Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f1a9f909-9923-393f-b1bd-f91f3cf77ca5.roa
File:                     f1a9f909-9923-393f-b1bd-f91f3cf77ca5.roa (raw, json)
Hash identifier:          mbbcoryG21l/B91vkvwQV76ZxX0uYuSASAT8AEFYegY=
Subject key identifier:   20:A8:4D:E6:B7:24:70:EE:8E:A3:E3:7F:4C:29:E6:30:28:52:CF:5C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A49FF7A28174DC54B5551DDC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f1a9f909-9923-393f-b1bd-f91f3cf77ca5.roa
Signing time:             Mon 23 Jun 2025 17:49:32 +0000
ROA not before:           Mon 23 Jun 2025 17:49:32 +0000
ROA not after:            Sun 21 Sep 2025 17:49:32 +0000
asID:                     15290
IP address blocks:        206.191.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:ff:7a:28:17:4d:c5:4b:55:51:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 17:49:32 2025 GMT
            Not After : Sep 21 17:49:32 2025 GMT
        Subject: CN=cd065580-c22a-4204-afa3-542ff4d468c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2a:70:18:6c:36:38:89:05:8c:fd:02:c8:58:
                    44:b4:da:ce:19:f1:0b:d8:de:6d:32:23:ce:b5:e7:
                    b2:dc:28:05:cb:db:b8:d7:fc:80:b9:da:b8:3e:38:
                    d9:90:56:a0:5c:28:90:9e:d4:e3:7d:af:74:fe:88:
                    b6:20:f9:e7:a5:bb:3c:e8:8e:bb:19:a9:da:74:32:
                    93:16:f5:65:f6:e7:7a:51:79:ce:19:0a:2f:b6:4d:
                    ff:66:db:1f:b1:c5:9e:27:26:0b:a0:28:5a:7b:a6:
                    76:5a:45:e2:8d:1c:db:d2:44:22:78:20:be:a6:1b:
                    2f:37:f8:ab:c8:04:8f:22:78:e6:ea:66:9d:a9:fc:
                    bb:80:fb:35:87:f1:39:c2:7b:9b:8c:20:16:30:bc:
                    01:2c:01:43:a5:3e:5c:7f:35:18:74:c5:c5:b8:16:
                    03:77:6d:e4:a1:95:e8:e0:32:98:02:16:52:13:cd:
                    73:17:f0:f6:7a:f3:71:5c:22:3a:71:38:68:44:7a:
                    82:f1:bf:34:7e:e6:ef:56:aa:56:e7:74:e8:5c:ef:
                    bd:e3:a1:0f:f4:90:5e:4c:be:5e:ca:74:83:b0:64:
                    cc:9c:f7:45:9c:95:65:0f:69:eb:ac:fa:d7:c1:4f:
                    ea:4a:a1:ba:20:29:4b:d9:e2:0f:d9:ab:02:c9:c8:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A8:4D:E6:B7:24:70:EE:8E:A3:E3:7F:4C:29:E6:30:28:52:CF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f1a9f909-9923-393f-b1bd-f91f3cf77ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5e:5b:6d:89:17:06:a7:cc:b5:4e:29:95:e4:24:b0:8b:c7:
         50:2e:dd:13:9a:e5:22:28:86:cd:bd:f9:92:5a:4f:41:a5:b5:
         3e:e9:c7:c0:30:52:42:79:99:75:ac:1d:d7:0d:3b:eb:16:d9:
         85:a4:87:0e:66:24:6c:4e:93:79:1a:c3:81:3c:65:a7:5b:d2:
         07:df:39:eb:9d:16:65:1b:03:89:4e:20:99:a2:35:c7:9b:c7:
         98:fb:3c:75:e3:b5:17:76:42:1b:b6:0e:ed:d1:eb:47:e3:18:
         52:09:ca:7c:eb:a6:89:c9:de:a9:f3:29:13:48:a5:f1:dc:df:
         fe:5b:0b:63:87:65:0d:ce:5f:57:06:24:dd:1d:61:81:18:ec:
         a0:bb:80:d6:57:75:85:c5:c7:4f:cb:ad:19:d1:19:48:44:36:
         c7:12:c7:d2:85:4a:49:ed:5e:21:d3:a6:7e:bc:27:6d:43:17:
         b1:c5:4a:ed:ef:0b:1e:b1:0b:a4:02:02:8f:cf:c0:3e:f8:e8:
         97:29:85:40:02:07:e1:b0:82:3d:d2:28:01:28:68:2f:01:b4:
         5d:31:19:ac:6b:11:1c:62:a1:48:eb:6e:55:9a:89:54:43:52:
         fb:7e:a0:a6:e5:e4:8d:62:e6:58:f0:16:0f:8d:b7:d7:75:27:
         b3:f1:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:21:15 2025 by rpki-client