Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a81d9775-9ba7-3136-a153-27ba2b36d211.roa
File:                     a81d9775-9ba7-3136-a153-27ba2b36d211.roa (raw, json)
Hash identifier:          jZq5+Pf7me6qBxTivVJcUyLxsnwqgZKCVsyW/7/8Kuo=
Subject key identifier:   65:C7:BD:5D:40:6A:EC:D5:91:0B:79:42:D2:10:29:1A:0C:C5:D9:0E
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584A331AF7D30CEAB577D96D0900
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a81d9775-9ba7-3136-a153-27ba2b36d211.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     48254
IP address blocks:        206.130.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f7:d3:0c:ea:b5:77:d9:6d:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=36d70b74-6757-4bbf-bb04-674c35c549df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:d0:64:7f:b5:2e:ca:d2:7a:da:0a:3e:96:
                    c3:8f:cb:69:47:de:5a:82:b6:56:b4:40:ad:14:37:
                    80:6c:cc:01:3b:d5:8c:ed:6e:9e:5d:db:d2:77:01:
                    5a:62:8e:af:e6:94:1a:10:40:44:a9:db:6b:25:cb:
                    c1:49:55:6f:0f:57:a9:30:62:a4:ee:e6:a6:73:c2:
                    7e:d9:7a:ac:1e:e4:ef:95:40:d0:ad:65:5c:6f:fd:
                    e7:1a:10:ea:5d:f7:21:38:cc:a5:5c:ee:03:29:70:
                    d5:f5:2b:ae:2e:53:ad:58:de:d8:11:4a:c6:f4:82:
                    a5:3c:00:09:d3:d2:ca:8d:df:44:58:6a:77:46:37:
                    49:91:c9:c9:05:01:2a:10:86:cc:75:c2:5a:aa:eb:
                    69:c9:44:03:67:5f:d6:af:a8:d7:de:20:a0:88:a0:
                    c8:96:2b:e3:8e:b7:9c:90:a7:42:41:de:e6:d1:6c:
                    eb:ff:ad:89:98:c2:4b:33:37:f0:80:16:38:a8:76:
                    6d:66:cd:64:ee:fc:5d:75:ae:2c:ab:69:54:68:42:
                    88:51:52:e2:e0:94:65:ff:5a:c6:56:48:73:6e:29:
                    f7:f2:d4:13:46:70:1c:59:90:69:e4:40:1d:9a:ae:
                    c0:6a:be:bc:99:05:a5:a8:60:c6:0f:55:b2:64:4d:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C7:BD:5D:40:6A:EC:D5:91:0B:79:42:D2:10:29:1A:0C:C5:D9:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a81d9775-9ba7-3136-a153-27ba2b36d211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:a4:b0:b8:04:5d:3e:99:f2:1d:c5:48:b2:2f:77:76:ea:
         81:87:4a:63:1e:a0:8f:98:2f:d6:a8:64:a2:40:32:4b:60:ed:
         2c:eb:d5:e0:ea:a0:92:ec:b4:57:bf:a1:03:36:45:4d:52:77:
         ce:ec:70:9f:11:16:bd:8f:27:59:ef:7d:8b:b8:b5:1f:f8:c9:
         b6:68:30:c9:f4:88:69:d2:07:f6:11:a0:e3:7a:bc:17:fd:fd:
         d8:a9:ea:12:fb:19:bc:86:70:d9:29:62:43:87:f0:c4:ea:e9:
         31:c6:cb:f2:ee:95:b0:78:4c:27:43:7e:9f:09:bb:09:1f:e7:
         05:23:4a:41:23:f3:25:a7:e0:88:a1:1f:e3:0e:92:40:ba:3d:
         86:98:5b:ff:1e:46:8f:8d:dd:82:be:68:58:07:b2:f4:5e:6f:
         bc:03:73:6d:37:ed:23:86:4a:c9:5a:bd:7a:91:fc:74:ef:94:
         6e:1d:ea:b1:94:99:cd:67:84:98:72:dc:ec:08:e1:32:4a:4b:
         05:72:d1:9a:d7:51:fd:f6:ea:37:b5:60:60:7f:79:15:5e:9c:
         ad:31:4e:32:f7:07:ce:26:c7:ae:04:f2:99:ef:8c:c2:72:cc:
         3f:75:cc:55:be:8f:c4:52:4c:ed:29:da:92:5f:ea:d3:d4:cf:
         ca:7d:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:07:31 2025 by rpki-client