Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa
File:                     0296df01-a208-3212-875e-64b1e80b1100.roa (raw, json)
Hash identifier:          MliGdZxpNaGxTkmaOum62P8r+3l5S1fNAiDpEJK8UmA=
Subject key identifier:   47:F1:D8:D9:F7:49:E7:B0:DE:E0:45:7A:A0:0E:16:B6:89:38:4A:98
Certificate issuer:       /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
Certificate serial:       010D0C9F4328584A682609874FCFD796DEC33D80
Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     11718
IP address blocks:        206.57.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:09:87:4f:cf:d7:96:de:c3:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=baf5a2b7-2211-4b52-85e6-469102cf71e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:2f:90:9b:d0:ba:67:c2:92:05:f1:ee:bc:
                    45:83:3e:45:6e:a7:69:a9:ce:bd:bd:42:18:ae:9c:
                    4e:c5:16:8d:ed:ad:11:ea:83:53:97:33:81:6a:23:
                    3f:fe:6b:78:86:c2:8a:66:70:43:6c:66:88:de:ac:
                    00:f9:de:93:05:5c:bb:3f:1b:36:e6:61:9d:05:e5:
                    1a:a3:12:2e:67:35:5a:13:36:f8:5d:62:20:3c:cc:
                    f4:16:a5:11:43:b5:87:ee:5b:55:30:5e:cb:b3:9a:
                    6c:75:86:ca:a6:f9:74:2e:f4:d9:56:70:83:2b:32:
                    a1:8e:2e:8d:7d:e7:8f:bd:46:ec:b0:42:1a:d1:f5:
                    85:a0:c8:9f:00:ae:9d:52:fe:a2:8f:a0:c8:67:6f:
                    ca:15:f8:41:02:69:27:70:69:b0:91:a5:82:e3:c8:
                    bc:ae:22:59:84:1d:9b:4f:71:1b:4e:53:f5:f3:cb:
                    26:dc:2a:c3:86:d4:6d:46:e6:ae:58:01:27:91:a5:
                    fa:f1:84:b2:96:cb:b1:de:74:e0:31:8b:a1:c7:48:
                    16:5f:b6:f1:ae:83:b9:52:ef:be:e1:2f:6f:ea:0f:
                    a9:50:db:df:64:59:a7:ca:1f:6e:ac:43:b6:8b:3b:
                    7a:24:b4:8f:30:0d:a2:e4:02:27:24:0e:48:93:de:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F1:D8:D9:F7:49:E7:B0:DE:E0:45:7A:A0:0E:16:B6:89:38:4A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl

            X509v3 Authority Key Identifier:
                keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.57.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:11:9e:ca:6d:d2:75:4f:ad:25:54:89:a7:15:b9:6f:9e:
         ac:06:f1:fd:d8:1d:5d:d7:7d:bd:79:f6:25:75:2b:e6:d5:d8:
         d3:4c:3f:d3:8b:2f:39:3b:75:42:d0:12:8b:15:52:47:89:f2:
         5d:3b:27:d8:27:a7:8c:6e:6e:1f:bc:a6:8d:22:b0:3c:7b:99:
         79:ca:87:46:cf:fb:13:3a:c6:8e:f2:77:67:cb:ed:f8:86:af:
         ac:08:30:6f:97:e2:b6:d7:78:27:01:de:99:ec:1a:c2:3b:ad:
         7f:16:c0:db:7f:b4:2f:d5:0c:d7:88:43:ca:b9:00:62:af:0e:
         91:5d:c2:64:69:78:2b:60:3b:6e:62:31:9d:0a:fd:2c:38:d2:
         43:48:b3:f2:07:20:8c:ea:58:61:d6:c6:8b:b2:0e:16:8a:fa:
         4a:66:86:4f:ce:d3:2f:65:6a:83:20:4b:52:25:df:8c:88:7a:
         93:83:bc:d3:0a:4d:e5:68:3d:6f:14:a0:1a:cd:e0:3d:db:b6:
         e7:88:cb:55:ca:c8:cf:ee:e2:61:b1:5c:75:2a:dc:db:97:82:
         a1:1a:15:d1:0d:1d:14:12:2b:a6:60:39:6c:96:66:e9:df:ba:
         62:aa:b1:8d:bc:ad:73:89:4b:3a:c5:8c:cf:f4:d7:ed:18:da:
         ba:15:e8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:51:09 2025 by rpki-client