Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/04618b8f-20b2-3b80-a30c-472df62f2bb0.roa
File:                     04618b8f-20b2-3b80-a30c-472df62f2bb0.roa (raw, json)
Hash identifier:          vxeSPbeV0GtXB8jXRCMLHhc8UrnuLFcGE2Lz4w1iYRU=
Subject key identifier:   26:B4:C9:98:AC:8F:1B:0C:AC:FF:3A:9E:12:FF:EE:6C:BD:4A:87:AB
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584AECC13C675CD9C0DCBBA22F00
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/04618b8f-20b2-3b80-a30c-472df62f2bb0.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     26744
IP address blocks:        206.180.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:3c:67:5c:d9:c0:dc:bb:a2:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=b5cda4d2-b6ab-4b27-88a4-2fccf8fe3617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:71:88:c5:3f:1b:66:a8:3c:ac:bb:e9:a8:
                    dc:40:9b:53:b6:5c:10:70:3b:28:14:56:52:9b:db:
                    55:18:3a:77:c6:be:39:6f:63:e4:e3:c5:57:fe:48:
                    c5:b4:a4:07:02:42:df:ec:4d:08:62:99:90:c0:b1:
                    27:16:54:a5:ec:30:96:eb:33:c8:76:c5:e6:f6:6a:
                    70:cf:25:bf:bc:71:b5:78:16:a2:00:d7:80:28:56:
                    88:c5:18:4c:2e:a0:5f:39:28:45:2b:f5:4f:dc:f2:
                    bf:3c:57:ae:2a:97:96:8f:45:6f:1e:e1:fe:c9:dd:
                    ec:25:30:cd:f9:82:11:41:d0:36:86:72:64:45:02:
                    a3:51:fe:66:09:fd:9e:c3:c4:31:5f:ec:e9:03:05:
                    cc:c5:a0:2d:24:f4:ba:b7:98:36:9b:02:a4:df:39:
                    c0:bc:76:f6:e5:41:4e:4e:86:1b:73:de:4b:a3:9d:
                    1c:0c:4b:64:f7:e4:42:ff:c9:73:58:89:fa:21:b8:
                    16:83:b7:c8:73:53:1a:aa:ef:05:22:85:4a:2c:b6:
                    84:b0:c3:46:31:8a:23:64:5b:85:36:57:16:2d:6c:
                    19:4f:10:b9:bb:71:e9:9e:e4:19:c9:e4:bc:af:8a:
                    77:1c:21:d2:cf:70:f5:b3:92:4c:d8:e1:94:77:71:
                    ff:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:C9:98:AC:8F:1B:0C:AC:FF:3A:9E:12:FF:EE:6C:BD:4A:87:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/04618b8f-20b2-3b80-a30c-472df62f2bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:9a:86:9e:d6:86:a4:ae:d8:34:be:db:e9:bb:2b:30:16:
         b0:2c:45:2f:95:97:6c:5d:85:dd:68:d3:35:96:ce:64:ee:a6:
         ef:94:43:0f:f1:2b:69:51:13:59:d5:5c:57:67:09:dc:3f:02:
         d0:75:c3:0a:cb:5f:ab:85:9d:ca:7b:41:fe:ef:cf:42:68:95:
         9e:ab:a0:cc:48:b3:2b:fd:1f:3f:07:31:1b:33:86:c4:e1:4c:
         50:b1:09:be:a0:ff:a1:76:e8:50:25:c9:16:ef:e8:61:fd:e2:
         9d:3a:e3:4d:7e:ab:9e:1e:f6:2d:93:d7:09:2b:86:77:5a:59:
         98:58:79:ed:0a:67:d5:c2:66:e5:f2:91:98:0e:f2:85:38:35:
         b5:34:f4:fe:0c:0c:18:ee:82:41:90:21:4b:37:e9:1c:3e:c3:
         e8:0b:8c:1d:47:74:a9:4f:17:a4:88:3f:f9:f2:ed:f4:98:aa:
         ec:ab:fb:d5:68:f5:34:93:6a:d0:ae:5e:5c:15:bc:43:7d:a0:
         73:49:c1:32:4e:c4:2d:32:a6:f9:15:78:fc:fa:8a:f3:00:8a:
         73:fb:7a:cb:c8:0b:d1:2d:da:e4:d7:d7:5e:cb:01:c4:d0:91:
         64:92:e3:52:fe:6f:c9:8a:06:e0:8c:ac:15:dd:f5:fa:c7:bf:
         47:c5:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:25:05 2025 by rpki-client