Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa
File:                     9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa (raw, json)
Hash identifier:          ZKrXbjiUOCi9cZOK87vlSUrVNpZRhH5fcuUeZpQrM+Y=
Subject key identifier:   BD:20:92:93:6D:BF:6E:E6:33:B6:7F:83:75:16:09:76:E0:4B:82:2B
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584B5B0749D4F726757FE3EACE80
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     0
IP address blocks:        206.53.168.0/23 maxlen: 26
                          206.53.173.0/24 maxlen: 26
                          2606:a980:0:2::/64 maxlen: 64
                          2606:a980:0:6::/64 maxlen: 64
                          2606:a980:0:a::/64 maxlen: 64
                          2606:a980:0:b::/64 maxlen: 64
                          2606:a980:0:c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:49:d4:f7:26:75:7f:e3:ea:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=06ec5926-e532-4aed-8fd7-b71c7c4011cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:7b:2f:5a:c6:be:e9:5f:7e:25:55:4d:68:
                    c5:8f:fc:52:54:58:67:88:52:17:3a:3f:1d:45:98:
                    cc:d7:06:38:bd:96:8b:e5:95:f5:57:a5:fc:e1:2d:
                    28:fc:76:8b:4d:93:21:03:c6:6e:7f:c3:95:7f:b3:
                    15:3d:f9:ed:f1:e6:23:02:45:b5:ad:07:fc:d0:42:
                    9f:11:50:8e:e9:95:7c:f0:24:2a:6d:bf:02:70:59:
                    d0:1a:9b:b0:e8:ba:e1:91:53:c9:c7:50:5b:7f:84:
                    3b:51:0a:a0:78:de:7e:8d:d4:65:ac:02:f2:1c:fb:
                    b8:bc:a2:61:bf:c8:07:1d:1e:9b:78:69:bb:53:1d:
                    fa:c2:67:b5:9e:7b:0b:0f:59:d0:f0:b6:5a:72:a0:
                    8a:f0:9d:60:dc:05:69:cc:73:33:b3:6a:67:a7:c3:
                    7d:28:82:61:16:ce:f8:73:f3:bc:71:91:94:bb:2f:
                    49:97:42:2f:65:ac:76:13:b8:7f:e1:a6:7d:f6:10:
                    18:71:8d:f9:be:57:22:c2:39:17:7e:4d:60:0f:76:
                    f6:9f:ca:51:56:5c:e4:21:ff:1a:50:24:bb:1f:a2:
                    67:46:6a:7e:33:53:02:6e:b9:93:81:d0:03:ac:dd:
                    dd:c8:fd:81:f4:d7:a2:2c:95:69:92:5e:09:80:cc:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:20:92:93:6D:BF:6E:E6:33:B6:7F:83:75:16:09:76:E0:4B:82:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.168.0/23
                  206.53.173.0/24
                IPv6:
                  2606:a980:0:2::/64
                  2606:a980:0:6::/64
                  2606:a980:0:a::-2606:a980:0:c:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:ad:42:62:b6:ce:cb:8c:59:44:8a:c1:3e:5a:63:20:ea:
         5c:2d:07:6e:64:fd:e9:94:75:13:96:50:6a:8a:30:84:e5:08:
         d4:dd:5e:ac:78:2e:e2:82:a4:5d:e0:ba:d4:12:11:70:c9:b7:
         ce:4d:5a:e2:7f:36:e8:ac:27:51:0c:c3:be:64:a3:f1:04:43:
         ea:b0:77:c1:a4:03:0f:43:a7:7d:c3:b8:df:be:0d:c6:35:c8:
         93:0d:04:d0:29:a4:08:ba:28:88:df:d5:3a:12:75:f2:ca:10:
         08:90:9c:42:0f:6f:85:2d:ca:64:01:5d:15:fb:c0:2a:71:69:
         bb:65:dc:9c:38:ff:41:df:95:71:71:d7:6a:f7:9f:ab:29:ce:
         de:23:78:17:c1:1e:cc:12:d3:a8:4e:8a:33:90:f0:1c:c5:6e:
         22:65:8b:c0:b1:89:75:30:ae:2d:88:49:18:0e:fe:b3:56:49:
         22:1a:da:97:69:83:f8:c9:9d:dd:2a:3b:58:50:6d:70:fa:96:
         e4:4e:30:08:83:b7:bf:8e:89:99:fb:27:8d:77:7f:d6:fc:af:
         e0:0e:9a:08:a1:c2:2d:62:03:a7:20:b7:24:63:64:b9:b2:b9:
         f3:e4:c9:a9:bd:86:18:85:8f:d2:41:d0:67:df:9b:93:02:42:
         8c:ff:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:16 2025 by rpki-client