Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa
File:                     685237db-c4d0-36bb-974d-c4141e668c5d.roa (raw, json)
Hash identifier:          TxUV6nHXWracoSHwg6lC+NYb5/53Wji4BYrLGAVoRq8=
Subject key identifier:   45:E1:60:C3:5B:61:8C:D8:45:5E:D9:27:A5:A9:EE:F5:06:38:91:71
Certificate issuer:       /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
Certificate serial:       010D0C9F4328584A77808602A9194E83D865A880
Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     394141
IP address blocks:        206.57.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:86:02:a9:19:4e:83:d8:65:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=9ea98038-3df9-42af-b87b-2d67468023aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9b:78:3a:1a:84:80:d7:8c:d0:19:71:cf:2b:
                    50:b4:60:ca:23:85:8c:7a:a4:c2:a1:5d:0f:b0:6c:
                    b2:f8:00:ee:36:2b:a1:44:1f:bd:ad:7c:8d:d3:dc:
                    74:93:04:29:91:61:55:01:c8:57:05:d1:69:3b:5f:
                    c9:4c:01:31:02:96:76:ca:93:e6:40:ff:45:bb:d1:
                    16:5d:2c:84:eb:e3:08:d6:83:8a:72:ce:3e:1e:75:
                    3e:3a:03:82:19:ff:f0:2b:7a:8a:b2:d1:42:01:65:
                    fd:7b:b2:cf:42:9e:a5:27:52:ba:dc:e4:1a:62:d6:
                    9b:c7:09:8e:45:40:b4:b4:ba:c3:89:07:4f:48:7d:
                    f7:8c:67:3f:77:65:e2:ce:b5:a7:f3:7d:ae:ec:76:
                    6c:37:5d:eb:de:8d:f7:14:ae:00:16:02:28:8c:63:
                    a4:76:5c:d6:15:c7:70:8c:08:6e:93:4e:e8:e5:da:
                    df:6e:5e:35:52:49:fd:ed:83:ac:5c:11:94:6c:e3:
                    60:c3:ad:a8:5a:12:14:22:61:53:4f:d8:22:3b:0f:
                    4c:ca:48:54:3d:4c:78:7f:a1:6d:d3:2b:6d:78:90:
                    ad:a7:7c:99:0d:56:77:f8:1a:fc:1f:05:6a:09:cf:
                    23:e5:60:12:b0:d3:58:5c:eb:ee:6c:ae:db:2d:e7:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E1:60:C3:5B:61:8C:D8:45:5E:D9:27:A5:A9:EE:F5:06:38:91:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl

            X509v3 Authority Key Identifier:
                keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.57.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:e8:af:e0:a0:ea:86:23:dd:a9:4a:58:28:3e:12:18:17:8e:
         6e:c0:fb:f6:b0:8a:ec:5d:3f:0a:5a:89:37:54:1b:08:1b:b9:
         db:3d:be:9d:d5:f6:94:e8:d9:6c:d1:3a:2a:41:18:d7:9b:33:
         c5:06:d9:01:b3:96:d5:c1:20:88:bb:37:2b:ef:78:b9:ea:37:
         93:c7:ac:25:64:b6:cd:0f:a5:a1:b6:97:e6:8d:0c:c3:e7:07:
         05:42:cd:92:44:4e:fd:90:1e:e5:51:6d:f9:9d:c1:7e:82:5e:
         a3:f5:ec:b2:21:86:2d:96:79:fe:18:f9:0f:ad:d1:49:69:7a:
         92:8e:69:15:ed:b4:13:2b:eb:d5:29:a6:35:64:c0:f6:8d:86:
         df:7a:8e:7e:f5:34:d8:f0:32:3b:22:c6:79:3e:16:28:a1:ef:
         76:2a:a0:98:4a:ac:2b:63:d3:54:c7:82:b8:7f:4d:15:4f:80:
         27:ff:6f:9f:5c:00:dd:a1:47:d4:92:f3:e7:d8:9a:3c:a1:db:
         9d:90:f3:0c:a4:89:54:d0:43:cd:94:d4:4c:7c:9b:ce:b9:94:
         5e:94:d8:c3:71:22:fe:42:e4:d9:bc:51:80:af:aa:b5:58:8f:
         f4:5b:02:54:ec:aa:b7:3b:f3:c1:f6:7c:ac:cf:97:f0:b1:b4:
         33:ec:bd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:37:13 2025 by rpki-client