Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1ff63424-8ecf-3772-a257-ebbf002f2540.roa
File:                     1ff63424-8ecf-3772-a257-ebbf002f2540.roa (raw, json)
Hash identifier:          nlwyZ5tfxLqipaF1JIzQ/xj01XVMHkTa4e9/c0faPno=
Subject key identifier:   38:F8:00:B9:55:B7:B4:02:4D:79:68:08:A0:02:85:7B:0E:FC:77:4D
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A03A545EEDC9DCD2F53F4B380
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1ff63424-8ecf-3772-a257-ebbf002f2540.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14061
IP address blocks:        206.81.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:45:ee:dc:9d:cd:2f:53:f4:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=ca830212-bd64-4455-a460-a786b99aae6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:0f:18:87:4f:d8:75:b5:c7:ee:f2:43:e0:
                    1a:3d:10:08:55:d5:50:49:2a:97:aa:3a:6c:33:97:
                    f8:1e:63:24:a2:bb:b3:a0:53:02:7f:3b:93:f5:88:
                    41:1c:ba:7d:c4:d5:82:60:c6:f8:bb:83:af:e4:a4:
                    a7:ad:fd:33:b4:fd:62:db:69:e6:5f:4f:c5:db:d4:
                    97:59:4d:75:47:ed:f5:b7:39:01:0c:8c:2f:42:77:
                    d4:79:73:37:c4:96:28:40:b1:9f:9e:06:d8:59:28:
                    19:0b:20:23:d6:29:44:2e:2c:22:00:92:3e:9a:d0:
                    56:de:c7:6b:b4:98:e7:41:d6:cb:0b:5d:27:94:90:
                    da:68:8f:ec:df:4d:5f:52:a6:5a:09:c1:8c:ec:09:
                    81:b1:59:f5:87:97:3a:e2:95:40:cf:13:61:e6:f4:
                    14:54:f7:8e:4a:eb:3c:64:f2:8a:e3:ff:99:98:86:
                    2d:2e:1f:3e:11:f1:13:05:4a:a1:ee:ef:b8:54:d9:
                    09:dd:e2:20:e2:09:03:a8:5e:30:7d:c8:65:e0:8f:
                    96:76:7a:c2:1e:52:fc:da:df:61:a3:e2:82:92:78:
                    53:fb:f3:b7:b6:14:4f:f1:73:b0:8d:35:e1:ec:7e:
                    b2:59:6e:02:0a:ce:f8:dc:e9:d2:24:6e:e9:f5:44:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F8:00:B9:55:B7:B4:02:4D:79:68:08:A0:02:85:7B:0E:FC:77:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1ff63424-8ecf-3772-a257-ebbf002f2540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.81.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:83:27:2b:0f:03:a7:c6:2b:9e:0d:40:09:f2:31:3d:ce:14:
         f4:b5:4a:9d:01:c3:ba:ab:5c:68:13:16:51:5f:2b:97:67:4e:
         ee:2e:e7:3f:13:b0:00:bc:83:80:80:86:48:ac:29:c4:82:1b:
         37:4a:8e:de:b8:bb:b2:d5:d5:19:20:b1:2d:43:48:af:48:3f:
         f4:fc:57:0a:5b:aa:7f:3a:42:65:d7:8b:00:16:5e:f6:2b:65:
         68:aa:e4:aa:42:9e:56:e4:e2:e6:3d:39:06:71:d2:37:7a:7d:
         8b:2e:6e:98:c5:c3:43:d5:34:39:8f:96:8d:1c:3b:5f:eb:0b:
         95:ca:0a:13:ee:82:30:3c:f3:7c:73:4a:80:a2:98:4f:00:94:
         41:04:2c:6e:f8:b3:c3:e9:dd:18:a8:b8:68:75:63:81:0c:e8:
         ad:a2:04:9a:36:10:3a:b1:84:d6:b4:07:04:dd:6a:df:16:76:
         03:84:2b:c5:6b:53:89:b6:e9:3f:96:e4:26:86:7b:a8:67:de:
         df:64:fe:eb:3a:cc:2c:19:18:8f:36:95:dd:f3:17:44:dd:bb:
         a2:78:0f:27:b0:72:f1:5c:b4:48:8f:af:c0:73:96:c2:ba:78:
         8c:f9:49:aa:3d:e5:27:2c:42:3d:dc:a5:73:aa:e8:0c:5e:73:
         7e:0b:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:56:18 2025 by rpki-client