Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ddb7af71-6de7-3c34-a135-9f6b2682ca8f.roa
File:                     ddb7af71-6de7-3c34-a135-9f6b2682ca8f.roa (raw, json)
Hash identifier:          wnx794Dd0JEGBo1d1sxiWcNOyN0m18iJRcJF5uNyFAA=
Subject key identifier:   35:49:E0:23:9A:F5:90:9B:67:3E:86:2B:A3:9D:D6:1F:E8:1C:53:62
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A3CE0287A9BFCD2D0DA601620
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ddb7af71-6de7-3c34-a135-9f6b2682ca8f.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     22652
IP address blocks:        206.41.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:28:7a:9b:fc:d2:d0:da:60:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=dd521aaa-6f1d-413f-8238-a91d8e1b544c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8a:78:d5:6b:4f:73:cb:85:e8:26:88:9e:12:
                    ca:a0:17:f8:83:b8:0c:d0:93:14:b7:fc:76:20:7f:
                    a0:1a:65:b7:1a:f7:2c:25:5f:e9:38:a0:a4:89:fb:
                    a3:83:f5:de:ce:07:80:c4:96:21:dd:9e:ef:94:25:
                    87:18:8a:75:50:83:ed:2b:b6:da:36:34:8d:69:1f:
                    a0:35:61:fd:62:6d:1c:39:af:64:14:b8:a3:91:e7:
                    ff:25:b8:d1:31:af:1b:71:a8:ac:84:a5:59:3b:b7:
                    96:4d:2c:53:2e:a4:1f:7a:29:ad:2d:44:8f:25:e1:
                    ed:4a:26:73:1e:5f:cf:eb:a5:88:c2:47:e6:b3:d0:
                    6b:ff:d4:55:cb:2c:22:e9:f5:5f:8d:ad:ea:b6:05:
                    52:38:8d:3a:b6:47:3e:53:14:78:f4:ec:b5:3b:33:
                    6c:28:1f:53:f6:59:61:84:c0:35:20:30:1f:2a:99:
                    6f:ec:98:59:22:5e:40:5d:60:a8:cd:37:ca:4d:c8:
                    5c:b6:0f:23:cb:24:11:15:20:f8:59:b7:70:7b:51:
                    7f:45:a5:9e:28:a7:07:90:81:78:53:8f:25:aa:80:
                    0a:28:dd:01:c7:e6:bc:6d:37:c9:e0:74:47:7e:a5:
                    06:ea:40:f1:9e:a3:ec:99:bf:9b:84:f0:50:6b:c2:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:49:E0:23:9A:F5:90:9B:67:3E:86:2B:A3:9D:D6:1F:E8:1C:53:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ddb7af71-6de7-3c34-a135-9f6b2682ca8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:36:18:78:41:d5:51:ab:74:30:c8:fd:92:b8:a6:9f:11:
         76:4b:20:cc:71:e2:60:06:c6:04:ec:37:eb:44:80:f9:eb:71:
         f3:2b:71:63:89:90:04:da:7e:40:20:80:3b:5d:3b:f6:54:7b:
         b5:c4:7e:22:1e:35:99:e5:89:02:d0:91:9b:ef:49:00:e8:cb:
         46:9a:56:2a:d3:80:dd:4a:a7:45:35:c5:aa:96:75:96:8f:b2:
         3e:00:69:5d:e9:95:89:21:c1:16:57:79:25:42:79:bd:1c:28:
         08:cc:76:ab:eb:18:e8:de:83:cd:a8:82:80:d5:ea:6b:78:53:
         e1:07:45:2d:bb:ea:3a:a6:05:9d:52:9a:27:71:e3:18:86:2f:
         63:a9:b6:51:d2:93:ff:20:b6:e0:10:78:77:4b:27:98:1b:d8:
         36:ab:6d:a6:61:cd:50:8e:46:c4:bf:06:1d:c5:ed:09:74:a6:
         27:99:77:1b:f7:3c:ac:c4:38:0c:da:50:cd:b9:30:69:bf:56:
         30:4d:39:08:4b:0b:a1:82:e3:c2:58:8b:a1:20:99:d9:a6:a3:
         47:12:a6:24:f2:dc:07:64:49:bb:6c:76:cc:1d:48:41:da:a9:
         f8:dc:e6:48:e3:86:7b:34:d6:59:f9:5f:af:c4:92:42:c9:59:
         40:f7:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:26:31 2025 by rpki-client