Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
File:                     d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa (raw, json)
Hash identifier:          ZZ8JAdNHkLiLyRdXPSquyb0Wb+weIsGBCVjTe/VMZ+0=
Subject key identifier:   1C:D8:06:38:E1:2A:B3:E3:74:C3:0D:F9:11:57:7C:B9:65:F4:17:DE
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584AECC14D3AE73664C94B2B5680
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     26744
IP address blocks:        206.180.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:4d:3a:e7:36:64:c9:4b:2b:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=53450c3a-6037-4683-b7e2-f1fa0f9f7e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:c5:09:fb:0b:a5:0f:06:73:90:38:fb:c0:
                    fb:d4:c7:ed:e6:8e:7c:92:d3:fc:40:c3:eb:27:89:
                    c0:ec:34:32:8d:34:d0:c6:e1:6d:6b:8d:0e:ec:a5:
                    fd:53:c0:41:26:1e:6b:d5:a7:1f:b6:e4:c6:f8:17:
                    a4:ff:cd:d7:01:63:42:1f:22:e1:fd:40:eb:93:40:
                    66:9c:e1:df:07:61:9d:d3:b3:e2:06:33:ee:15:57:
                    ac:f9:3d:b3:66:45:78:dd:b9:88:90:54:f4:0d:1b:
                    63:cb:8b:41:68:ed:74:f9:9f:3b:30:38:c3:53:7a:
                    43:33:97:92:90:ab:d3:0d:8e:41:c3:e4:23:0a:ee:
                    a9:fe:fb:a3:d7:65:8d:c7:d2:21:1b:ad:02:fe:4d:
                    dc:ce:b1:58:d1:80:07:fa:a8:eb:e2:c5:d8:57:1a:
                    42:bd:62:e5:cb:87:64:b0:7b:a2:a2:f5:36:65:51:
                    7a:ad:cf:df:d2:ae:9e:09:b8:3b:73:9d:be:35:6a:
                    42:2f:69:37:c9:f5:84:cb:f3:86:c1:96:c7:96:7f:
                    bf:9b:9d:b0:ad:cd:48:0e:46:1f:26:33:dd:fb:cd:
                    e6:4f:3c:80:bd:2a:83:87:76:6d:36:59:c8:85:25:
                    33:47:b5:7e:e8:c7:b5:17:60:c8:28:1c:e6:63:be:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D8:06:38:E1:2A:B3:E3:74:C3:0D:F9:11:57:7C:B9:65:F4:17:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:46:98:eb:fe:d0:8a:44:0d:be:5b:dd:89:09:6e:62:93:70:
         65:76:0a:90:06:51:14:f2:bd:41:12:92:04:3e:43:d6:07:f1:
         38:a3:f9:57:5f:53:46:31:88:80:aa:21:4a:95:fe:75:ac:33:
         a4:02:f2:24:5b:94:b9:56:6e:48:08:29:d8:f6:55:b3:55:40:
         76:46:89:a0:86:e4:62:99:fd:fa:ac:86:25:56:70:41:23:92:
         a2:32:ba:3f:89:a4:01:64:d9:e5:06:9a:36:1f:85:2f:c5:42:
         61:fc:04:09:f2:69:c2:bd:28:24:3c:2c:59:43:99:45:c3:d2:
         f6:73:b0:7b:2e:67:40:ab:86:08:ea:9a:e7:42:ad:4f:98:0a:
         d1:b3:d6:a0:77:0f:b4:5d:52:9c:51:35:9a:55:cf:f8:aa:d5:
         0b:18:c3:d1:60:98:cf:cf:00:3f:33:8a:01:8c:8d:05:1b:5f:
         48:9d:df:e7:f2:7b:cf:29:b9:86:2e:7f:52:22:41:f0:4e:8b:
         a3:14:6f:67:df:84:a3:df:68:83:70:b4:57:ad:52:95:5b:49:
         a5:c2:e4:a2:24:71:a6:fd:3d:3e:a5:78:13:86:bd:4e:67:85:
         82:27:e7:64:1f:51:cb:6d:c8:48:54:67:41:97:de:ae:58:24:
         10:b4:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:27:11 2025 by rpki-client