Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f758f614-0899-36b7-ab51-89c87eceee87.roa
File:                     f758f614-0899-36b7-ab51-89c87eceee87.roa (raw, json)
Hash identifier:          1GvhSxUtqyRibm422DgFDmG4ZURjF5oqdrm4jq01xa0=
Subject key identifier:   B4:47:48:BF:64:0C:BA:35:FB:47:E0:2D:90:C6:9B:DA:EF:B2:DB:D2
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C0565D426A57F51A845AB00
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f758f614-0899-36b7-ab51-89c87eceee87.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     393740
IP address blocks:        206.180.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:65:d4:26:a5:7f:51:a8:45:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=17240f3e-11f9-4f8f-95df-0d03b7f51a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:5f:bc:67:1f:ac:f6:b0:b2:22:47:69:5e:
                    0a:65:62:9c:9d:b5:18:a4:a2:2c:e0:b5:96:e6:ad:
                    d8:ae:a4:99:30:23:8a:ee:ef:07:6e:02:a5:cb:3a:
                    21:01:31:5a:5e:bc:ec:4b:bb:3d:52:ce:6e:00:c4:
                    47:e5:d1:05:6e:a6:66:85:ae:63:88:5a:38:57:01:
                    3f:eb:f6:37:64:92:74:61:a0:32:4c:59:6d:fe:c0:
                    54:16:46:27:00:22:87:29:ed:09:05:ee:a6:70:1d:
                    51:7a:66:b9:9c:df:c7:c7:c5:7f:61:5c:30:5c:2c:
                    ab:7c:e5:00:6d:fe:ef:b2:4b:b7:7c:1f:0f:f1:39:
                    85:c5:f0:58:05:e1:39:54:a7:16:f2:41:dd:86:ba:
                    1b:1f:35:ac:4d:cb:f3:06:0e:8d:2c:7e:3a:23:65:
                    4c:8f:d2:00:60:28:3f:0d:ee:42:fa:ad:21:e6:3e:
                    20:51:3d:27:c1:9b:3c:e7:58:23:93:28:85:fd:27:
                    64:b6:8f:26:8d:a3:40:68:06:cc:6d:c5:98:84:1b:
                    1b:da:db:d1:76:36:45:af:13:18:6e:65:ab:75:4b:
                    52:b6:43:27:21:af:07:44:c9:e4:cc:df:eb:fc:65:
                    d4:dc:8d:b9:cb:b5:9e:ab:08:7b:6a:a6:45:ef:5c:
                    39:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:47:48:BF:64:0C:BA:35:FB:47:E0:2D:90:C6:9B:DA:EF:B2:DB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f758f614-0899-36b7-ab51-89c87eceee87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:67:a0:86:61:79:cf:e4:24:0d:d0:97:d4:c3:da:23:9c:bb:
         b8:03:1f:e5:54:73:64:93:f6:0e:05:78:fd:83:d8:7b:8b:82:
         79:39:70:a3:5f:f9:1d:4a:4e:5d:7b:81:29:a9:5a:59:08:22:
         f0:50:7d:31:aa:a9:7e:ff:6a:85:e3:5a:14:f0:0c:d0:c8:44:
         8e:79:a7:7f:3f:6d:86:85:2e:67:f5:a9:a1:b1:33:7b:f9:bd:
         58:50:34:7b:d1:25:5d:79:17:d5:07:3f:2c:df:18:a7:91:92:
         8f:fe:89:13:db:19:6e:d9:75:0b:f0:28:dc:60:8d:28:96:68:
         eb:9b:11:7b:18:35:0a:8c:96:96:56:e5:3a:7f:2f:77:28:fe:
         a5:f6:35:b4:3a:70:95:36:e6:33:6f:1d:40:f4:a6:7e:9c:79:
         04:e6:4e:66:4d:f4:39:78:e5:83:92:f1:a9:94:9f:db:22:cb:
         e7:bf:27:ec:ca:29:3b:c0:fe:97:02:97:89:a8:5f:2e:d7:ee:
         e5:18:25:e3:78:a5:e3:ca:ab:99:a0:c6:86:ba:1c:c6:ed:58:
         6b:fb:a4:57:ec:bc:de:29:51:84:16:75:74:cd:5b:8a:dd:1d:
         1e:1b:48:53:97:99:a0:e4:7a:6a:80:a8:73:68:3a:ce:18:d7:
         90:1e:5c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:59:08 2025 by rpki-client