Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa
File:                     eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa (raw, json)
Hash identifier:          Mzt+G9fkS7D0gXFz5ZD4HTXe0G0ha4PG6FkKdBfeYbI=
Subject key identifier:   86:CC:79:DE:19:08:76:2D:7D:8F:7E:84:CF:2E:FB:FB:45:2C:75:5B
Certificate issuer:       /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Certificate serial:       010D0C9F4328584AA85BAF37105552EB7A733780
Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     0
IP address blocks:        206.197.187.0/24 maxlen: 24
                          2001:504:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:af:37:10:55:52:eb:7a:73:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=f347afa2-9451-4514-8d01-e791602ed214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:74:16:dc:ea:b4:81:ba:84:e1:ae:4d:ad:
                    33:4e:11:df:78:3e:75:f4:97:b5:ee:b8:b3:d0:e2:
                    eb:37:41:d2:8c:08:dd:fb:f3:47:9f:f9:ce:0b:f0:
                    5b:bc:fb:3d:ce:82:9b:e4:64:75:63:fb:f3:16:ea:
                    1f:ec:ae:aa:96:6a:c4:26:dc:3c:c4:11:d2:27:37:
                    b3:26:eb:65:0e:ef:17:05:61:49:cd:bf:7a:15:1b:
                    d0:04:b3:0c:0b:ba:90:26:80:00:ec:8d:5f:c5:0d:
                    47:a9:3f:04:ff:d6:02:47:7d:34:72:89:71:63:bb:
                    64:99:05:9a:3b:8a:42:fe:b2:5d:fe:35:56:bc:bf:
                    08:f9:d0:5e:90:fe:7a:6a:02:eb:22:dd:fa:8c:00:
                    7f:b6:df:46:d9:f5:42:09:02:b6:ea:30:f3:34:0d:
                    8c:54:cc:59:29:c6:44:5a:57:b4:87:e5:dc:03:42:
                    6c:ee:ed:46:d1:2e:c0:61:24:f4:90:f0:2d:74:9e:
                    b3:be:c6:b9:a5:89:8d:20:9f:03:12:d8:4c:70:dc:
                    6a:2a:cb:ef:58:f4:4d:de:52:50:e1:e4:77:4c:45:
                    85:2f:cf:ce:82:00:89:1c:2f:04:77:9f:60:61:ff:
                    ed:90:09:62:a5:18:68:ad:af:31:55:a7:f8:4f:b5:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CC:79:DE:19:08:76:2D:7D:8F:7E:84:CF:2E:FB:FB:45:2C:75:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl

            X509v3 Authority Key Identifier:
                keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.187.0/24
                IPv6:
                  2001:504:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0e:8d:66:b2:bb:f5:ad:86:42:9c:57:e3:f6:81:1a:c4:c0:
         72:2b:f9:8b:cc:f5:4e:5e:9e:04:5e:fe:49:e9:7d:0f:bb:bd:
         26:9c:13:a5:38:4d:ef:83:28:bc:d7:96:f9:8d:12:34:10:bc:
         17:a4:00:d2:12:e2:86:7e:e5:ed:b0:94:eb:d4:c6:e0:8a:f8:
         ea:86:0a:c0:fa:64:1f:b9:99:9c:54:b3:06:09:e6:9d:08:1b:
         2d:f6:ab:f3:92:b3:d3:f1:e8:fb:78:19:5c:f0:62:43:9f:ad:
         93:2a:f5:a6:6d:dc:9f:c3:9d:c3:59:df:12:e0:44:6a:4e:bf:
         af:99:ef:60:69:e8:48:9d:e9:3b:50:f2:03:0a:a4:38:93:b7:
         88:ca:1c:ee:d7:8b:3f:49:bc:bd:25:4b:70:f4:e2:f7:cf:9d:
         72:bc:87:eb:c6:5b:b4:8f:86:5f:a0:b8:47:42:54:6f:76:37:
         78:bd:2c:09:0b:fb:8b:35:0a:e4:28:0c:8e:f3:a7:98:ed:91:
         6b:ce:2c:a1:46:ad:7e:87:8f:fd:da:54:99:8e:8a:06:d0:63:
         7a:7d:71:c0:8c:c8:2a:df:1c:81:cd:36:c5:c8:9a:4d:69:41:
         27:0d:84:f8:39:d7:6b:ab:26:51:56:d4:fa:35:0b:35:02:1f:
         b9:92:71:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 13:49:38 2025 by rpki-client