Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/247b0d8e-9175-34f2-9bd6-4af4824ca603.roa
File:                     247b0d8e-9175-34f2-9bd6-4af4824ca603.roa (raw, json)
Hash identifier:          wYq3b9zQLQXobxU6e34yxhz/D68xkyXur8p+rt7yrpM=
Subject key identifier:   51:61:2A:8F:9E:C0:ED:B3:4A:CA:D8:B2:64:40:79:FD:FA:0E:3A:F4
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A1CC55DD82A9961BE6C51B360
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/247b0d8e-9175-34f2-9bd6-4af4824ca603.roa
Signing time:             Sat 07 Jun 2025 13:01:02 +0000
ROA not before:           Sat 07 Jun 2025 13:01:02 +0000
ROA not after:            Fri 05 Sep 2025 13:01:02 +0000
asID:                     137409
IP address blocks:        206.123.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1c:c5:5d:d8:2a:99:61:be:6c:51:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun  7 13:01:02 2025 GMT
            Not After : Sep  5 13:01:02 2025 GMT
        Subject: CN=4eeb47e8-6a8f-4f9f-a431-6dc9c00e3e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:bf:36:6d:73:70:4e:c3:33:d0:e1:2b:a7:
                    f6:44:ad:6a:62:4f:3c:5c:a5:ca:0d:13:54:d8:52:
                    cf:db:9b:ca:e6:c0:1b:73:8f:a0:ea:df:1a:81:2f:
                    fc:2e:ca:bb:6f:55:f4:d6:a5:0f:be:e6:23:8c:ff:
                    ea:f5:25:50:e5:a7:e0:b6:fa:d7:df:47:16:84:22:
                    f7:5a:3e:36:aa:22:c4:01:67:af:b2:c9:e5:94:36:
                    4e:ff:d1:ff:a6:07:54:aa:61:b3:7f:cf:8b:1c:41:
                    1f:df:af:73:38:db:f4:8a:4a:d3:30:63:97:00:9e:
                    ed:6a:df:c1:33:64:dc:f0:0d:d6:e4:93:79:4d:c6:
                    3e:1c:3d:ff:54:b9:63:22:de:6f:6d:86:79:df:da:
                    9a:67:1e:6e:56:14:43:15:b8:d3:8d:ad:0e:7e:9b:
                    fa:b5:ae:3c:73:e5:a8:99:d0:42:01:1a:90:de:60:
                    78:ad:7f:9d:a2:7c:e5:03:89:7e:8e:a6:55:b5:ca:
                    70:b0:f5:07:59:30:2a:3a:15:6c:81:1f:0e:24:01:
                    d0:1d:93:a9:0a:a1:46:00:87:38:5c:02:a6:a8:72:
                    3d:a0:a9:13:2d:e8:c1:88:d1:b2:5f:55:6a:8d:d3:
                    74:52:3e:35:42:fe:7c:c8:f1:2b:c9:d7:31:da:c5:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:61:2A:8F:9E:C0:ED:B3:4A:CA:D8:B2:64:40:79:FD:FA:0E:3A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/247b0d8e-9175-34f2-9bd6-4af4824ca603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f7:97:64:8e:22:e4:2a:2b:40:d2:e2:17:f5:bf:6e:88:43:
         3e:1b:34:2a:f9:d7:4a:14:fb:3d:de:53:29:22:29:2f:91:a7:
         ff:e0:56:ee:f5:19:cf:fb:b8:8e:01:5b:66:d7:53:17:30:a9:
         96:6f:01:29:fe:62:dd:a5:62:ca:c9:e2:d7:b2:55:fb:3f:f0:
         1f:df:1a:5c:12:2b:18:8d:d8:69:51:52:2e:0a:2b:57:fe:52:
         fe:45:45:9e:e1:e6:de:57:97:25:a5:39:9a:d8:4a:fe:a9:33:
         91:2c:7b:9e:d1:a8:a6:2a:0b:8a:ba:0a:87:ca:df:02:62:97:
         75:41:bd:99:18:79:d9:a0:d6:32:f4:70:d9:50:08:f7:70:9e:
         a0:9d:38:9b:9a:2b:c6:33:9f:7a:c7:b6:c0:b9:4b:a1:a9:89:
         a6:9b:63:b7:71:e6:43:94:34:da:56:c6:ee:a9:fa:21:39:79:
         57:e0:c4:41:61:25:97:0b:e0:81:61:a7:31:15:b6:02:ff:47:
         12:4a:ef:3c:d6:ed:d2:f7:8e:6a:13:39:1b:63:c2:d9:46:9f:
         2d:b0:a5:19:aa:12:f6:e9:71:93:4a:83:8c:2c:f0:8f:17:61:
         20:b6:9f:f9:bd:b3:c1:10:84:6f:00:aa:da:77:a4:12:3f:bd:
         5a:d5:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:25:45 2025 by rpki-client