Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/704a74c7-336e-377a-9e26-aad1722f6ce4.roa
File:                     704a74c7-336e-377a-9e26-aad1722f6ce4.roa (raw, json)
Hash identifier:          OlTM/wyvFIK6nU/r9QhXC8BpwYv26ZlX1aGsP3OXvxw=
Subject key identifier:   31:89:A5:91:F6:90:71:9B:56:7A:E7:4A:D8:5F:AC:67:C1:3C:B7:24
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584AC016549A57B7F4C88ECBE780
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/704a74c7-336e-377a-9e26-aad1722f6ce4.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     22709
IP address blocks:        206.195.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:54:9a:57:b7:f4:c8:8e:cb:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=89d7561c-69b8-4c45-b895-e4f08358e0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:55:30:60:8b:de:32:c0:49:fc:8b:1a:17:
                    6f:e3:b9:79:9f:9d:a9:ac:bf:d6:79:d6:17:2f:6a:
                    ca:f3:99:04:00:f1:cb:04:43:c0:f4:f7:89:57:10:
                    f3:91:72:89:76:d4:db:d9:99:7d:b3:14:f0:60:37:
                    2f:ce:e0:8a:4b:35:0f:a9:81:7b:83:cc:73:79:69:
                    bf:9a:0a:34:8c:ca:2e:39:3c:3b:b4:c3:9c:81:13:
                    d4:29:a5:75:eb:e3:e3:12:82:43:85:b9:3f:4c:22:
                    ad:96:53:7f:98:6d:67:1e:7d:84:2f:e5:a2:98:9c:
                    5b:38:f6:5d:b4:e9:23:16:42:4c:6b:88:73:58:d5:
                    83:4d:d5:ea:25:82:96:63:8d:3e:e0:77:46:5a:32:
                    6e:fa:c4:20:a3:09:80:52:42:10:2f:e1:ef:d8:9b:
                    48:db:cc:99:86:bf:bc:11:3c:c7:af:1f:5e:77:0b:
                    6c:7c:cf:b5:1c:d0:be:28:2b:3d:da:ee:42:08:b2:
                    96:00:af:ca:24:68:a9:7a:7a:54:f9:bb:b8:86:6a:
                    f7:fe:25:04:b9:5e:26:78:8f:6b:fc:e2:c9:92:64:
                    f2:a6:df:0d:09:dc:47:20:17:c5:95:18:5c:8d:2b:
                    91:36:f2:53:52:05:13:d6:68:4f:37:bc:07:68:95:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:89:A5:91:F6:90:71:9B:56:7A:E7:4A:D8:5F:AC:67:C1:3C:B7:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/704a74c7-336e-377a-9e26-aad1722f6ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c7:37:48:4b:9a:65:e1:30:62:be:7b:a6:19:ef:cb:55:a6:
         ef:5a:24:b9:67:d2:17:75:dd:bc:ab:3a:a7:15:9a:68:f4:d3:
         ef:b5:b3:6c:2a:2c:53:58:e0:c2:bc:b3:1c:00:c3:80:79:20:
         d1:f2:52:07:fc:d8:f7:91:8f:cc:0e:98:0e:12:a1:6c:0c:df:
         52:44:b0:1c:f9:c6:1d:66:1c:60:39:1a:0d:ae:40:b2:3e:c4:
         e0:f4:6e:67:9e:d2:1d:09:2b:a3:3f:68:d9:0b:92:3d:55:db:
         6c:75:f4:cb:b6:ec:db:36:49:f1:9c:b6:48:cf:a6:5a:1f:a6:
         e1:8f:71:50:19:2b:c1:49:d0:09:91:24:c4:7a:cb:b7:89:15:
         65:6a:d7:0e:6c:37:a7:dd:db:c1:11:87:82:b8:37:95:50:32:
         8b:9d:7a:52:08:eb:28:12:3e:fc:cc:4e:7a:50:ca:eb:f5:63:
         1e:64:4e:6a:36:31:73:72:44:a8:9f:af:57:8a:c5:83:c5:b1:
         35:55:74:4a:79:f2:7d:e8:bd:5a:ee:e3:28:04:dc:c6:5b:7d:
         1e:4a:f1:15:e6:6e:8f:ee:ff:7f:61:af:ec:fd:f6:14:e6:55:
         ae:e0:ff:86:0c:d6:24:98:99:17:6e:b4:96:bc:35:0e:43:94:
         3b:c6:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:52:29 2025 by rpki-client