Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86078e42-811c-36a8-b15b-9dc8e6abc40c.roa
File:                     86078e42-811c-36a8-b15b-9dc8e6abc40c.roa (raw, json)
Hash identifier:          YUzXVpmwJ5bhJozEAieYU5vn0WtLXJcOWIfmiqbRCvs=
Subject key identifier:   C8:7E:0B:85:A2:0C:05:24:5F:DA:A7:3D:15:95:56:53:25:4C:69:B3
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584AD0D668E593B024336BC1CC00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86078e42-811c-36a8-b15b-9dc8e6abc40c.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     271
IP address blocks:        206.12.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:68:e5:93:b0:24:33:6b:c1:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=736637d4-ea64-4406-b2f7-ad642e3c856d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:63:48:c8:e0:48:7e:4f:ee:ec:88:5f:e6:
                    8e:70:b9:e7:52:1b:e4:0f:2a:3f:78:1d:dd:8e:41:
                    a9:67:6d:ea:4c:da:79:ad:14:2d:81:98:ee:d3:9c:
                    11:6d:aa:9a:94:3e:e4:d3:4d:6c:80:f6:b0:55:9c:
                    39:ff:88:c9:d4:74:bd:89:8f:56:6f:88:a1:fe:df:
                    e3:ed:0e:77:cb:56:f7:0f:f4:6b:46:ec:02:16:ab:
                    81:8a:40:3c:fb:25:94:4c:2d:64:e5:ed:3d:ae:0c:
                    63:a7:81:43:00:3e:bf:91:c7:00:d2:75:10:14:99:
                    66:79:60:da:30:8a:94:eb:a8:32:39:5a:2e:08:94:
                    86:1f:30:72:0d:71:1b:28:75:13:29:41:5e:35:57:
                    7d:ef:52:b7:92:a5:08:8d:61:82:58:86:20:95:04:
                    c5:cd:a0:47:37:fa:dc:b3:28:3b:a9:9f:05:ef:54:
                    26:8a:d0:c9:ab:7b:6c:48:13:92:e2:dd:ed:6d:bd:
                    a6:03:6d:35:3d:92:f3:33:7a:fa:86:44:de:4c:24:
                    0e:c2:d3:4e:e3:00:bb:87:23:66:17:49:76:50:31:
                    2c:84:0c:4c:3e:f0:7f:d2:bb:d9:86:4c:d9:45:fa:
                    8a:ae:d3:ee:4d:ef:db:08:c6:c2:7e:94:e7:e1:7b:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7E:0B:85:A2:0C:05:24:5F:DA:A7:3D:15:95:56:53:25:4C:69:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86078e42-811c-36a8-b15b-9dc8e6abc40c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ed:0d:41:59:74:cf:b4:6c:e9:5e:0c:8e:71:97:b5:33:24:
         40:f1:db:79:69:69:ba:4d:34:12:db:e7:cc:85:b1:0c:7f:98:
         e2:e6:63:1f:54:bf:8c:c3:ed:b5:1e:aa:9d:a9:1b:04:0f:3d:
         2e:49:19:4e:e7:8e:6c:c7:f7:0a:33:c8:d7:d9:02:53:c9:74:
         3e:a7:29:13:b6:87:ef:b9:7a:7f:13:27:f4:9e:61:1e:e7:f3:
         70:40:48:3b:16:af:03:05:11:54:23:6f:7d:ee:60:c2:d8:a6:
         81:4c:f9:74:cb:cd:b4:41:c2:56:1d:17:06:7e:5f:50:44:bf:
         e1:2a:82:81:5b:5c:c4:fa:6c:d1:bd:9b:27:e9:84:78:2c:49:
         26:e2:10:46:2f:38:01:6d:a6:f5:51:42:68:29:89:c7:87:cb:
         1f:f2:2e:b2:11:19:cd:17:cc:07:90:f7:d6:b1:c5:8b:f8:02:
         cd:93:5e:84:9f:1d:91:98:14:16:d3:c7:b8:5d:35:ec:e7:0b:
         20:ca:62:96:8d:3f:1d:01:ce:2e:5d:be:73:fd:3b:8c:d1:c4:
         96:65:a7:8e:7d:e5:1a:a4:c6:0b:4d:00:d5:61:84:4a:93:b7:
         51:5f:89:7f:59:56:12:a5:0e:da:8d:11:2b:85:86:99:b2:f3:
         cd:f0:d9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:40:58 2025 by rpki-client