Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/c71d851d-85d3-3172-9960-2bfd64241ff0.roa
File:                     c71d851d-85d3-3172-9960-2bfd64241ff0.roa (raw, json)
Hash identifier:          yVUZ+eoRqQh3051RHzSAhOxU3IPCh17sGOUQfaKte54=
Subject key identifier:   CF:A0:D9:77:16:C4:0C:F6:4A:31:C4:DA:5E:58:5E:88:62:6A:38:87
Certificate issuer:       /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Certificate serial:       010D0C9F4328584A2ABAEB6BD18C9835CC62B900
Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/c71d851d-85d3-3172-9960-2bfd64241ff0.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     14866
IP address blocks:        206.126.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:eb:6b:d1:8c:98:35:cc:62:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=2d4d547c-2b45-462d-afe0-b21d0c856b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:5f:a8:a7:41:87:83:46:c6:61:7f:73:a4:
                    85:33:f6:38:b5:28:37:da:f9:e0:5e:93:d3:b1:8f:
                    09:3f:46:39:2c:1c:23:bd:5e:ca:5c:e7:85:ab:f9:
                    a9:d8:bd:94:7d:55:1d:ea:fa:90:dc:c0:9b:77:79:
                    ff:01:e0:d1:56:1f:e0:24:27:10:13:9a:b5:79:0b:
                    e2:1e:71:7a:3b:d2:0d:24:15:f6:46:85:a7:af:20:
                    61:d3:52:0e:18:ff:3d:ed:f5:b4:fe:ce:87:61:03:
                    df:d3:4f:03:4f:c0:f2:79:e3:35:5f:40:30:ce:b1:
                    7c:66:5f:3a:3b:9d:de:b3:8b:20:5f:f0:3b:f4:79:
                    8e:ad:b9:f5:9f:1f:76:76:58:05:84:40:c2:14:d3:
                    88:a9:26:99:1c:30:6f:49:08:fd:80:e1:4e:e9:64:
                    67:d4:a1:63:82:0d:20:92:c9:8c:0f:f8:0f:ce:07:
                    58:3e:6d:a9:66:b1:15:b9:b0:04:5b:cb:2c:56:62:
                    42:f1:9a:15:fa:7b:05:b6:fc:b2:8e:c4:5c:0f:a3:
                    96:78:c8:78:a3:98:25:61:fa:17:79:72:64:5a:bf:
                    fc:bc:94:15:2b:81:93:7f:e4:46:51:d6:a4:30:d7:
                    f1:76:b7:83:e1:cd:c6:9d:5d:b3:6b:87:06:42:b4:
                    18:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A0:D9:77:16:C4:0C:F6:4A:31:C4:DA:5E:58:5E:88:62:6A:38:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/c71d851d-85d3-3172-9960-2bfd64241ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl

            X509v3 Authority Key Identifier:
                keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:34:85:69:28:dd:65:d4:4f:04:b6:bd:6c:e5:80:2f:e1:
         1e:7a:66:92:2f:34:ef:c4:be:10:e2:02:89:2e:d7:ca:49:eb:
         58:af:44:70:75:ae:06:27:ac:25:1b:70:74:a8:09:9f:13:20:
         e5:19:72:ad:d6:3a:c9:83:e6:03:da:93:13:23:6f:9f:ca:f0:
         73:36:17:6b:e1:35:f8:21:82:e7:bc:4e:81:cc:49:2e:b7:78:
         0d:35:7f:a8:14:e8:be:03:bd:79:15:bd:47:0d:b3:4c:42:17:
         7d:b3:c2:5d:d5:85:1b:68:dc:f6:a1:99:d5:b9:02:40:2e:7b:
         ee:cb:0f:9f:23:f4:18:44:40:0c:92:33:f3:40:e5:49:e3:15:
         4e:16:8b:f6:b2:56:a2:42:3e:7a:34:c2:8d:8f:c6:5b:8e:ad:
         df:65:c4:e0:69:a4:8f:e4:0a:8d:11:71:fe:79:82:08:71:9e:
         f9:32:7a:e9:7f:98:d5:c4:1a:80:33:32:a7:2d:f4:b3:e0:e0:
         d2:4d:04:58:90:2f:fa:ae:9c:db:6d:7a:0d:20:54:c6:8e:09:
         6b:94:07:90:df:d9:89:58:b3:e1:7f:40:2a:c3:10:c3:38:f0:
         4e:11:10:00:ed:4e:63:cd:ba:ea:42:98:9e:ac:4e:c1:a8:16:
         45:0b:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:04:47 2025 by rpki-client