Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/f68425d8-af31-3e65-8fad-c48489a0f510.roa
File:                     f68425d8-af31-3e65-8fad-c48489a0f510.roa (raw, json)
Hash identifier:          KDvrbImOBbx/UoxPvx5U1/da4xw6SKxXzmqmHFrLoDE=
Subject key identifier:   BD:6B:E7:0B:AF:37:B0:C2:D6:47:05:A3:53:A7:00:92:89:83:3F:A6
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F4328584A0D6A89DDC03DA393763AE940
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/f68425d8-af31-3e65-8fad-c48489a0f510.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     398068
IP address blocks:        206.227.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:89:dd:c0:3d:a3:93:76:3a:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=12f7af1a-d2ed-4a0a-b255-dc33731a8b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:22:c6:bf:21:db:2d:ae:66:a5:64:37:94:a9:
                    3f:8e:b7:fa:a2:1e:3f:16:e4:77:4c:a3:0a:9f:57:
                    2d:b0:a4:3c:d3:d8:97:76:1b:84:70:e9:6e:48:5f:
                    54:04:10:0a:15:ff:3e:42:89:df:85:13:1a:5f:85:
                    7f:23:23:81:42:bc:9d:f2:5d:26:15:cb:b5:49:98:
                    98:8b:54:1b:44:fa:2c:9a:c1:7d:bf:e0:70:36:d7:
                    b5:5f:1c:26:0c:41:02:c2:3e:d8:52:8c:e4:0d:78:
                    1a:f8:56:da:3e:d6:51:00:b3:00:f6:51:0d:6a:00:
                    61:60:ff:46:03:68:05:67:0d:cb:94:7f:1d:6f:eb:
                    d9:26:3b:94:ee:39:78:e4:e2:b6:f3:33:ea:f6:28:
                    ef:82:88:ae:87:01:2e:4f:ff:46:43:04:35:2c:9b:
                    b7:79:f5:a9:19:8e:ca:b6:c3:73:a4:ef:68:30:76:
                    2a:5e:79:9d:f4:09:ad:03:55:ba:c2:00:f4:6d:3e:
                    01:dd:14:af:87:7b:81:8b:32:1d:4c:83:c3:63:d5:
                    7f:95:46:75:b9:7e:d6:7f:e2:bc:eb:42:84:bb:9a:
                    17:dd:97:33:c1:37:93:d3:91:4c:ff:d9:f4:56:53:
                    d9:fb:cd:1a:bd:66:2c:65:41:94:cf:fd:f4:a2:89:
                    52:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6B:E7:0B:AF:37:B0:C2:D6:47:05:A3:53:A7:00:92:89:83:3F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/f68425d8-af31-3e65-8fad-c48489a0f510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:43:aa:df:85:04:59:56:7e:15:74:55:75:83:79:3f:cc:e3:
         d3:0b:ba:0e:f8:7b:52:1f:09:98:6b:4d:d5:0d:54:c4:37:d0:
         d0:89:e6:6e:cc:37:9b:3c:5c:10:c5:cc:20:f0:58:f5:d4:3c:
         97:aa:14:01:f0:5b:b8:9f:13:f9:63:78:21:7b:db:99:79:20:
         28:fe:13:99:1a:7c:1e:ee:e2:3a:7a:ab:0f:20:49:94:be:f0:
         f1:aa:e7:3f:fa:b8:0a:c0:5f:24:82:15:4f:8d:15:fd:2c:6b:
         c5:3b:23:6b:4d:e1:4d:6c:c5:07:35:bf:10:e0:1b:7a:04:05:
         be:4b:94:53:d0:42:90:52:3a:d2:f6:65:f6:4e:5b:a9:f0:80:
         2e:e3:f0:8b:08:8d:e1:45:0f:96:04:12:51:72:09:c5:ec:81:
         06:5a:d3:11:2f:fc:b7:2f:db:cd:b1:9c:87:83:06:4b:4e:1c:
         f4:70:3b:9c:eb:24:99:71:07:9c:53:29:ac:7e:76:40:46:ee:
         65:f0:32:00:12:d1:96:8f:b2:cc:4d:2c:83:df:a6:95:8c:71:
         ea:03:dc:9d:6b:b6:4e:fc:18:52:58:e9:fc:84:cc:1d:77:9c:
         0e:d1:de:37:2a:e3:00:2a:55:31:26:47:d3:94:2c:27:2a:c0:
         4f:f4:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:05:08 2025 by rpki-client