Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa
File:                     d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa (raw, json)
Hash identifier:          9WjqUAqQw8ZR+ArxP1fOFJGtp7y/B9WoR6HgcmxDQrs=
Subject key identifier:   B4:96:1E:A7:3F:89:6A:70:94:21:A2:9F:E4:B8:7D:EA:1F:B5:0C:C8
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584AECC13BC6E7658C84E1F5C700
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     393740
IP address blocks:        206.180.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:3b:c6:e7:65:8c:84:e1:f5:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=72d6b20e-11a9-4461-9ea1-c2f3b61a422f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d9:ed:db:ee:8f:77:fa:51:4d:01:86:ec:ce:
                    40:60:bc:9a:de:9a:86:cc:2d:34:84:a5:b6:26:f6:
                    12:50:e9:0f:33:35:a5:6a:b1:1b:28:6c:f2:e0:71:
                    89:ee:ea:22:ff:f8:7c:3e:2f:db:f9:e6:16:9a:b6:
                    01:c0:b7:b4:92:02:d8:18:42:b0:53:60:a7:ad:a3:
                    07:f5:66:b4:93:04:d1:e9:08:a3:81:7c:22:c0:87:
                    18:ad:11:10:15:55:4a:6d:f4:ef:c7:4b:38:ec:7a:
                    8e:16:2d:76:d8:54:ca:63:f8:d2:8b:bd:08:ec:0e:
                    1a:77:19:27:b0:51:ed:b2:43:80:4e:20:ea:e5:b6:
                    e1:77:89:ea:2d:72:13:c5:4d:04:e8:30:06:6e:07:
                    fa:df:c1:ce:d7:4a:50:11:aa:cb:ba:5c:8f:3d:5c:
                    d7:1f:85:2a:c0:9e:e0:48:ca:8f:1f:09:49:2f:eb:
                    21:70:d0:e3:c6:23:e0:00:d5:9d:13:eb:ff:cb:5d:
                    c1:d2:ee:cf:47:26:4e:77:cf:2a:13:25:ed:2f:b0:
                    29:87:2b:50:72:6e:78:c7:0d:cf:cd:95:63:06:87:
                    cb:93:1f:3e:80:11:53:5f:38:7a:47:a8:cf:9f:1a:
                    ba:ea:8a:06:cb:5a:8c:ca:03:2c:ad:5b:37:82:1a:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:96:1E:A7:3F:89:6A:70:94:21:A2:9F:E4:B8:7D:EA:1F:B5:0C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d08be9f7-10a8-3b17-8ee4-3bac02c49038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c4:f8:22:3f:a8:5f:53:e5:ea:43:04:ed:d5:1f:b5:95:35:
         01:33:7f:03:23:59:dd:6c:51:a5:24:5f:3e:81:f4:76:07:2f:
         8a:87:1c:72:ab:b2:fb:2d:cf:67:ad:98:28:e5:97:30:35:45:
         79:3c:31:5d:6c:c7:b2:20:6b:c2:ca:42:c8:d1:c9:b4:51:6f:
         7e:8b:14:5b:3d:94:21:20:eb:bb:2a:fd:0e:a3:74:0d:21:88:
         f9:c1:be:6b:45:8b:ab:97:10:44:d1:5b:0c:d3:ab:3c:21:ac:
         6e:f3:bf:b3:c6:6a:b3:6c:02:15:52:f4:66:a3:38:2c:c0:ea:
         8a:8b:0c:84:45:4e:85:93:6d:67:86:96:0e:d6:5b:44:17:08:
         9f:b1:c3:d5:90:f1:a6:cc:0a:10:d3:d6:2b:10:ac:72:37:ce:
         2c:6d:57:05:5f:92:04:e8:d2:84:92:cd:df:b8:68:21:22:65:
         a1:1f:e4:81:8a:98:d1:cd:ce:cc:b7:f6:95:9c:c9:22:c6:ef:
         c1:8f:96:a0:fd:c7:80:b9:2c:08:f2:74:f7:ff:61:a3:f8:cb:
         fa:d1:7d:ff:24:40:d1:6e:4c:7d:ac:a5:fc:f0:23:5d:3f:10:
         f5:e6:9c:30:b1:2d:63:dd:78:f0:0f:40:21:04:00:03:7b:11:
         c9:7d:49:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:44:43 2025 by rpki-client