Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa
File:                     6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa (raw, json)
Hash identifier:          aq0PEYYc9zZzSKakIxfA7V5cS772SwzYGzLkqA+R/VQ=
Subject key identifier:   04:00:5B:31:A4:EE:D5:8D:30:66:D7:22:98:6F:A2:FD:45:E3:A7:18
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584AF521257D72D1E176AE771080
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     10747
IP address blocks:        208.56.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:25:7d:72:d1:e1:76:ae:77:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=30997ae3-9376-41a3-abd0-8043177c3eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:eb:07:aa:bb:90:2c:db:5c:9e:0d:a0:c9:f7:
                    3e:28:4d:83:77:d8:43:89:8b:48:cb:ca:cd:98:55:
                    44:55:02:57:fa:f1:3a:3e:8f:a8:eb:fc:06:d5:92:
                    b8:13:14:5e:8f:06:c5:1c:1e:3e:1a:39:9f:53:d8:
                    a1:f3:7f:b3:17:65:07:8d:42:15:e1:a4:53:36:f9:
                    c7:c4:64:dc:63:a1:9f:7e:d3:f9:44:6c:4e:ea:4b:
                    90:f5:0e:8c:ac:31:99:25:31:50:a3:b9:3c:de:c4:
                    98:de:a0:76:2f:ee:c2:bf:d0:c8:a8:25:06:87:a4:
                    93:4f:08:ba:dc:93:85:70:6b:dc:fe:fb:be:a8:13:
                    88:18:fc:f8:c1:8d:5d:8c:67:d1:3f:c5:cf:c9:84:
                    7a:27:6e:d6:c9:01:42:bf:81:97:dc:35:19:f7:9a:
                    de:b9:32:b1:b3:e3:4c:ef:9c:0b:97:4d:25:4f:d4:
                    35:3b:43:59:85:6e:9d:d3:f7:3b:42:fb:f6:32:86:
                    7f:ab:4d:94:33:0a:37:65:98:d4:ea:d9:25:b9:aa:
                    de:4b:f2:ea:95:f7:ff:c1:9f:89:be:2f:a7:58:1e:
                    4e:bd:4b:8b:8a:67:5e:53:f0:86:fa:b7:a9:36:7e:
                    d1:df:81:16:6f:3e:a8:79:62:86:67:27:27:e8:54:
                    ef:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:00:5B:31:A4:EE:D5:8D:30:66:D7:22:98:6F:A2:FD:45:E3:A7:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d2:f5:f9:bd:94:d8:c7:c6:59:24:4c:7f:9e:5c:df:bc:42:
         63:5e:df:c5:04:ee:c6:21:54:cd:58:68:c0:66:84:50:20:70:
         eb:ff:ba:84:2c:2d:26:38:fa:f4:2c:f6:ca:07:24:d3:9b:63:
         00:be:60:a9:a4:c3:26:d1:bc:19:f9:57:65:ea:75:aa:12:24:
         d4:a0:72:10:bb:39:9d:66:85:0f:2c:91:0e:70:0b:b2:7a:e6:
         05:79:40:cc:20:45:fa:8a:b4:75:ad:93:71:a1:65:c1:f6:0b:
         cf:f4:c7:f1:f4:c9:61:f4:3a:79:b0:04:0d:fd:5e:30:63:89:
         e7:5c:06:03:df:61:ef:1c:59:97:fd:f7:51:07:57:c1:51:18:
         6a:86:68:46:5a:b9:5a:96:e9:55:4d:bb:17:84:03:43:b8:36:
         5c:26:35:52:19:ff:cb:8c:3d:60:0f:96:e6:3d:e1:13:98:86:
         55:86:6b:f1:bd:32:7a:9b:de:09:18:38:22:21:6f:d5:d6:e0:
         ef:c1:9b:19:45:ab:8e:5e:27:c5:0c:e6:1f:d0:23:77:99:31:
         5e:93:79:92:01:66:f3:c3:dd:a4:20:6e:aa:8d:9d:bf:d7:d4:
         31:47:17:e6:28:17:9e:cf:5b:db:19:6e:b3:1f:5c:a1:b4:69:
         88:77:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:05:36 2025 by rpki-client