Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/04525e4f-2d87-3427-9319-d137e4a382fa.roa
File:                     04525e4f-2d87-3427-9319-d137e4a382fa.roa (raw, json)
Hash identifier:          TGjSobSx9s905uiTC5jWNwOfxf3ogvhpDkm2NZSn+gA=
Subject key identifier:   8A:88:21:1A:23:3B:12:A1:65:EC:C4:75:30:AA:42:00:3A:66:64:47
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F4328584A66C0958905439A9C23B145A0
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/04525e4f-2d87-3427-9319-d137e4a382fa.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     7018
IP address blocks:        206.121.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:95:89:05:43:9a:9c:23:b1:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=6cd1ea89-2748-47d5-9e51-777c34cf0393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:12:b6:94:8d:a3:f5:1e:c4:d6:8b:be:3c:
                    a3:a1:be:b5:cb:87:cb:e1:ba:a7:a7:e0:17:c4:67:
                    74:10:8d:44:30:39:28:18:ee:cc:a2:21:1e:fd:ef:
                    4b:76:aa:ec:e3:7f:02:e9:fe:c0:61:14:7e:d2:8b:
                    cf:b5:c7:98:32:b9:95:be:95:5d:57:95:5b:45:99:
                    2f:24:be:fb:19:32:5d:71:8a:89:1b:ed:06:ba:c0:
                    0e:70:5a:e5:18:5b:f4:7f:b2:cc:e4:5f:27:f8:32:
                    75:0b:f9:77:1a:25:7a:7b:81:3f:e1:90:84:6a:7d:
                    9d:04:5d:b0:8e:ee:7f:15:6e:ad:1a:e8:42:7d:67:
                    a0:bf:a1:d6:42:0b:b4:16:96:bd:9f:ba:3b:c0:55:
                    4b:7e:4a:05:ed:f8:2e:da:73:57:c3:af:7f:06:b3:
                    74:e4:a2:67:60:82:91:a4:57:ac:62:2d:ac:3a:c9:
                    7b:21:55:31:57:bc:60:2f:5c:6a:3e:51:e6:69:8c:
                    ab:ba:49:2a:3d:b0:e5:4e:57:ca:c2:09:c7:17:8d:
                    df:8a:f8:4f:42:60:89:40:02:e4:45:b8:b3:86:69:
                    2a:e9:e3:70:5c:0c:75:b2:e6:a2:2c:84:15:82:21:
                    35:74:6b:bd:a1:c1:14:5d:8b:4e:73:e4:cc:ab:45:
                    dc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:88:21:1A:23:3B:12:A1:65:EC:C4:75:30:AA:42:00:3A:66:64:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/04525e4f-2d87-3427-9319-d137e4a382fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:06:44:10:f6:26:07:ee:e7:f4:0f:b2:88:1e:99:be:d0:35:
         37:18:21:cd:77:d5:91:cf:75:2e:1f:f1:de:19:2f:dd:cc:ae:
         6b:d9:fe:8c:02:34:8f:96:74:ba:ed:da:01:0c:c0:9b:df:8e:
         cd:26:d4:5d:51:51:ac:d8:10:72:2b:79:8c:05:30:9f:ab:fd:
         b5:01:47:12:73:89:9f:73:08:9f:62:57:a2:d2:98:9f:4b:d0:
         3a:c8:18:49:34:7d:2b:34:29:a1:d0:6d:c3:7e:3f:82:5d:ab:
         96:ee:4d:f4:55:d5:68:27:4c:df:1c:5b:67:1d:b3:a9:39:c7:
         6e:4c:a8:e6:00:b2:0b:01:6b:9c:3d:e4:c6:1a:c3:79:d9:24:
         57:9b:fd:c7:0f:07:3c:8d:07:9c:ea:8b:db:38:a6:66:95:9a:
         36:88:c0:7d:cb:7d:63:39:c7:a2:90:7b:db:75:63:35:7e:c2:
         c7:68:f8:ea:1c:81:be:a2:84:50:3c:33:b1:e5:c3:b3:a0:43:
         61:06:44:5b:86:da:7c:1d:d1:22:44:86:03:bd:e3:96:ee:22:
         f8:d9:32:2c:6c:fc:9d:8d:19:2c:28:fe:3b:bf:7a:02:d1:70:
         a1:f9:1a:b4:e2:49:91:2a:a8:a5:57:4f:65:e1:b1:ea:94:ee:
         24:00:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:07:05 2025 by rpki-client