Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa
File:                     f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa (raw, json)
Hash identifier:          1lw5a4CayaEFEhw4yQsPYpz3TGPiGBkQ+BLniMAiThs=
Subject key identifier:   88:95:1B:41:29:69:7B:2C:A7:BC:2E:13:0B:27:CB:54:77:67:85:E5
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584A549B195A2F985983ABD6B500
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     398324
IP address blocks:        206.168.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:19:5a:2f:98:59:83:ab:d6:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=de89c386-9fe1-401c-8c39-63eb8fbf176a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d6:63:92:84:77:c2:09:27:17:68:f3:da:2b:
                    d1:8c:5c:36:7b:82:82:f6:e4:04:bc:22:2d:d7:db:
                    de:0a:79:98:fb:59:c4:73:16:bc:e7:36:73:5e:57:
                    5a:46:df:cb:5e:c2:ac:07:ef:e7:11:82:6a:5a:76:
                    ab:40:d7:34:f5:be:16:eb:77:db:3d:78:84:d5:27:
                    7c:bc:5f:13:57:22:14:79:47:68:56:7c:59:9c:76:
                    49:2f:39:7b:89:19:e3:07:d6:b5:5e:22:00:2d:97:
                    d5:b0:c0:56:4f:e5:cb:69:11:e3:94:ec:cc:98:6f:
                    e9:18:e6:c3:50:36:b7:04:5e:39:56:95:8f:2e:9a:
                    68:e7:d4:47:19:6e:38:30:e3:5b:1c:ab:a8:9e:5d:
                    c8:98:cf:d6:0f:77:f6:f8:80:0b:0d:ab:25:d5:54:
                    ed:69:cb:2c:18:72:fc:a5:da:14:79:28:76:d7:64:
                    79:8c:92:e4:82:e6:c8:71:66:1a:70:99:cb:85:38:
                    74:cf:4b:b7:34:76:e3:1c:8e:6f:cb:89:b6:ed:a0:
                    cd:fa:02:d0:7f:b9:53:f8:5a:4a:3f:82:9c:50:f2:
                    35:12:69:3f:49:26:16:8b:5f:ae:db:26:7d:69:89:
                    b2:65:d9:cd:0d:95:ab:15:c2:1f:62:b8:a3:0c:ce:
                    28:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:95:1B:41:29:69:7B:2C:A7:BC:2E:13:0B:27:CB:54:77:67:85:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1a:6d:71:7f:74:7c:93:c4:0c:70:2a:5d:cd:4c:a6:36:28:
         6d:e8:29:2d:a5:ac:f8:d8:8b:00:fb:35:ce:75:1d:2d:9e:9a:
         36:dd:49:e7:2c:6d:2b:21:ef:3a:0b:47:7f:8f:d5:07:f6:a0:
         a9:27:47:25:28:26:40:52:62:de:a2:d8:a8:92:fd:26:6a:ec:
         09:11:f6:c9:cc:d3:d0:6f:7e:63:88:7d:11:82:5f:a4:1d:51:
         5f:32:39:1c:22:a8:34:ee:02:a3:37:f8:bb:62:f4:72:30:81:
         68:9f:67:8e:0b:ed:ca:a7:21:c4:2c:3d:c4:49:b0:8e:48:97:
         31:0c:50:0f:4d:a7:0a:80:fc:7e:d4:3e:bb:4a:e9:02:08:d3:
         ae:38:0b:54:66:0a:fd:2b:a5:34:52:22:2d:8f:b5:15:c8:9e:
         96:26:5f:70:48:05:15:5f:a3:07:92:94:14:c0:c0:e8:b0:ef:
         e9:3f:32:0e:88:f5:06:12:83:19:ca:fb:b7:51:94:c9:ae:35:
         1e:fb:6b:69:13:2e:f3:51:d3:6c:d4:80:da:f7:d6:b8:1d:4a:
         13:61:31:c7:93:f7:20:c0:5b:6f:de:d7:c7:73:7b:3d:77:71:
         6e:9d:a1:ad:c2:11:10:91:9a:a0:5f:c3:de:fa:67:5d:f9:b2:
         20:d5:36:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:18:58 2025 by rpki-client