Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/4206828a-08cf-3ab8-8041-7bebab088add.roa
File:                     4206828a-08cf-3ab8-8041-7bebab088add.roa (raw, json)
Hash identifier:          0CKNFWzbkJTTEP7XZdGN2wTAsbgigKdJsEEfpAIZ8+Y=
Subject key identifier:   3B:EA:DB:2F:1F:F1:89:D8:D4:61:B6:73:8D:61:6B:50:32:CE:70:6E
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584A74B5D064033A7842B80AC680
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/4206828a-08cf-3ab8-8041-7bebab088add.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     138699
IP address blocks:        71.18.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d0:64:03:3a:78:42:b8:0a:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=035aebfa-fb96-4384-a742-1b95f98c3fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:d9:6e:50:d9:f0:11:73:b4:23:21:d9:8d:
                    bf:a2:8b:90:6b:b6:9c:10:fd:d4:f7:b3:4c:5b:1e:
                    5a:e2:af:3d:8a:41:5e:45:33:e2:5f:28:f5:30:16:
                    ac:61:61:8d:f6:e0:09:ba:db:53:5c:0d:7f:7a:9d:
                    d9:05:66:1a:ca:df:52:d0:7f:d4:33:5c:50:26:a4:
                    3e:98:1b:ba:c8:3b:74:0b:82:6a:1b:6a:ef:ca:02:
                    24:ff:44:99:8f:78:51:30:ad:64:0b:bf:d9:c7:64:
                    e4:cb:6e:9d:49:ed:6c:ab:a5:0e:84:12:45:45:2a:
                    6b:d1:1a:6a:3f:1e:b7:9a:b9:f7:66:74:ba:b3:9c:
                    e5:3a:43:dc:cb:ab:58:32:9c:0f:b2:95:c2:f1:cc:
                    71:b3:8f:b2:07:43:d1:df:1b:a8:f5:10:c8:c1:fa:
                    f5:00:c5:b6:24:de:8a:75:c3:71:d8:65:10:5b:e0:
                    0a:e5:ca:7b:ea:54:5b:18:8a:40:43:e3:14:e3:cd:
                    d1:7d:3a:f5:c5:19:bc:d3:b0:1e:32:86:e8:e1:b1:
                    fe:ab:b6:74:f9:55:6f:20:79:6a:c9:13:8e:c1:84:
                    9b:22:22:00:6a:3b:97:84:b1:63:17:3f:c3:4b:d4:
                    e1:01:05:ea:69:24:2f:a0:4a:0f:78:a0:3b:0a:0e:
                    df:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EA:DB:2F:1F:F1:89:D8:D4:61:B6:73:8D:61:6B:50:32:CE:70:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/4206828a-08cf-3ab8-8041-7bebab088add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:36:75:3a:e4:8f:b0:d4:e3:37:60:63:14:d9:eb:54:12:12:
         d9:0a:d0:90:22:6f:34:f0:4d:7b:93:20:3d:96:9d:9a:38:0c:
         af:0e:1e:8d:47:35:1f:f1:fb:ef:c4:7e:87:88:e7:2d:26:47:
         b4:d9:b5:e7:0e:01:64:2c:5e:c2:19:ff:1a:2f:b7:ec:96:17:
         da:02:ef:22:ef:73:8f:55:84:7c:3b:0b:9a:12:cc:1c:f7:d1:
         e4:76:79:cc:78:28:8c:f9:ff:31:e8:2c:8c:1a:f1:1d:9e:f6:
         8e:2b:f2:af:96:e6:56:49:17:66:8b:10:5e:ce:b9:ac:10:36:
         1c:54:87:b5:fd:fb:7f:13:4d:80:e7:d5:f3:c7:ea:8c:c0:54:
         82:45:89:d5:ce:6f:4c:c2:8e:c6:a7:52:44:a6:2a:ee:2f:83:
         7c:e0:9b:f0:49:8b:5a:99:24:42:51:a0:df:fb:40:da:fe:86:
         68:8f:71:2f:ab:f6:6c:61:97:c8:74:5c:8f:13:b6:c6:a5:80:
         4d:df:eb:f5:3e:0c:5f:49:9d:e0:29:ac:cd:a3:d1:26:da:06:
         d7:bd:48:b8:5e:33:90:33:14:72:dd:b6:cf:a7:d6:24:e1:f2:
         09:c6:33:b1:5e:b6:19:24:f3:08:43:11:4c:6a:04:f0:3d:dd:
         6f:d2:66:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:04:40 2025 by rpki-client