Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/6f8e9d54-f577-32db-9a19-005c71e16d5b.roa
File:                     6f8e9d54-f577-32db-9a19-005c71e16d5b.roa (raw, json)
Hash identifier:          6HhGmkcxQ1g1BtH2ecLxxlsBYw6qbOBi2Hhl0MWSpBY=
Subject key identifier:   AD:1F:41:29:E7:2C:CE:EC:5F:55:E1:38:EC:12:91:F1:BE:D2:68:F7
Certificate issuer:       /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Certificate serial:       010D0C9F4328584A3E45AA2E6D6148450366A140
Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/6f8e9d54-f577-32db-9a19-005c71e16d5b.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     46262
IP address blocks:        204.11.129.0/24 maxlen: 24
                          204.11.130.0/23 maxlen: 24
                          204.11.134.0/24 maxlen: 24
                          204.15.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:aa:2e:6d:61:48:45:03:66:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=ddbed64a-d096-4f2d-bda4-970af409637c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f8:87:7e:ed:aa:a1:c8:fb:64:d6:87:66:79:
                    aa:5b:b2:0c:77:ef:dc:19:c8:e7:4f:82:aa:f4:b9:
                    ba:0f:e1:6e:fd:74:d0:a0:de:c1:1e:f0:c0:75:46:
                    6a:1f:51:a1:97:10:40:88:fc:58:6b:dd:34:05:56:
                    e6:47:b6:b6:83:92:92:c6:f2:cb:58:62:4d:d9:20:
                    9b:23:3a:b7:d2:f3:29:b4:69:62:81:17:22:ae:e5:
                    9e:4c:66:de:26:6c:05:31:e8:ed:06:cc:f2:65:03:
                    2c:4b:1c:7c:a1:8e:11:49:cf:35:f5:07:d9:71:45:
                    15:d1:01:6e:d8:30:c8:89:02:f4:08:94:77:7f:e5:
                    31:d0:42:8a:7c:8c:5c:d3:ac:6b:e9:b3:79:92:bc:
                    80:73:07:7c:b8:d2:5d:eb:c7:4b:32:7c:fa:c7:a6:
                    c4:f6:4c:f5:74:ae:a9:13:24:1d:ed:df:f9:f6:4f:
                    2f:81:56:4e:ff:8e:1c:6d:ec:01:00:bd:e4:67:28:
                    8a:59:b4:8e:54:24:21:71:66:0e:c2:1d:e4:74:b8:
                    9f:06:8d:a5:6e:25:8a:2c:31:11:a3:08:09:b3:23:
                    f5:90:1f:91:84:fe:12:37:c0:48:5c:df:4c:2b:1d:
                    ab:28:3b:b3:67:cb:13:94:dc:56:ca:d7:4b:07:3c:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1F:41:29:E7:2C:CE:EC:5F:55:E1:38:EC:12:91:F1:BE:D2:68:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/6f8e9d54-f577-32db-9a19-005c71e16d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl

            X509v3 Authority Key Identifier:
                keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.129.0-204.11.131.255
                  204.11.134.0/24
                  204.15.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2c:65:f5:78:e2:5b:21:5d:0d:ad:27:88:ad:06:c8:e4:7a:
         31:b1:f3:7d:d3:f3:00:73:cd:d8:66:05:30:f4:5a:f4:ad:1a:
         c5:ed:7b:70:b5:a7:de:de:7e:ac:73:43:41:7b:16:25:da:87:
         e7:59:5e:a4:00:db:12:7a:0e:37:85:09:ce:cf:38:91:f7:ce:
         94:49:ea:1e:f4:a8:23:29:44:d7:98:e6:c3:12:19:56:ad:3e:
         da:77:fa:d5:00:6b:3e:1c:21:48:20:1c:5d:7f:0e:df:23:e5:
         55:60:a4:ab:36:7e:65:74:fd:86:fc:d5:6c:53:77:8c:7f:05:
         3f:05:42:12:40:6b:7b:9f:aa:11:34:7a:f7:0a:a2:a1:42:5f:
         4b:47:58:98:88:72:4d:c3:fb:48:9e:b5:bb:d3:2e:b6:ba:a9:
         e1:4a:e1:2a:b3:db:9f:27:01:7d:07:13:fd:e4:56:a4:5b:a1:
         a3:dd:0b:a4:5e:0f:72:20:93:5d:52:30:ad:f0:8c:1b:d6:3b:
         9f:5a:c8:f4:32:4b:df:2a:1e:98:30:a6:f5:5d:29:bc:03:b5:
         7a:77:99:ae:e6:da:1c:c2:35:b6:7f:9f:6a:8a:60:2f:56:99:
         61:be:66:ae:8f:2c:77:f4:95:e0:8d:02:c6:de:0a:01:4a:f7:
         ff:23:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:32:32 2025 by rpki-client