Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/ec4f0c2f-b502-3cac-8565-6782cedc472f.roa
File:                     ec4f0c2f-b502-3cac-8565-6782cedc472f.roa (raw, json)
Hash identifier:          GP8rpqGqM+4KxtSur0lPO3ohCi+sDqiWpQnxKp83AZI=
Subject key identifier:   C1:60:3E:22:AE:48:A7:F3:2F:4D:07:77:25:E2:12:18:94:91:C6:7E
Certificate issuer:       /CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Certificate serial:       010D0C9F4328584B3126F9F30FF593B1065C4280
Authority key identifier: BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/ec4f0c2f-b502-3cac-8565-6782cedc472f.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     10886
IP address blocks:        206.196.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f9:f3:0f:f5:93:b1:06:5c:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=18b22c6b-55e2-4b3a-be4b-161c65f9c3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:fc:2a:ff:78:42:8f:b9:bb:6e:10:1c:03:
                    fe:9a:ca:e5:14:64:80:dc:1f:2e:b4:ad:3d:a8:89:
                    7d:1e:66:77:16:34:9f:5e:d1:78:5d:43:69:78:7f:
                    6a:ae:cf:8e:1f:f5:5e:8f:68:ed:d7:9e:26:e7:d4:
                    f4:4e:f6:d4:79:21:bb:84:3d:07:33:1d:8e:b3:dc:
                    07:6f:39:1a:2b:8a:d3:23:bc:75:16:69:71:fd:1b:
                    bb:15:3e:80:99:92:c7:c3:2f:d4:6e:b8:1e:11:cf:
                    8b:5b:b3:b4:0a:0e:50:fa:38:ac:59:1c:43:68:14:
                    fc:e5:8e:f2:d2:db:74:7b:e3:0e:6f:41:8f:c0:3e:
                    a8:8d:f1:89:2b:5a:21:65:48:c1:0b:e9:e8:4a:3b:
                    e8:7f:38:99:e0:db:ec:ce:86:30:fa:bd:13:ac:44:
                    2c:87:11:c9:fa:c6:65:1c:76:80:a5:33:c6:29:1a:
                    62:7d:d4:b2:ea:0e:61:0a:08:10:c5:1d:8e:f7:8b:
                    4f:a7:28:b4:38:27:87:12:03:26:b6:84:49:ca:bc:
                    b1:ed:10:12:17:ca:ea:b4:ab:78:89:73:fa:52:13:
                    18:d0:d9:59:57:ae:7f:f1:17:6a:9b:f4:ab:e7:ac:
                    de:1d:30:ee:bc:87:ac:0b:31:e5:64:77:05:9e:58:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:60:3E:22:AE:48:A7:F3:2F:4D:07:77:25:E2:12:18:94:91:C6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/ec4f0c2f-b502-3cac-8565-6782cedc472f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl

            X509v3 Authority Key Identifier:
                keyid:BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.196.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:cd:67:83:de:84:8c:43:5f:bf:b4:6b:46:be:c0:eb:ca:78:
         a3:6c:5f:17:91:87:74:00:e5:fd:ee:98:e1:d5:59:29:db:91:
         f8:2d:33:99:84:01:69:cc:34:d4:d2:90:33:a0:8d:4f:44:6d:
         49:2c:ab:54:c4:92:ce:7e:7c:bf:15:97:7c:ca:e8:98:f4:12:
         de:81:39:2f:e9:42:57:5f:4a:21:09:b2:4f:34:35:83:94:49:
         3c:39:60:2a:52:0f:d0:fe:0b:9d:a6:6e:49:c0:e0:a8:ef:aa:
         ef:09:55:35:a1:7e:2f:99:d6:a1:7b:1a:87:94:bd:6a:49:d6:
         96:75:6b:9e:c7:31:2c:b7:9f:75:54:f6:10:85:a6:a8:36:b9:
         66:bf:c1:ff:20:d4:e6:1b:39:1f:cb:87:fc:33:2b:d0:48:c0:
         27:0f:b1:51:0d:74:52:d6:1d:d0:53:06:8d:ad:da:d8:62:95:
         1a:3f:53:88:72:2c:22:4a:70:2f:ff:11:c4:3c:90:5e:85:7f:
         63:87:b9:2d:6a:7d:06:28:b0:b5:1a:86:50:5f:09:a8:2a:1d:
         d2:7a:28:58:83:41:05:e7:bd:6e:35:bc:65:48:53:a4:80:8d:
         72:8e:11:ac:d0:e1:24:18:6f:3d:38:a8:14:9a:6d:5d:b2:2e:
         e2:5f:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 13:54:14 2025 by rpki-client