Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ace1335e-d7fe-323f-81ea-e643998328db.roa
File:                     ace1335e-d7fe-323f-81ea-e643998328db.roa (raw, json)
Hash identifier:          RZyNZqPid09fsPZlPyBLu6ibGyyVnv2gWrmGZd/QIi4=
Subject key identifier:   F3:90:5D:91:96:4B:29:73:DC:24:C9:D0:E1:71:6C:8E:D0:32:BD:0A
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584AE1F7C259109D41DADFA1A100
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ace1335e-d7fe-323f-81ea-e643998328db.roa
Signing time:             Sun 17 Aug 2025 04:16:51 +0000
ROA not before:           Sun 17 Aug 2025 04:16:51 +0000
ROA not after:            Sat 15 Nov 2025 05:16:51 +0000
asID:                     6922
IP address blocks:        206.76.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:f7:c2:59:10:9d:41:da:df:a1:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Aug 17 04:16:51 2025 GMT
            Not After : Nov 15 05:16:51 2025 GMT
        Subject: CN=99adc7e6-38be-4c28-967d-7b02d3f44f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:bf:bc:70:e7:f2:0b:d3:fc:5f:98:4b:03:
                    64:4b:8f:92:e6:14:42:33:5c:23:2e:7b:c2:bf:ac:
                    14:d0:a3:5d:91:29:75:fe:a6:c1:a5:c3:18:9e:3f:
                    11:0e:f6:ca:5b:fd:5c:7b:1d:e3:8e:a0:a4:b0:2b:
                    2f:ec:4e:88:1d:b8:4b:7f:68:cd:f6:b6:91:e1:ad:
                    2a:ee:4c:30:d6:3d:31:96:5d:c2:ca:b4:84:a0:4f:
                    a1:59:ce:04:73:91:6e:a0:ed:62:0d:23:5b:7e:a8:
                    6b:ba:57:bb:ac:e7:fb:e3:e6:32:85:bc:cd:9c:3f:
                    4f:c3:3f:00:24:34:fc:7f:e3:de:2c:94:26:4d:c0:
                    11:c6:9b:5f:9c:6c:62:e0:37:1e:7f:92:03:b1:b9:
                    39:1c:c2:99:0f:8e:80:08:4d:51:1c:f0:be:8c:b2:
                    ea:0f:be:ee:87:55:3c:af:fd:c3:16:38:a0:90:22:
                    67:36:c5:fc:86:1d:f8:c5:57:4a:fb:3e:8e:e9:9e:
                    a9:4e:b4:91:c4:12:63:a6:97:d8:ab:db:60:cb:5a:
                    57:2c:4a:44:ed:8b:25:8c:97:04:b0:23:92:1f:07:
                    26:ff:59:32:04:e2:bd:bb:b3:7a:5b:c7:a3:a8:91:
                    a7:29:e5:fd:1d:80:6c:db:3f:c9:a9:d1:b3:3b:44:
                    6a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:90:5D:91:96:4B:29:73:DC:24:C9:D0:E1:71:6C:8E:D0:32:BD:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ace1335e-d7fe-323f-81ea-e643998328db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.76.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:52:25:53:a5:68:54:b0:31:a0:45:81:20:0b:22:2c:6c:4b:
         75:85:43:ad:46:d8:86:9b:8a:00:02:97:78:e2:9a:2e:8f:62:
         3e:19:90:d5:08:b3:ea:79:ae:50:18:d8:b9:d0:da:e8:3a:83:
         f4:c1:a3:de:47:5d:f6:44:67:dd:25:30:fe:d9:14:9b:46:14:
         0a:82:82:7d:94:e0:80:96:c5:29:74:15:83:2f:de:ab:7a:de:
         ae:58:23:25:6a:9e:b2:9b:e6:46:86:17:13:70:e8:2c:0c:17:
         73:b4:ac:25:1f:85:3d:e0:e1:c1:12:56:81:8a:96:67:45:42:
         4a:ab:ef:87:a8:5c:93:50:fc:02:94:a2:c5:4a:82:1b:16:9e:
         2a:8e:f8:ca:bf:1a:9c:0b:10:2f:9e:b5:82:cd:6f:e6:20:bc:
         3c:ae:75:43:42:fc:7d:87:27:eb:17:73:05:26:b5:10:a2:75:
         e6:00:b1:ad:c7:71:ca:b5:82:1b:f1:99:5f:89:42:68:d2:e6:
         e0:6e:61:b1:d3:4a:e6:0c:6d:2c:52:2c:a0:b8:76:c3:cf:ba:
         23:6b:a3:af:4c:08:6b:93:af:29:c9:2b:2b:56:93:72:33:fe:
         d1:21:69:36:97:44:f5:a8:a0:aa:2b:47:03:75:58:05:3f:85:
         2e:3a:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:48 2025 by rpki-client