Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/9c484b2e-8516-360c-aa0e-470700f97633.roa
File:                     9c484b2e-8516-360c-aa0e-470700f97633.roa (raw, json)
Hash identifier:          EMVjD5+gBB2ENcDh1TIHW7CivDYuhnc5gNyQ9TTrrOY=
Subject key identifier:   E1:5B:A6:36:5E:A3:70:60:A2:97:5C:C4:52:38:1B:6B:C0:F5:3C:20
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C0575474EE036F5ADEBCEE0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/9c484b2e-8516-360c-aa0e-470700f97633.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     26744
IP address blocks:        206.180.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:75:47:4e:e0:36:f5:ad:eb:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=32606b38-dc28-4157-9d2c-bebb78a09f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:ac:5f:47:9a:4c:e2:d3:e2:98:de:df:14:
                    6a:08:ec:17:7a:66:67:ce:f3:3f:12:12:5d:61:98:
                    25:95:b7:5d:79:67:d2:da:96:93:8f:83:ad:cb:f1:
                    50:47:fc:d0:e4:35:84:2c:8b:27:92:53:a9:80:db:
                    24:5e:a5:ca:ad:a3:4e:61:88:ab:2e:6d:db:e7:af:
                    18:49:c0:bf:23:3c:93:f9:bc:fc:e9:37:1d:df:b0:
                    17:cc:19:c6:38:5b:81:cf:51:1f:48:9a:70:1a:2f:
                    99:45:d9:ba:01:63:72:85:9a:75:b9:05:8b:b1:37:
                    07:a8:77:b8:2d:59:8f:a0:1c:4b:20:a4:71:43:36:
                    19:c3:14:d7:a9:b7:5f:06:77:58:6d:3d:51:28:ee:
                    06:36:48:fb:b5:e7:6d:e4:ba:36:99:a6:95:a7:71:
                    15:10:66:26:88:08:cb:db:0f:c1:d6:56:42:95:7c:
                    b6:46:a3:a6:19:2c:d4:a9:f6:9d:ba:f8:14:eb:18:
                    a0:bc:9a:0e:2a:6d:a9:14:73:ac:14:15:cf:32:49:
                    af:f4:d8:a5:f3:fc:35:2c:79:5d:c1:86:46:8f:29:
                    fa:fe:ee:d2:db:9a:30:65:fc:b7:68:fd:80:28:de:
                    9d:0d:c4:dd:54:48:86:61:b5:fb:47:93:e2:f9:63:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5B:A6:36:5E:A3:70:60:A2:97:5C:C4:52:38:1B:6B:C0:F5:3C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/9c484b2e-8516-360c-aa0e-470700f97633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:38:2e:60:64:fb:14:7c:84:3b:56:c9:1b:cd:6c:f8:26:40:
         4c:e3:09:76:7e:c7:b3:00:db:09:d0:bf:91:a4:56:c5:26:74:
         92:37:39:20:28:3f:0e:fa:83:b5:ce:98:d9:2c:d7:b1:1c:16:
         0f:3c:ed:84:06:dc:50:33:9d:8d:53:53:3f:d6:de:76:a7:06:
         dd:c9:ad:85:98:da:10:02:e1:32:52:6d:22:7a:9d:39:58:87:
         f7:e9:07:9b:9a:e2:a8:6d:27:c6:b4:f5:f9:48:66:d9:e4:ce:
         f3:f5:d2:07:28:4e:f0:cc:f6:5a:c0:7e:57:1a:fd:1d:6e:0e:
         a0:e9:34:b6:1d:7c:07:d3:4e:97:93:4d:1b:f5:2f:c2:c2:28:
         b7:7f:b1:ee:af:ba:b4:67:e3:29:96:0b:57:04:f4:58:45:6a:
         96:36:5c:0d:04:13:e7:08:5f:b2:90:ac:75:bc:16:8a:d6:a9:
         df:36:8a:86:68:31:47:a9:37:05:1a:d5:d7:47:b5:77:0e:ab:
         6b:cd:b1:b8:17:6c:ba:bf:48:41:78:62:d6:13:bc:f4:87:03:
         39:f0:c1:df:ca:ac:77:4d:24:8b:b4:04:1c:bd:e1:40:e5:02:
         79:81:33:ed:a5:88:da:f1:eb:e6:b0:d8:e7:88:81:ad:b5:42:
         33:49:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:02:07 2025 by rpki-client