Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa
File:                     2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa (raw, json)
Hash identifier:          PufXO2SGXZgfqy25fK37GZcO4NxcuDyE85fbmzLW048=
Subject key identifier:   86:CA:21:61:C9:A6:72:25:05:EF:ED:9A:08:36:F3:FD:64:4B:26:D6
Certificate issuer:       /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
Certificate serial:       010D0C9F4328584A3CE0298BD71683EF63D8DB80
Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     53486
IP address blocks:        209.35.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:29:8b:d7:16:83:ef:63:d8:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=b022e27d-83a7-4a9a-a79a-0097529e989a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:3d:6a:65:9d:81:43:23:bc:58:e9:a0:7b:
                    22:43:ac:64:be:19:d5:52:40:f3:d3:17:d9:13:49:
                    a0:e6:0d:c1:da:3e:6b:50:a8:7f:2f:09:be:ad:b5:
                    0b:ae:5d:85:e0:02:47:59:8f:22:8e:34:72:93:af:
                    db:6c:e2:86:f9:d1:27:6a:96:29:8b:17:59:8d:10:
                    dc:c7:ee:b2:74:c6:c7:1c:0e:c6:1a:94:44:b8:cc:
                    22:43:5e:9c:cd:bf:d0:f8:79:ce:30:8d:b0:4c:67:
                    a2:7b:1c:64:ff:7b:9e:6c:0d:02:bd:70:5c:3e:6f:
                    5e:34:b2:6b:8d:19:8b:45:4e:b8:3e:9d:14:08:90:
                    0b:1f:25:e8:74:58:0b:81:b8:d8:c6:fa:88:29:33:
                    95:5c:9b:37:9b:64:73:1e:3c:d2:d6:77:74:20:3e:
                    08:a4:43:dd:e1:2b:86:91:b8:7a:f9:2c:a1:d1:9f:
                    1f:54:0e:2f:9d:ef:a6:4a:da:9a:de:59:25:68:06:
                    83:3d:6c:94:52:ee:60:4a:06:90:ac:60:89:e2:cf:
                    6a:af:f7:c5:4a:d5:93:c9:2e:69:80:03:1f:95:4c:
                    ef:db:4c:89:0e:95:c6:6a:a0:30:14:f7:71:de:4d:
                    66:35:a4:d9:f8:bf:aa:d2:39:68:5e:db:36:d2:cd:
                    f1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CA:21:61:C9:A6:72:25:05:EF:ED:9A:08:36:F3:FD:64:4B:26:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:0f:67:3f:27:ee:0e:ad:5a:c4:0c:27:f4:4b:63:28:00:69:
         32:a8:88:98:28:43:34:40:94:f8:2c:24:6c:dd:02:bf:1e:7f:
         ed:2c:d0:04:d6:45:d7:8a:40:7b:a5:fe:3f:2e:42:66:ff:4e:
         c7:5e:13:ee:1e:fa:45:fd:bf:53:e6:61:b4:17:fe:a8:e3:dd:
         b6:9f:6b:44:66:a0:2c:4b:0c:42:e8:67:66:a5:e7:f8:8a:71:
         f4:8c:4e:3a:ba:d7:5f:6f:ca:d3:ea:3e:16:8d:bb:9b:48:f1:
         20:88:ad:74:da:7b:dd:f8:70:46:b1:53:c6:c6:33:21:92:86:
         99:2c:ff:42:ab:04:4a:a2:5e:da:11:e8:94:87:87:f9:16:e2:
         12:65:3c:d6:78:c1:7f:0f:14:d7:91:5a:b7:21:2f:c5:a9:e2:
         55:cf:54:d5:c3:24:00:35:00:03:45:11:ce:42:3b:4b:5f:71:
         9f:0d:4d:64:82:0f:c4:dc:44:8c:1e:db:f5:b0:30:59:c3:88:
         ff:78:3c:46:63:91:58:60:93:c8:1c:72:b9:92:fc:34:05:41:
         95:2f:5e:34:2e:3a:55:9d:2c:ed:87:f3:3d:0d:11:9f:60:f3:
         ff:56:94:df:a3:ec:17:83:78:e8:e3:67:50:94:5f:dc:5f:2e:
         fe:f1:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:49:01 2025 by rpki-client