Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa
File:                     9f89589a-17cb-34cc-9116-cdb2d9be527e.roa (raw, json)
Hash identifier:          avIvugCl6CrNCQZs3QvnccsqWMxUMdCh0wb2w0OuWfM=
Subject key identifier:   68:BD:A6:9E:78:2E:AE:14:53:10:61:3D:6C:B5:9E:3C:66:DC:2F:5D
Certificate issuer:       /CN=a619cbd3-121a-4de5-b31a-efa0c294c430
Certificate serial:       010D0C9F4328584A3E45A86F358C96734CAC0DC0
Authority key identifier: 20:E3:4B:44:25:30:34:A0:86:8F:A3:75:96:5E:65:DA:D8:BE:16:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        192.206.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a8:6f:35:8c:96:73:4c:ac:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a619cbd3-121a-4de5-b31a-efa0c294c430
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=36462789-f4df-4765-bd50-0981ecdd4436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:d3:95:92:3e:2a:1c:47:5d:94:77:71:3a:
                    1b:77:96:13:be:05:de:f0:6c:d4:93:3e:32:5a:60:
                    4e:7d:e4:af:9f:b0:dd:5f:6e:fb:ff:44:df:a7:c6:
                    be:18:da:92:4b:41:c4:17:b9:f2:93:82:6d:0a:08:
                    c7:ef:51:07:ef:d0:f9:80:df:f0:7b:5e:2a:20:25:
                    2c:ce:39:c9:51:aa:48:84:b4:e4:06:db:ad:f5:90:
                    ae:ad:39:be:6a:35:67:25:62:6f:54:20:5a:77:f9:
                    36:3e:18:84:1b:d9:00:f3:f0:7d:94:bb:11:93:bf:
                    ac:cf:53:83:90:59:dc:9b:8f:07:f2:f9:fc:71:93:
                    4e:41:1f:5f:52:9d:c5:0c:90:8c:fd:93:8b:4d:ae:
                    21:d2:b0:0d:d9:f7:85:f7:99:07:90:12:e8:96:3c:
                    c1:79:9c:50:24:15:20:b4:fa:ac:f5:32:dc:f2:72:
                    17:ed:88:0c:04:7e:4e:86:56:ec:87:c9:11:35:b5:
                    ed:cb:9e:60:59:96:8c:05:ac:79:b4:08:2b:c4:e0:
                    db:56:0e:37:f2:a9:4d:a4:3d:f9:fb:69:c7:74:e2:
                    c7:f5:85:fa:bb:35:15:72:f8:61:ce:83:db:53:0c:
                    96:e1:f4:e1:6f:68:3d:38:45:34:13:4b:2e:61:9d:
                    ba:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:A6:9E:78:2E:AE:14:53:10:61:3D:6C:B5:9E:3C:66:DC:2F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.crl

            X509v3 Authority Key Identifier:
                keyid:20:E3:4B:44:25:30:34:A0:86:8F:A3:75:96:5E:65:DA:D8:BE:16:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:24:b7:31:36:20:10:a8:34:bc:b4:cc:55:de:ec:81:b9:1c:
         6b:5e:a1:b4:34:4f:ab:78:1a:93:01:f4:04:4a:3b:f3:ee:8e:
         2a:da:22:15:eb:34:f1:2c:40:d0:a1:b5:77:f9:0a:57:1a:28:
         80:5b:a7:f4:55:53:ec:6b:6f:66:ee:77:a3:70:cc:b5:6d:56:
         ab:4e:9d:13:69:1c:fc:3d:6e:77:2b:c9:f9:07:74:7a:3d:5f:
         f0:93:25:35:ab:4b:7c:41:67:37:cb:a4:0f:57:ff:7d:53:66:
         f0:cf:7e:d7:0d:84:93:17:f0:6c:ba:7a:8f:89:4a:0e:86:18:
         60:99:08:85:3e:0b:2e:c2:c5:1a:48:5e:ee:6a:54:01:d7:c8:
         a7:e2:37:c7:78:a5:d0:aa:f4:39:23:75:e5:4a:3d:09:1f:5e:
         49:1f:dc:c0:e1:d0:45:13:23:0f:c3:f1:0d:7f:b2:7b:24:b2:
         19:1e:e6:ed:ae:e4:2d:2d:c6:00:aa:98:72:27:92:02:0d:93:
         1d:98:74:f5:71:76:f5:ea:fd:40:07:be:e8:dc:87:57:02:20:
         a1:42:68:3b:ef:59:7d:95:ab:6b:8f:34:c4:54:30:7c:4e:99:
         af:d0:24:dd:ca:ca:e9:a6:41:90:e5:9c:b9:4a:8e:0f:c5:7f:
         db:21:78:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:03:40 2025 by rpki-client