Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd7230c6-d250-39e9-a185-7a4b54b9a70b.roa
File:                     bd7230c6-d250-39e9-a185-7a4b54b9a70b.roa (raw, json)
Hash identifier:          TDuH6aorOKnju80WUX54rb3bDkuJqFEQCUhhfDHNrts=
Subject key identifier:   31:B8:7E:CB:0B:88:88:E4:98:D7:DE:F0:12:A1:75:3C:B5:AF:69:77
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA1EC539EAF0622279840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd7230c6-d250-39e9-a185-7a4b54b9a70b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397168
IP address blocks:        206.47.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a1:ec:53:9e:af:06:22:27:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=80575f15-69e3-49ea-b5fd-502d7b68ee8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:40:7d:57:e4:d2:65:9f:09:8c:2b:07:20:71:
                    04:b9:1d:dd:93:ab:fa:a5:6f:3b:89:08:b9:9e:8c:
                    00:59:d4:5d:81:39:0c:97:ee:9c:60:b9:56:0e:07:
                    61:f2:07:60:e5:89:c3:e9:ed:24:e9:11:ea:8e:c7:
                    d4:22:96:e6:ab:65:b5:d1:94:52:f6:76:b8:ef:92:
                    62:87:a2:6d:59:2f:4f:c8:d5:5f:07:6e:71:87:66:
                    2c:c8:fa:10:71:b5:cd:77:c6:eb:14:7c:89:db:4b:
                    31:bf:2b:e8:21:12:ee:aa:f7:70:60:3f:0e:73:74:
                    11:5d:d9:ff:64:70:12:db:e3:5d:8e:cb:77:70:61:
                    63:ac:cd:24:8f:70:ea:73:16:88:9d:75:d8:43:1b:
                    12:0c:1e:a2:c1:85:b3:91:06:e2:43:79:f4:b0:ad:
                    34:90:14:07:c0:b0:3e:fd:e9:f9:d5:1a:22:28:b0:
                    bd:80:6b:7a:1a:e9:b8:76:29:89:67:a6:cf:67:00:
                    7a:05:9d:8f:50:08:af:67:31:65:7c:39:1b:db:27:
                    97:90:7a:65:07:34:4d:c8:8f:c3:29:c8:e0:3e:e4:
                    ba:30:ea:44:f5:28:43:ea:f7:b3:9b:bf:1b:31:8b:
                    8c:20:89:f9:e4:37:80:e6:57:4c:02:d9:7a:1f:ff:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B8:7E:CB:0B:88:88:E4:98:D7:DE:F0:12:A1:75:3C:B5:AF:69:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd7230c6-d250-39e9-a185-7a4b54b9a70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3c:8d:07:3d:8a:cd:cb:41:f2:7f:31:dc:3a:72:57:cf:ab:
         f4:53:52:2e:63:1a:b7:5a:84:06:54:c4:64:86:ac:23:62:e3:
         e1:1f:a1:c7:1d:bf:01:47:55:0a:93:4c:ef:50:31:d2:b1:ca:
         49:1c:b9:cf:de:a5:b9:cb:8a:13:79:ca:31:c1:e7:9d:09:a9:
         d2:bd:88:33:33:47:f6:a5:23:3c:b5:64:2e:db:88:0c:0c:bc:
         a2:37:1f:b2:04:76:97:f0:07:0e:5f:2a:6b:c1:db:79:27:17:
         65:fa:15:24:e8:10:50:ab:b1:14:ef:0b:2c:43:85:7e:ad:39:
         ce:c7:e4:4e:24:d6:65:42:c2:ee:56:c9:d6:f4:c2:4f:a6:03:
         48:4a:ba:7d:f8:fb:5f:3e:78:58:3b:ad:75:cc:b9:65:a3:33:
         dd:80:7c:21:d3:fd:d1:65:e0:e8:f9:5b:61:7b:79:ab:41:18:
         32:87:17:1e:25:e4:a6:3a:51:8d:fa:89:46:c5:74:4d:0a:df:
         ec:78:30:b9:3d:09:0e:61:81:44:44:c6:51:18:47:d2:72:b6:
         87:c1:bb:ea:fd:50:76:6b:74:6a:86:d2:da:ce:4e:4f:8c:97:
         08:68:fc:11:ab:a7:e9:97:d4:1d:35:b0:8d:5d:46:2a:ab:3a:
         e7:fa:39:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:58:08 2025 by rpki-client