Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa
File:                     1f7d990c-09db-355a-a9de-5d66f6acd83c.roa (raw, json)
Hash identifier:          eQQSWJ0P2eGkdaDZmVibnKgfXR+wFsNznmKHCxC5xW4=
Subject key identifier:   6F:D9:08:F6:8F:2A:8B:0F:E8:97:A8:0A:0F:5F:4B:75:0E:07:D4:75
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584B0CDC088CD889A40AEB80CD80
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     63344
IP address blocks:        206.180.20.0/23 maxlen: 24
                          206.180.32.0/24 maxlen: 24
                          206.180.34.0/24 maxlen: 24
                          206.180.44.0/24 maxlen: 24
                          206.180.46.0/24 maxlen: 24
                          206.180.47.0/24 maxlen: 24
                          206.180.48.0/24 maxlen: 24
                          206.180.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:08:8c:d8:89:a4:0a:eb:80:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=318ab593-5343-4c78-b006-645e92c9c89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:7d:ca:a5:95:4f:68:e2:cb:7a:8c:1a:86:
                    c2:31:0c:00:c1:4a:6c:2b:2f:2a:a7:8e:c1:2e:7f:
                    92:20:0b:99:53:61:04:67:91:e5:ae:ad:a1:c4:63:
                    f4:b0:76:d0:ce:2c:71:0c:20:33:fa:2b:c7:69:40:
                    6d:0c:8f:2a:f4:fb:a1:e6:93:4a:02:2c:b3:7f:cd:
                    bf:28:2e:80:6f:99:a9:55:15:35:37:ae:9f:78:2b:
                    61:2c:ad:97:03:ef:f1:10:20:62:96:78:19:77:ce:
                    dd:6a:30:58:dd:5a:5a:01:1b:01:72:6a:bf:55:9a:
                    b3:29:59:c8:85:48:82:09:f2:76:a4:f0:05:c6:ae:
                    04:56:3c:10:ba:33:88:ff:9f:d1:b8:ac:90:6b:d4:
                    71:a3:98:a7:97:c7:04:97:5c:e7:0b:ba:1d:90:4a:
                    69:da:1c:ad:7a:78:c5:b0:db:a9:0c:12:32:77:37:
                    ec:94:6f:b5:9a:ba:90:e3:c1:22:b3:37:51:2a:f3:
                    7a:c1:40:54:30:e8:f4:10:f9:a8:b0:61:e2:5d:d6:
                    0b:ef:11:1a:b8:7b:6e:ce:0f:e9:26:05:60:55:50:
                    f2:9f:0f:75:8b:3e:48:bd:e3:bd:dc:c2:72:d5:34:
                    57:ea:1d:2a:09:d1:bc:ec:db:5b:72:db:fd:05:be:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D9:08:F6:8F:2A:8B:0F:E8:97:A8:0A:0F:5F:4B:75:0E:07:D4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/1f7d990c-09db-355a-a9de-5d66f6acd83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.20.0/23
                  206.180.32.0/24
                  206.180.34.0/24
                  206.180.44.0/24
                  206.180.46.0-206.180.48.255
                  206.180.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6f:c5:31:94:51:21:50:df:31:17:71:d0:84:cc:52:d5:41:
         83:26:43:e9:50:f7:21:b0:cc:95:eb:98:eb:9a:a1:e9:1a:38:
         2e:66:6f:b0:92:3c:93:31:e2:db:89:54:c6:ca:fa:5c:04:38:
         9d:d6:90:8a:30:9a:a8:80:a6:e4:09:66:39:a3:9c:f0:08:44:
         4d:80:e9:65:d2:18:22:9c:d1:28:c4:c0:dd:53:56:50:52:2e:
         ee:55:1b:eb:9e:8f:fd:02:39:18:21:8b:a0:5e:fc:e9:43:9c:
         44:02:97:a3:f9:08:93:3f:03:a8:5f:72:9c:ca:eb:27:00:7e:
         7d:52:77:69:f5:07:81:46:dc:34:cf:4f:aa:c8:37:0a:36:25:
         ed:9d:c1:00:b8:05:66:c9:89:a0:bf:45:a3:83:23:2a:64:78:
         d6:89:bd:c5:50:07:1d:a6:aa:ce:14:80:83:cb:47:8a:28:a4:
         5c:bd:f0:88:78:7e:51:dd:ed:e3:22:35:2f:34:6b:ef:6a:5a:
         23:88:bd:5e:7b:3d:ed:31:bb:1a:34:d3:e2:0e:df:47:44:0e:
         d0:c2:37:2c:64:89:bf:4f:f2:88:6f:cd:e2:fc:25:7f:76:2b:
         79:91:35:d3:07:9f:8b:73:29:e7:fd:8d:39:5c:28:f6:dd:cb:
         42:ca:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:58:10 2025 by rpki-client