Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/05fd079c-ab7a-3b06-96d9-0546148ecf20.roa
File:                     05fd079c-ab7a-3b06-96d9-0546148ecf20.roa (raw, json)
Hash identifier:          tMlcnTGOaSIkhb6MnO5ictD5JGYcML0uzSNBSzax3ts=
Subject key identifier:   CF:40:E6:61:5F:1E:09:6A:BA:78:9E:BF:7A:B8:31:C1:40:27:B6:53
Certificate issuer:       /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f
Certificate serial:       010D0C9F4328584B170BFD79C7B22043874D2680
Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/05fd079c-ab7a-3b06-96d9-0546148ecf20.roa
Signing time:             Fri 05 Sep 2025 04:35:27 +0000
ROA not before:           Fri 05 Sep 2025 04:35:27 +0000
ROA not after:            Thu 04 Dec 2025 05:35:27 +0000
asID:                     206526
IP address blocks:        140.235.61.0/24 maxlen: 24
                          140.235.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:17:0b:fd:79:c7:b2:20:43:87:4d:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f
        Validity
            Not Before: Sep  5 04:35:27 2025 GMT
            Not After : Dec  4 05:35:27 2025 GMT
        Subject: CN=6f41c9a1-6e29-41d0-b6c1-b6c592a91b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:cd:73:bf:36:29:cf:a8:f1:8e:23:ba:f9:
                    dd:af:36:73:e0:a0:3e:7b:60:04:74:c2:d0:b7:66:
                    c1:cc:61:bc:ed:ac:88:d7:eb:b1:78:8b:74:28:36:
                    74:63:46:65:43:48:7b:d1:4f:7c:fe:60:13:2e:35:
                    08:4c:1e:b7:ff:50:c4:82:51:ef:9a:83:b3:02:8c:
                    18:7b:20:25:97:12:d3:9a:19:01:be:29:a8:46:2c:
                    3f:d6:8f:3d:73:80:5c:03:09:d0:85:c6:18:f4:02:
                    11:f2:19:4e:ca:62:e9:b4:9d:98:8d:f6:fe:31:3b:
                    08:d5:42:be:d0:b4:e3:39:2d:f0:a1:40:31:8b:ff:
                    36:74:c7:2f:1e:db:16:00:be:fe:1c:7d:04:43:61:
                    57:55:88:62:ca:7f:20:e9:aa:a5:da:6c:34:f3:39:
                    97:3b:68:ac:17:b3:86:a8:e9:b1:51:d4:ca:ca:b8:
                    7d:f3:28:be:ae:5e:44:4a:f0:8f:7e:26:66:a9:85:
                    0c:7a:38:28:7a:c4:a3:d6:b9:d5:d3:d7:4d:b1:2f:
                    eb:fa:86:13:2e:67:90:7b:d2:c0:58:2b:69:42:92:
                    96:27:7a:a1:c6:d6:98:5e:15:1c:e2:8a:f1:5c:47:
                    6f:96:92:9c:a8:d9:b5:99:61:b1:a8:92:d2:87:47:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:40:E6:61:5F:1E:09:6A:BA:78:9E:BF:7A:B8:31:C1:40:27:B6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/05fd079c-ab7a-3b06-96d9-0546148ecf20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl

            X509v3 Authority Key Identifier:
                keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.61.0-140.235.63.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:14:de:00:a1:aa:d0:c0:d8:81:b1:19:60:c9:51:60:5f:1b:
         a3:7e:8b:1b:6a:e4:f7:5c:e4:e3:11:75:64:a4:18:08:72:54:
         11:f8:e1:ca:58:0f:d4:23:a9:78:cc:4b:03:21:63:44:c2:76:
         06:d4:8b:8e:1d:cf:a2:41:08:df:d6:11:5f:96:05:90:81:14:
         df:83:65:24:86:89:e2:16:b7:35:ad:7d:22:71:8b:6d:ff:ab:
         c8:6b:09:49:3b:e7:5a:4a:43:ac:ed:b7:23:3c:54:a7:f9:8d:
         b4:87:d0:3f:d0:55:f6:a8:d7:62:41:c2:da:b0:3b:2b:22:1d:
         05:98:3d:98:e3:8b:4c:85:de:81:13:2d:6f:52:07:07:85:5f:
         10:c1:29:46:8b:b9:e8:ac:9c:74:7b:81:e8:cf:47:ee:49:fe:
         10:0a:ed:f5:a6:5c:40:dd:84:13:09:a8:06:ff:af:ba:19:68:
         62:f4:14:93:c7:84:cb:19:a4:ec:e8:b0:4a:1a:4e:9a:61:92:
         8e:02:f0:69:a4:f7:1e:78:17:78:70:33:0b:fa:fc:fb:23:23:
         f6:f3:a0:c4:a7:72:60:f4:bf:eb:ec:1b:04:68:57:1d:aa:a6:
         8c:04:77:e3:21:3d:3e:97:08:3d:c5:7b:74:66:0e:d2:c8:96:
         f5:a7:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:26:34 2025 by rpki-client