Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa
File:                     da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa (raw, json)
Hash identifier:          2WJYcSNjHUF6VAAcmgeany7Govxim2hx53cWZ+lc4Q0=
Subject key identifier:   DF:93:07:3F:CD:98:D8:1E:83:27:93:C1:E4:40:8F:D0:A6:8B:D5:AE
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C0565C35BA2AA90999E5900
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     393740
IP address blocks:        206.180.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:65:c3:5b:a2:aa:90:99:9e:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=ffa5c884-ef5a-4b03-a010-69257f2dec8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:d4:eb:b9:89:86:cd:2b:88:e6:f1:6b:14:
                    b3:7b:48:8c:b4:8b:e5:ba:99:89:02:de:6e:0e:37:
                    d8:65:8a:cb:61:e5:85:4f:b6:f7:5c:0a:45:25:7d:
                    83:9e:d8:3f:83:e9:70:8a:a4:b7:55:1a:45:26:d5:
                    af:80:3b:cc:38:ec:02:f8:79:de:f3:da:de:1e:ca:
                    5c:eb:04:28:1b:0d:dd:bf:17:05:b9:7f:68:53:25:
                    ea:77:f9:6e:0e:5b:8a:46:f1:38:8d:e8:b8:e3:05:
                    2e:e7:2f:77:da:48:72:49:c0:86:f3:a7:aa:e0:65:
                    e5:3e:32:a0:26:d4:44:31:12:f2:dd:4d:ac:dd:cb:
                    b9:2d:29:41:0a:ce:27:d1:53:ac:8f:01:81:0e:8f:
                    40:b1:9c:f9:b0:16:57:39:68:40:39:86:e8:3b:75:
                    27:8b:00:81:14:95:4c:23:36:cb:1d:66:7d:f4:75:
                    ad:78:cb:7b:47:36:6b:06:e3:fc:60:65:49:ca:dd:
                    93:5e:52:24:64:79:74:b2:ad:0d:59:c2:5a:06:60:
                    b4:e6:df:bc:ca:f2:b1:12:c2:0b:c1:70:38:25:39:
                    ac:dd:a5:67:2b:0a:bf:ae:8f:53:aa:e8:2e:5e:69:
                    8d:68:81:45:6e:c4:de:62:7f:58:b6:87:06:b4:54:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:93:07:3F:CD:98:D8:1E:83:27:93:C1:E4:40:8F:D0:A6:8B:D5:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:16:ba:f9:ba:64:74:b5:6f:ea:95:46:6c:17:6f:23:90:
         4e:d1:c4:22:b5:ed:ba:43:f1:a1:97:2a:09:9b:1f:ee:f9:f3:
         74:3b:3d:a5:a3:a0:71:d4:5f:a4:8e:5f:ae:e0:6a:17:26:83:
         48:bd:f3:6e:ed:91:78:b1:e1:8e:26:ab:82:51:94:15:01:36:
         2b:7f:1b:a4:de:6e:d0:52:ad:ef:a7:53:3e:14:f9:ce:3f:a5:
         f2:6d:73:6b:40:c8:3d:eb:1e:1b:07:01:af:be:19:a0:a9:b3:
         85:ae:b3:41:b2:57:27:5c:cf:dd:fc:17:b6:01:82:ff:30:01:
         41:97:73:54:2c:03:34:8d:0b:21:ad:cc:fc:3f:a4:76:65:c1:
         67:d4:e0:20:51:ff:19:d4:c5:e1:df:41:00:28:99:f3:f3:d6:
         67:e3:00:ea:9f:f9:cf:77:cc:80:46:12:33:6c:b0:b9:02:0b:
         b1:db:58:36:78:31:25:8c:11:8f:a5:c3:b2:73:f7:55:e9:07:
         00:88:87:f1:89:18:e6:a5:1e:5f:5b:ba:49:d0:03:4e:37:59:
         02:b8:59:c4:c6:7a:5a:21:4b:39:6d:fe:cd:61:2a:5e:64:f5:
         80:8c:ee:f8:85:84:15:08:9c:f6:08:2b:50:74:3d:5b:41:3f:
         68:31:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:52:32 2025 by rpki-client