Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa
File:                     0bfdcce3-bf0c-3c99-8e69-783195d18590.roa (raw, json)
Hash identifier:          Jbhau/G5ZDiarz8gwmOVfT/XXQi7klxGGlMV8jFDpjs=
Subject key identifier:   6F:E2:F7:01:FC:FC:F4:EE:8F:C3:33:B3:47:8C:9C:AD:35:83:53:D9
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F4328584AC01631A6EF330D5158DB1598
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        206.195.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:31:a6:ef:33:0d:51:58:db:15:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=6514fb9c-3b8e-46a8-8ff1-9b643ce134ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:49:69:9b:e8:0f:6a:ef:ee:f3:86:b1:0b:
                    e2:bc:65:6d:09:03:af:49:34:3b:cf:fb:f8:60:91:
                    28:31:cb:69:d9:0f:be:f2:eb:8a:70:06:7f:fa:da:
                    f0:eb:45:4e:dd:68:69:97:36:10:73:a9:cb:4c:da:
                    2d:27:92:a1:58:ac:73:72:cd:39:a6:10:bd:ab:a4:
                    90:e2:cf:d6:05:cc:af:17:8f:26:5c:46:bb:02:7f:
                    f4:7f:6b:2b:74:2b:cd:52:83:7a:63:3b:cd:1f:fd:
                    ab:c8:08:55:f5:7c:80:6a:60:e6:e4:dc:b1:35:a3:
                    6c:67:f7:8d:a0:3a:57:34:77:8d:14:c3:41:47:61:
                    36:62:50:33:ad:62:fd:39:2d:89:8d:e4:39:f1:67:
                    21:56:59:39:d7:28:48:1b:c2:60:61:3a:95:8e:2e:
                    71:6f:43:06:84:09:da:f4:c5:26:c2:60:79:2b:dd:
                    fd:6a:80:f7:87:b3:a5:05:36:c8:41:bf:12:6a:13:
                    70:db:0b:cb:72:a3:28:21:d7:5f:2e:46:43:c0:30:
                    e2:d9:56:02:d2:d4:d1:9a:54:03:81:30:26:14:d2:
                    fe:6f:cd:90:4d:c0:45:72:f2:df:5a:d6:dc:a5:ee:
                    e5:89:ea:1f:da:93:59:1b:58:03:1a:90:74:ec:c6:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:F7:01:FC:FC:F4:EE:8F:C3:33:B3:47:8C:9C:AD:35:83:53:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:b5:0f:45:07:99:53:98:fb:55:bb:32:89:c1:da:e0:47:
         44:40:3d:5f:af:a5:09:28:49:82:18:56:21:24:8d:32:06:31:
         4a:fa:01:e6:02:6a:0c:4d:1f:69:c3:92:4d:71:c1:d5:60:45:
         a9:79:45:8f:2c:71:1d:f8:41:08:aa:80:02:95:80:1c:32:df:
         4f:ac:6a:d2:e9:cb:bf:de:cb:38:bb:93:f5:e6:ac:0b:fe:56:
         18:07:c2:66:29:4e:42:ee:b7:4f:97:07:88:a5:d3:68:e7:83:
         08:e1:11:f4:ca:a6:88:48:16:2e:99:1c:e7:3b:16:fc:75:3f:
         20:3f:1b:ca:75:6d:c2:53:5b:6b:9f:c7:3b:12:ce:77:f6:4e:
         f2:e5:a1:4b:f3:51:e3:4b:02:5a:32:24:89:c2:28:3f:a9:f7:
         c1:e8:3e:7f:b8:78:30:f7:50:ba:c8:87:16:38:6f:e0:a8:db:
         62:7c:2b:ba:78:29:16:48:7c:41:ea:b4:9f:43:02:b1:a1:25:
         65:ed:b8:a3:37:20:d8:9d:ee:af:0d:1f:46:c4:e2:aa:cf:ea:
         38:71:97:57:cb:81:80:f8:66:aa:c9:8d:07:18:19:16:5a:61:
         2f:04:6a:8c:b0:5b:36:e2:80:7c:99:27:32:dc:9a:b2:6a:09:
         9d:42:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:38:37 2025 by rpki-client