6a:37:9c:e8:48:3e:b9:bc:3a:27:c1:
         ae:0f:a9:55:03:c5:d2:58:c1:45:54:7c:d1:18:eb:d3:2c:4f:
         92:5e:6b:df:c8:8b:13:48:24:2c:75:43:c1:41:a8:99:83:26:
         9e:f6:52:b2:d8:c8:7d:3a:75:14:40:c2:8d:5d:44:d8:31:12:
         ae:79:78:c3:e4:76:09:61:a0:8d:c7:2e:7c:7b:88:39:87:37:
         bd:ff:ac:75:f8:a0:22:ea:f2:06:71:74:1a:0b:8d:04:e1:aa:
         f6:35:50:a1:5b:01:5e:66:81:56:3e:eb:bf:9a:78:72:37:ea:
         73:02:ab:36:86:b5:45:74:a0:fc:b4:0a:e5:04:66:87:97:3d:
         55:2a:93:36:f8:7f:43:84:fc:3f:bd:ff:49:98:fb:11:c8:4c:
         82:ab:dc:e4:a5:a0:2e:b1:b7:cd:47:0c:56:86:98:37:f8:ab:
         ac:e3:35:51:36:6b:09:91:75:a8:e7:7f:8f:fd:3c:d6:b5:c1:
         91:3c:be:04:9a:f0:bd:7c:62:31:36:d2:8e:aa:3c:68:0b:5f:
         51:1d:38:89:c5:d8:6d:e8:6e:80:67:65:a6:72:86:3f:5c:8f:
         68:93:14:ec:61:79:e5:e4:d4:d5:d9:9f:1b:7f:65:ab:73:84:
         cf:72:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 11:38:21 2025 by rpki-client