Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa
File:                     06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa (raw, json)
Hash identifier:          oaZfCeLWqCgF52L2nQe8B3IldJu6pYxeGAYshjY1gOY=
Subject key identifier:   6C:B0:A1:7F:A3:35:04:9E:5D:B8:19:30:2F:32:03:3A:92:CF:E3:39
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584A4DA042B791A8DFD9F5171380
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     398324
IP address blocks:        206.168.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:42:b7:91:a8:df:d9:f5:17:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=242a6f00-a391-4305-9b28-d1c7c65a57b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:9a:dc:40:d9:4c:26:34:8a:13:3d:a6:c5:
                    db:52:4a:96:53:d1:ac:63:5f:01:17:56:01:dd:a5:
                    05:20:4f:ab:16:33:c7:91:e0:89:d3:68:20:67:a3:
                    22:74:f7:18:f6:f4:50:ca:2b:90:49:b6:83:84:21:
                    98:bd:19:df:5b:ee:9d:38:37:f7:e1:8f:60:3b:b0:
                    f8:77:e4:78:36:ef:e3:a0:81:cd:24:7f:c2:de:4b:
                    8f:54:91:91:69:fd:e0:b5:d2:61:78:79:5a:d1:4f:
                    d9:de:f8:4c:a0:11:eb:b2:32:01:61:cf:c2:d2:63:
                    68:e6:02:c6:bd:6a:c9:3f:52:5e:fc:ad:6a:50:b9:
                    58:38:cf:ec:12:46:ee:8d:95:09:3d:12:a5:2d:85:
                    b4:c3:e6:f5:c7:43:8d:f1:63:2f:b4:f0:92:41:9b:
                    d6:5d:6a:32:08:6a:e3:da:ed:d4:d1:56:7b:5a:4b:
                    23:7b:1a:63:f7:08:8b:e9:6b:78:3b:d5:f4:93:b4:
                    29:6b:a4:c7:aa:c0:14:f5:07:a2:5b:66:fd:4b:5c:
                    63:ae:b3:a8:8e:8d:58:0d:b9:d9:bb:9d:67:43:b7:
                    13:5e:d0:87:b6:82:ec:2d:53:3f:fe:8d:0d:62:3a:
                    0e:1a:36:42:af:72:4e:d2:18:f2:1c:6e:25:d2:0c:
                    34:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B0:A1:7F:A3:35:04:9E:5D:B8:19:30:2F:32:03:3A:92:CF:E3:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:35:9c:96:d2:ca:cf:3c:30:22:08:9f:37:68:8a:53:7d:6e:
         57:d3:36:3d:d4:0e:60:47:a2:c1:97:ed:61:43:e7:83:3d:9c:
         09:fe:53:ad:74:f6:25:a3:63:38:40:a7:d1:cc:a5:c8:9d:36:
         4d:53:f8:74:9d:63:39:6e:62:06:41:02:3e:60:86:b1:60:3d:
         e7:bd:d0:53:ad:7c:3a:e3:f4:99:df:de:e8:92:33:11:18:8b:
         16:42:44:45:cd:0a:f6:d9:29:f7:35:62:42:1f:8c:28:56:5a:
         08:20:c2:ca:fa:cb:ee:69:79:4e:c2:a4:71:70:d7:c7:76:db:
         aa:d7:3a:f1:ce:7e:70:f8:6d:37:86:68:a1:53:92:45:ec:3a:
         67:6c:80:2f:9e:04:7e:14:99:32:fa:62:a7:13:a8:81:70:a5:
         88:aa:1e:7c:91:4e:ff:b6:3b:fe:0a:3f:e2:41:16:8a:ed:ad:
         34:78:21:76:d9:2a:9c:9c:49:b6:eb:53:cd:a7:d6:d8:39:ea:
         10:73:18:91:f7:7c:35:f2:8f:af:bc:b0:ab:e8:f6:b9:53:dd:
         a5:0a:30:e7:ac:7a:ba:e6:c1:39:9c:a9:94:a3:6c:0d:8e:91:
         50:09:21:93:48:bf:25:c1:0e:80:28:7b:dc:62:3a:6d:b3:26:
         53:06:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:43:29 2025 by rpki-client