Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/93d1e0b3-0ee8-303b-9f86-8b72bb08f53e.roa
File:                     93d1e0b3-0ee8-303b-9f86-8b72bb08f53e.roa (raw, json)
Hash identifier:          u4nw0EddF/sP+Lu4jo45lKwKIAz3H4/M7twR5GKqJAA=
Subject key identifier:   AC:EE:D6:93:B7:41:36:67:A3:8B:5C:FF:2E:39:DF:46:B6:3A:FA:FA
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584AECC14E53B1BA596D3E1D8180
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/93d1e0b3-0ee8-303b-9f86-8b72bb08f53e.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     26744
IP address blocks:        206.180.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:4e:53:b1:ba:59:6d:3e:1d:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=95baf31a-9800-4b22-be50-9011e36f3273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:a2:d2:f6:3e:39:11:29:e6:e9:38:0a:de:
                    3a:4e:13:b8:de:fd:f7:3b:0e:4e:83:96:be:b1:7a:
                    c6:63:8b:b4:8d:37:7e:2f:e9:bf:d6:21:96:b6:07:
                    0a:64:78:da:36:c0:0d:85:85:5e:54:48:3d:1b:91:
                    78:f4:42:8f:e8:66:b2:d3:df:c6:f6:71:61:68:89:
                    25:4c:d1:72:18:c9:78:3e:ee:be:35:41:03:e9:a7:
                    21:04:60:41:04:93:ff:b5:3e:c8:53:95:f6:6f:89:
                    f7:65:bc:1b:a7:af:0e:75:c3:6e:df:ae:25:04:c7:
                    86:e0:78:5a:46:09:9a:e9:1d:29:d8:8a:b0:18:d7:
                    f1:b5:7e:e7:49:50:2e:98:e9:36:f7:c2:a6:8b:00:
                    97:13:fd:28:4c:d3:47:a3:e5:82:27:8c:c6:73:ea:
                    73:68:54:02:41:62:d8:28:48:b9:d4:c3:b8:b3:b2:
                    bd:6e:f2:fc:57:1b:a9:ea:ee:27:f4:4e:3d:55:06:
                    93:52:43:77:2f:e0:7c:d5:96:92:8b:3f:b3:d9:56:
                    b5:fe:5b:55:7c:75:88:89:ba:96:96:ec:ee:4f:16:
                    68:c6:13:56:5a:61:35:55:f7:cf:e7:21:6c:dd:16:
                    8c:b3:7c:5a:ae:a4:c8:8f:f8:9c:bc:52:13:52:fb:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EE:D6:93:B7:41:36:67:A3:8B:5C:FF:2E:39:DF:46:B6:3A:FA:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/93d1e0b3-0ee8-303b-9f86-8b72bb08f53e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:0f:19:bc:b3:a7:9f:4f:d8:9e:2c:a0:1b:ce:b0:a9:e2:
         33:af:0b:da:14:c2:c5:aa:65:0f:f9:0a:bb:ee:2e:7c:ca:09:
         01:68:46:97:19:da:73:f2:d9:9f:69:83:15:ac:11:86:1c:31:
         fb:bc:cd:f7:8b:7e:01:d8:6d:20:54:bc:fe:2c:f9:dc:0f:8a:
         79:b1:58:51:33:27:98:3e:ac:d2:ab:8f:25:7f:a5:bd:e8:69:
         a3:47:65:65:ab:97:37:92:76:3f:5e:d6:b6:3c:6b:37:2f:6d:
         a8:38:ae:76:23:38:71:95:f7:15:d9:4d:35:de:0f:ef:04:a9:
         c2:92:53:67:f0:fa:23:ea:64:cb:ef:30:af:bf:cf:f1:ac:db:
         1a:04:f4:a5:af:52:6f:50:e8:b2:9b:3a:44:6b:d0:1f:54:c9:
         9a:29:22:b1:f3:2a:92:f5:ff:d3:59:2f:38:f9:45:b6:d2:2d:
         02:14:0d:5b:38:c8:2a:79:ba:b0:ce:3d:2e:b6:a6:2d:2d:59:
         bd:8c:22:6a:b0:f2:63:d3:28:9b:26:56:f8:e4:2e:07:7c:bd:
         25:e2:55:33:90:61:ef:fe:b8:10:8e:0a:bb:ea:10:7f:2c:fd:
         24:6f:60:01:11:c2:ab:38:a3:0b:0f:00:12:ac:7d:64:2c:ca:
         49:bf:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:47:28 2025 by rpki-client