Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8f47ecbf-9278-3388-88b7-e7589fed7b06.roa
File:                     8f47ecbf-9278-3388-88b7-e7589fed7b06.roa (raw, json)
Hash identifier:          6Ksbfi80Dd+oHkbCtCJQwPA7K3vmkt9vqM0Fy1bLMNI=
Subject key identifier:   ED:82:B6:8A:23:67:D1:37:D7:0D:3E:37:0A:48:C3:3C:30:6E:CE:B5
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584AE72BBA36BFBC062865E29B14
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8f47ecbf-9278-3388-88b7-e7589fed7b06.roa
Signing time:             Tue 19 Aug 2025 01:00:32 +0000
ROA not before:           Tue 19 Aug 2025 01:00:32 +0000
ROA not after:            Mon 17 Nov 2025 02:00:32 +0000
asID:                     7029
IP address blocks:        206.245.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e7:2b:ba:36:bf:bc:06:28:65:e2:9b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Aug 19 01:00:32 2025 GMT
            Not After : Nov 17 02:00:32 2025 GMT
        Subject: CN=a2a89fa1-50ef-4b58-9418-d75497f2eacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:61:56:26:0e:b9:5e:34:65:d4:37:70:4a:
                    05:c5:e7:94:b9:15:53:c5:ef:a7:68:1d:40:59:95:
                    80:9e:a6:b5:67:7f:1f:aa:fa:2c:f5:b2:31:c2:6d:
                    a8:eb:e5:03:97:44:fb:00:4c:2a:77:81:80:a2:36:
                    27:c7:b9:11:97:80:bc:83:89:ac:a9:92:60:24:83:
                    96:ef:af:0b:86:a5:5b:58:f2:55:b9:7f:3f:e4:d3:
                    e7:94:6d:58:b8:13:e8:b4:93:63:a3:fa:dc:bf:2c:
                    2e:0c:7c:73:96:14:c3:00:dd:a1:f4:00:92:fc:d2:
                    bf:9e:a1:31:18:e6:15:8c:bc:1f:bd:5f:6b:59:2a:
                    2c:b4:52:83:26:17:a4:24:2c:aa:1d:41:d7:ed:37:
                    26:1d:30:cb:1a:9f:3a:40:10:dd:c7:70:75:9c:74:
                    3e:4a:6b:95:62:16:c8:6c:b6:48:d7:ec:69:23:a7:
                    69:86:69:2c:7c:6f:d3:a4:41:be:1c:34:4f:f1:c3:
                    e3:ee:70:8b:fc:05:43:10:39:75:38:ef:1e:1f:45:
                    e9:26:a7:22:e4:92:f2:bc:a1:f5:db:b5:a5:c3:14:
                    7c:ad:b7:cb:b9:48:e3:bf:cc:46:d9:ee:5d:50:7d:
                    8e:73:87:f7:4a:cc:95:7b:fc:1a:a5:21:22:43:ad:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:82:B6:8A:23:67:D1:37:D7:0D:3E:37:0A:48:C3:3C:30:6E:CE:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/8f47ecbf-9278-3388-88b7-e7589fed7b06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.245.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:88:4b:98:2d:9b:7d:d7:e2:f9:d6:a5:5d:19:94:0f:45:bf:
         bb:06:df:df:7a:f1:3f:ce:38:24:26:08:10:41:3a:db:d9:1b:
         8d:6d:f1:3a:8b:14:89:00:51:38:19:d2:78:8a:62:df:45:77:
         5b:4a:b4:af:74:61:af:0d:64:ac:af:26:a8:1b:dc:5f:b6:ae:
         76:10:57:81:90:c0:84:43:54:36:19:83:83:1e:67:23:19:3f:
         18:83:0f:c1:0e:57:f0:af:77:c8:e0:39:39:91:5d:d8:72:70:
         2d:00:50:78:2f:59:64:cf:d5:64:68:cb:fd:d8:3c:bd:3a:6e:
         66:e3:05:f1:b4:85:2c:cd:43:e8:62:dc:90:11:2f:3d:11:29:
         50:61:e5:5d:6d:4c:b9:71:ce:48:84:65:37:5d:6f:ed:ad:77:
         a0:e3:8e:04:c2:c1:6a:5f:0b:4b:fc:fe:fb:61:f6:34:cb:6b:
         65:c6:11:61:12:90:b9:1e:6a:71:5c:27:60:5a:a8:44:0e:b2:
         ba:7a:bc:bd:55:78:8e:34:da:60:a8:72:72:f7:f1:8c:f1:58:
         b1:63:80:f5:e3:77:cb:eb:01:49:67:89:48:a1:43:e9:08:59:
         73:1e:04:6a:a2:61:07:3a:0d:fe:4d:ce:ac:26:33:05:16:73:
         06:10:fc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:07:30 2025 by rpki-client