Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa
File:                     66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa (raw, json)
Hash identifier:          jdu+W3ApQGkFTdzRdVxBfomuUnkHhw7vQwKmaZa5Q8k=
Subject key identifier:   0F:54:AC:D6:3C:B0:C3:E9:AD:0B:B1:3F:84:B0:28:34:F6:3D:EE:48
Certificate issuer:       /CN=20345bca-b793-4f14-a066-8653ac933903
Certificate serial:       010D0C9F4328584A4F05D0001F65CD9A3D77BBC0
Authority key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        206.41.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:d0:00:1f:65:cd:9a:3d:77:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20345bca-b793-4f14-a066-8653ac933903
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=29100424-03ad-49e0-be67-51c6198bb5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:7c:dc:aa:2b:43:d6:ec:f5:14:c1:28:0b:
                    d2:19:3c:46:5f:c1:d0:0c:c4:86:4d:1c:ee:2a:60:
                    58:e1:79:74:e7:d4:80:63:9a:18:1c:4a:14:91:ce:
                    2a:74:5f:ae:dc:25:a2:08:47:2c:17:60:6a:05:c8:
                    c8:d9:a3:c6:c0:6b:ae:c0:7e:49:2a:b3:9c:fb:18:
                    32:46:8a:9c:24:28:14:2d:33:66:3a:2b:44:10:98:
                    0a:08:84:bc:71:fa:1f:58:d3:6f:a2:6d:77:ce:0f:
                    24:c0:73:33:e0:6d:a4:a2:dd:ab:cc:16:90:da:8b:
                    ad:38:4a:65:13:1a:7b:3f:72:93:cb:05:32:04:ac:
                    d1:63:58:a4:4c:0d:21:db:4c:6e:b2:88:85:bc:19:
                    4b:47:01:36:bc:00:c5:f7:02:92:e1:56:79:4c:a1:
                    69:64:51:fc:66:91:77:dd:83:d3:52:37:4a:f5:89:
                    dd:5d:e3:4e:5f:52:b4:5a:77:a9:ce:fc:86:5a:44:
                    fe:21:6b:75:cf:de:71:4b:69:a6:2b:8f:1b:cd:fe:
                    6e:47:53:f7:14:8e:7d:63:37:2f:ec:9a:22:83:fb:
                    9a:9d:4c:57:38:40:ed:e6:c1:fa:f5:28:9c:78:77:
                    90:53:8a:a6:17:87:88:33:2a:60:ca:1d:26:54:1e:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:AC:D6:3C:B0:C3:E9:AD:0B:B1:3F:84:B0:28:34:F6:3D:EE:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/66ad8129-478a-3a57-a4a9-3f420b58ffdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl

            X509v3 Authority Key Identifier:
                keyid:10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:be:d4:5f:11:37:d2:29:52:ca:e7:e5:51:4c:9e:74:b6:89:
         c8:70:dc:87:59:73:8c:68:3a:8a:24:a4:fe:e1:7c:37:be:ee:
         14:d5:5c:7c:a9:5a:34:7a:93:9c:e1:1b:bb:bd:fe:42:2e:30:
         59:d7:f1:41:e5:8a:d1:cb:53:0e:b1:75:15:62:32:42:78:b6:
         cc:eb:bc:c1:0e:7d:d8:aa:a8:9c:17:83:44:da:5d:a5:ee:b2:
         c8:fc:43:30:49:a9:22:5b:d2:b0:2e:5e:69:ec:fd:69:50:e9:
         4a:ce:b0:46:c3:19:4d:a9:87:f3:bf:7a:3a:83:c8:27:82:2c:
         11:72:39:f6:b1:05:ae:2e:71:53:09:77:80:69:22:63:37:aa:
         97:ef:c0:0f:46:5f:69:42:85:1c:06:d6:f7:96:47:2e:d0:97:
         eb:7b:0b:85:7e:f1:e3:b4:6b:0d:40:91:13:40:f9:ff:77:07:
         d5:e2:7a:35:1e:2c:30:07:34:66:65:26:73:16:df:c7:b1:be:
         27:2d:19:3f:8d:0d:2c:be:c7:92:4f:46:12:d3:23:82:9e:fb:
         67:8e:f9:35:02:2b:8d:2c:61:ca:66:de:20:67:54:db:76:6f:
         d8:5a:8f:22:dc:b8:af:a8:d9:4f:ba:b9:b5:cd:a5:d8:61:7e:
         ea:e5:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:20:15 2025 by rpki-client