Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8a5c3256-e6c7-3ef7-b2fa-425a65e5c4ee.roa
File:                     8a5c3256-e6c7-3ef7-b2fa-425a65e5c4ee.roa (raw, json)
Hash identifier:          bgSq3EU2vKvTSE7vTKS00r4HePkhdPdhMH4/LDODTU8=
Subject key identifier:   2F:FB:25:88:00:CF:C8:2A:B4:1A:AA:E1:4A:31:AC:59:B0:B4:2D:6E
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C05762481D6F6ACBC91FC80
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8a5c3256-e6c7-3ef7-b2fa-425a65e5c4ee.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     26744
IP address blocks:        206.180.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:76:24:81:d6:f6:ac:bc:91:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=9ca5f7e8-dfe1-406a-a2b9-56f4a0193fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:d9:c8:18:a8:e6:84:31:70:f5:38:65:5c:
                    b4:88:95:1d:b5:29:71:07:d3:b2:bc:a1:8a:63:ca:
                    e1:f5:4a:3c:d4:bb:97:9b:95:49:bf:7c:da:52:6e:
                    a6:d7:80:d7:91:a8:bc:6e:1a:58:26:1d:df:88:42:
                    fd:ce:ad:b1:91:32:e5:66:2d:22:77:6f:2d:65:ed:
                    bf:03:59:f6:b9:49:7f:46:d3:c3:d1:c5:82:78:8c:
                    d2:4f:fc:da:a1:94:59:dd:c4:23:9f:ca:6f:6c:5d:
                    5f:33:00:93:20:b2:d2:a6:ca:59:0c:20:d8:b2:98:
                    17:d2:d4:fb:07:d1:82:fb:d6:e1:01:28:d8:18:c4:
                    90:b2:50:1c:92:47:0a:2a:97:2a:10:64:1f:2e:a5:
                    85:eb:f4:5c:d1:86:4b:98:1c:08:57:af:ad:ef:41:
                    19:fd:2e:41:82:5c:17:8c:60:5d:d7:4d:4b:e5:73:
                    48:1c:7b:e1:b7:18:7e:d0:2b:74:79:8e:88:bb:d9:
                    e3:bd:d1:da:d1:fd:60:5c:7a:a9:c6:76:6a:54:e3:
                    34:d8:1c:4b:e0:52:39:d2:52:34:d7:4a:f6:46:2e:
                    69:cc:3e:e4:7c:3d:2e:53:8f:5c:eb:20:e0:6d:72:
                    fc:3e:ee:66:d8:75:0e:35:87:6c:b7:24:63:2f:e1:
                    73:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FB:25:88:00:CF:C8:2A:B4:1A:AA:E1:4A:31:AC:59:B0:B4:2D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8a5c3256-e6c7-3ef7-b2fa-425a65e5c4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:90:74:be:21:f8:04:09:6e:63:a4:2d:a4:8f:ab:6c:ec:7f:
         21:33:46:49:43:fa:5b:72:fe:85:32:21:11:0d:6b:58:21:c2:
         a2:8d:fb:36:42:0c:e0:55:4b:64:e0:c5:b2:29:f0:e0:28:5f:
         6c:34:39:27:cc:c0:b1:c2:15:c8:64:66:a4:88:53:02:a3:5d:
         08:9b:87:c3:bf:c1:24:4c:c2:de:27:51:0e:12:c2:ff:0f:af:
         a9:db:0a:64:af:fd:46:ed:21:d3:39:44:0b:ec:6b:c7:9b:e0:
         c8:c7:e2:59:23:3b:d5:ae:b9:54:bc:45:6d:14:69:2c:30:6e:
         cb:db:c0:e7:c0:b3:b8:2b:50:8c:0a:ed:ae:db:8f:bd:3e:ea:
         80:81:ea:b2:25:72:a8:5d:ce:d2:1c:62:ee:00:69:c2:4d:91:
         dd:9a:50:cb:a6:2c:b0:6e:62:da:4d:0c:66:70:d7:f0:fc:5f:
         13:39:0c:1e:5a:b0:8c:b2:33:39:5e:ca:a2:c3:7d:a9:18:b9:
         a0:9e:7d:ab:82:4f:8c:db:c6:68:97:bb:cc:c1:e5:f5:08:19:
         7b:56:6d:ff:26:4a:52:de:cf:2a:8c:92:c4:7e:97:5b:13:8a:
         16:c3:54:4a:f4:5e:e0:ef:16:73:4f:34:d6:6f:7b:e1:55:0e:
         28:51:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:51:09 2025 by rpki-client