Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa
File:                     34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa (raw, json)
Hash identifier:          9M5uFB/OiIr0ntGcBvHEaZRfgP5yffdNb/umgVpjnFc=
Subject key identifier:   41:57:3D:22:B2:5E:A9:6D:64:E8:64:31:14:44:A8:D6:17:70:C9:16
Certificate issuer:       /CN=06adc51b-95f4-44e9-bf6d-3f9a3950feee
Certificate serial:       010D0C9F4328584A5FC5E849C8FE9D8EA979C1C0
Authority key identifier: D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     40690
IP address blocks:        162.251.207.0/24 maxlen: 24
                          2602:fa25::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e8:49:c8:fe:9d:8e:a9:79:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06adc51b-95f4-44e9-bf6d-3f9a3950feee
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=8a92b41b-3320-429b-915a-88374563fd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:f0:f7:98:6b:71:65:58:a7:1d:dd:18:26:
                    62:28:de:f8:1b:32:8b:7b:77:2a:35:eb:6f:c2:6d:
                    c3:d9:08:08:3b:f3:23:a8:e8:76:45:fc:41:23:96:
                    ba:de:08:9a:ff:51:3a:48:04:e0:29:88:b7:cd:d1:
                    45:35:38:96:f7:64:80:ba:87:a7:2a:99:5b:33:b1:
                    b1:a5:4e:54:06:b5:af:e6:59:39:c9:b8:88:16:c7:
                    35:4e:1c:fd:1b:cf:31:22:00:0b:ac:b0:65:13:8d:
                    a8:d8:1b:86:63:11:ed:bd:f7:38:93:03:63:e5:70:
                    f9:5e:56:05:d8:3f:f9:8b:e2:30:1f:b7:50:85:16:
                    35:c7:d0:6b:81:31:b2:26:12:fa:ff:0a:e1:33:6c:
                    54:6b:f6:b3:fe:01:9f:db:31:22:56:43:65:e0:f3:
                    9f:cd:5b:55:00:cb:de:db:01:5a:a9:dc:57:f0:6e:
                    b0:06:ae:4e:83:ac:30:ac:11:48:6e:76:3d:2c:58:
                    7c:c0:ca:81:0c:71:bf:7f:81:45:e9:29:93:a3:6d:
                    92:2e:a9:8d:88:9f:ba:c4:2d:07:81:48:40:fc:58:
                    17:0c:9f:12:aa:1a:48:1e:07:45:62:fc:40:a0:be:
                    bf:29:f1:2d:d7:52:7c:65:2a:1f:b2:7c:22:20:1d:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:57:3D:22:B2:5E:A9:6D:64:E8:64:31:14:44:A8:D6:17:70:C9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.crl

            X509v3 Authority Key Identifier:
                keyid:D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.207.0/24
                IPv6:
                  2602:fa25::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:25:54:75:95:f5:5d:8d:c1:63:08:e4:24:e2:d7:46:66:49:
         29:c5:b3:1e:8b:83:7e:13:b6:93:eb:f5:51:41:50:dd:a2:dc:
         17:cc:f1:5a:d6:83:27:ae:06:73:92:f7:05:36:2b:ce:2d:d9:
         30:a0:d0:84:f6:29:95:1c:83:32:5d:b7:e8:88:32:02:28:3b:
         5a:8a:2d:27:41:25:e7:6c:89:51:40:4c:cc:6c:ad:d5:34:c8:
         01:42:fa:82:e8:0a:cb:6a:05:f2:94:66:e4:ab:83:25:9b:31:
         14:3e:ac:9f:eb:12:1c:19:12:18:e9:df:46:1b:71:39:48:6d:
         38:dc:79:dc:48:d7:a6:e4:ba:f7:9f:94:90:c8:f5:e0:80:b3:
         5f:40:25:58:82:38:19:10:b8:64:86:04:ff:cb:39:3e:98:35:
         45:c7:43:89:9d:ff:84:63:02:c7:f7:d9:34:39:fd:4f:f7:14:
         ea:d2:71:a7:dc:27:c9:82:25:00:63:a7:d9:a9:91:b2:f3:5b:
         57:07:7f:9b:a4:19:c0:6a:92:bb:2f:02:b0:9a:c2:1f:9d:3a:
         e8:bf:94:c9:0f:ee:08:01:c4:24:46:96:9f:e4:fe:ce:db:d1:
         81:5d:6d:b5:d1:57:6f:e0:68:a4:76:45:4c:b1:c8:9c:c6:6e:
         06:dc:9d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:58:33 2025 by rpki-client