Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa
File:                     f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa (raw, json)
Hash identifier:          d0BXHprIZTqY1Jcj9YHYE7CZE20Q9Qf+r/r/ECVq3Ng=
Subject key identifier:   B6:F7:42:A7:80:78:D8:8F:8C:52:E7:30:70:76:BB:AD:2A:4F:51:E6
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584B3556E34F8D6FE8F8F44F8F00
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     398324
IP address blocks:        206.168.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e3:4f:8d:6f:e8:f8:f4:4f:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=5702311f-a809-4529-81df-1676d7a4df8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:3e:2e:e8:a4:ee:c2:07:23:c9:08:12:1f:
                    8e:4c:4e:2b:7e:0f:1b:2d:97:06:f2:07:7a:e6:7a:
                    51:7d:f9:0a:45:cc:2d:d8:55:c2:a4:3c:67:7c:c5:
                    e7:2e:67:fe:32:ed:4b:d2:f7:27:7e:ce:a2:f0:ac:
                    5a:c9:4e:36:8c:22:8e:67:71:29:91:e9:f4:bc:b6:
                    a4:6d:f3:a1:be:f5:14:34:83:09:47:23:58:87:f4:
                    58:29:af:a0:68:79:15:13:4d:75:31:32:49:44:a0:
                    b6:42:a6:ab:a8:60:d6:f7:2e:e6:f9:90:0c:09:3e:
                    d6:f6:8f:e8:1f:b7:19:af:87:e1:22:d7:2e:f1:eb:
                    58:fe:cc:ef:c0:ad:25:fa:bd:75:df:58:3a:88:d5:
                    7c:a1:bf:f6:c3:0a:77:37:36:8d:f2:a0:3a:aa:5a:
                    3b:f1:cd:c6:52:6b:87:6d:1d:b4:c0:29:bf:a9:d3:
                    66:c1:6c:1f:58:7a:0e:bb:55:3e:b7:c9:36:ea:0d:
                    94:36:b0:e4:8a:9a:59:68:d6:17:bc:7d:ab:c8:a8:
                    43:f6:d5:01:61:c2:a4:d5:ca:e2:b8:b8:62:14:01:
                    37:ee:2f:53:49:8d:13:e9:f0:ca:9a:d5:07:63:b7:
                    9c:bf:5e:f7:0b:c5:40:60:57:c1:53:6c:83:92:73:
                    e8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F7:42:A7:80:78:D8:8F:8C:52:E7:30:70:76:BB:AD:2A:4F:51:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b2:19:a9:9b:53:8d:17:1a:53:56:4d:1b:04:cf:3a:8e:8d:
         23:7b:31:28:ed:14:ab:3b:33:89:c1:02:d9:4f:55:cf:da:22:
         dc:6d:57:43:6c:18:42:bb:4a:58:ec:f2:c0:36:95:ee:04:01:
         21:0b:00:47:5d:fc:d2:ee:37:00:a6:2e:c6:1c:ed:3c:9b:02:
         6a:2a:97:da:b0:60:13:f2:ed:ae:1b:37:90:73:bc:b6:3d:26:
         04:61:3b:5d:5f:55:86:d9:7e:fe:29:33:ec:0e:f6:8d:1f:a6:
         c2:20:68:8d:a3:de:af:f5:a9:04:00:39:98:21:36:2f:cf:b3:
         a8:fc:0f:4d:c6:db:af:16:04:ac:0c:32:0c:ea:97:bf:33:5c:
         c2:49:fe:c8:1b:e4:d1:d1:b7:23:18:8a:8c:d7:53:0c:29:6e:
         c2:20:ed:b1:10:b0:f5:1c:b1:ce:2c:eb:77:77:f5:2e:06:51:
         74:bb:08:a5:ed:61:75:63:21:2b:52:80:94:71:87:1e:23:c0:
         58:bc:21:02:fd:ba:45:0b:40:e5:fd:7a:9d:80:cd:db:bc:06:
         ff:da:06:36:b9:78:33:c5:fd:46:8e:31:45:d7:4b:ee:ed:81:
         7d:e8:b0:6e:e6:b2:79:b2:fa:7d:88:5d:92:ba:58:1f:93:92:
         00:15:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 18:02:44 2025 by rpki-client