Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dbe013a6-c5c2-3629-867f-c8f9dce4daca.roa
File:                     dbe013a6-c5c2-3629-867f-c8f9dce4daca.roa (raw, json)
Hash identifier:          zAI9okqV+E+8eJBgRVDxXWc7voSBVUtwOzHKsIgHb1w=
Subject key identifier:   B3:11:68:9B:3D:A1:CB:D3:20:9D:26:99:23:40:D9:8E:AF:15:C9:40
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584AC2E0EBA84F6C3D1162F67C80
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dbe013a6-c5c2-3629-867f-c8f9dce4daca.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     1273
IP address blocks:        206.24.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:eb:a8:4f:6c:3d:11:62:f6:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=0813796e-c32e-4af3-9713-6a1507b4f5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:05:55:3d:02:4f:62:1b:e8:a7:d4:cd:4a:19:
                    6b:7f:c9:c0:89:7b:2c:df:66:c7:23:50:85:b4:32:
                    b5:17:28:04:7e:1b:43:74:d5:f9:eb:07:10:7b:8c:
                    a2:a6:ef:d9:ab:5d:00:9e:ec:f5:65:71:0e:cc:71:
                    2d:67:78:84:71:3a:38:fa:6d:af:8b:89:00:fe:a0:
                    79:33:12:c2:cc:45:9b:a5:f2:5e:00:55:05:70:e2:
                    fc:87:2e:d5:7c:67:6d:2e:56:73:40:0c:db:88:c2:
                    f9:46:7a:fa:f0:16:e1:9c:9f:e1:c4:41:b4:dc:bc:
                    d3:15:04:bb:eb:a1:db:de:10:8c:0a:9a:01:9d:40:
                    12:07:85:af:53:3a:37:9f:17:57:3f:95:ca:cd:eb:
                    bc:24:9c:cb:5d:40:c4:bd:51:05:0d:3f:1c:2c:7a:
                    d7:68:41:99:d3:0c:f0:27:d0:9d:3c:ee:93:ec:9e:
                    d0:06:9c:b5:66:9d:b7:1a:45:b1:ca:10:dd:1d:bb:
                    6b:07:23:9c:8b:8b:82:d0:09:92:88:da:10:e6:fe:
                    9d:bb:59:2c:26:32:1d:12:af:21:16:e1:ac:a1:87:
                    14:fc:0e:ff:85:8b:9a:b9:27:f2:60:93:3f:a1:56:
                    2c:9d:3b:9c:1f:b7:22:b2:fc:17:74:74:73:4e:de:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:68:9B:3D:A1:CB:D3:20:9D:26:99:23:40:D9:8E:AF:15:C9:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dbe013a6-c5c2-3629-867f-c8f9dce4daca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.24.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9b:ec:4e:06:f9:d5:8e:f7:eb:28:b1:68:67:90:03:63:86:
         26:6a:33:9d:cd:b5:be:23:65:96:ad:26:70:5b:c5:b5:5a:f2:
         86:cd:75:d9:c0:c1:f8:b0:11:cc:a8:fe:e0:4f:c0:22:a9:7b:
         61:ba:a2:12:b6:4b:e0:d5:f8:3a:1f:83:04:a6:86:d4:7b:13:
         49:b9:a0:af:85:e1:1c:46:00:ec:bc:fb:70:ad:85:07:b1:55:
         8b:cf:e2:36:87:9e:43:4d:46:ff:f2:d2:52:da:aa:cc:ca:8d:
         d1:e7:17:38:eb:d5:d6:c0:6c:5f:1f:cd:86:ed:33:48:3a:a6:
         1b:cc:e4:91:56:27:db:17:81:b2:e0:73:a4:18:cd:d9:46:af:
         ed:e0:f4:91:da:31:7f:b9:9e:f3:2f:e2:88:44:49:97:e3:d8:
         06:4f:dc:ff:f9:0f:7a:31:32:bd:b1:f2:05:47:90:32:ee:c4:
         45:a8:c8:d2:5d:a7:4d:9d:74:38:84:d4:6b:33:37:24:9b:84:
         9b:ce:3a:cb:15:ed:2c:ca:3a:bb:3f:c9:bc:2c:bf:71:96:ea:
         f4:01:e2:bb:da:62:a4:42:5c:2e:e9:21:b8:c3:d5:8b:d1:1e:
         07:88:1e:e8:0d:f9:73:ef:18:77:3e:9b:60:0c:ba:0f:03:de:
         42:45:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:53:14 2025 by rpki-client