Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a6dcc26a-cc7d-3de0-807c-6700106ff4f6.roa
File:                     a6dcc26a-cc7d-3de0-807c-6700106ff4f6.roa (raw, json)
Hash identifier:          Wkf8SKL9ytnEtB3DqB8+Jx9++IPOnRTT3FvJwv5K0oI=
Subject key identifier:   6D:14:B9:8E:24:4F:44:2E:2C:42:B6:AC:0B:09:DB:54:6F:87:4B:AF
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A3B7B0232EEB663F659148E80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a6dcc26a-cc7d-3de0-807c-6700106ff4f6.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     393249
IP address blocks:        206.12.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:02:32:ee:b6:63:f6:59:14:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=b561bfaf-06ea-4e3b-a353-259f04d32b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:59:a3:4a:20:6b:49:5b:5c:fe:cf:5d:b2:
                    05:7b:5b:e6:f2:5f:77:29:df:39:eb:c4:92:1d:36:
                    08:92:24:e3:e8:ac:3a:3a:66:0f:2d:88:33:a4:65:
                    c7:54:47:6a:ef:c5:92:e4:9e:42:f2:62:f7:b6:0c:
                    57:19:db:7e:79:af:74:f9:e4:4f:5e:03:2d:99:05:
                    c9:9d:3a:60:5b:98:87:0c:87:04:40:1e:72:8c:2e:
                    35:73:c8:3b:44:fd:00:67:cb:99:44:c4:b7:30:80:
                    f8:20:71:08:0d:60:57:2c:cc:65:fd:f8:e3:46:54:
                    f6:a4:c3:d3:a6:58:a4:42:b6:99:3f:5a:71:01:3e:
                    64:1f:44:a2:fe:b0:ee:1b:28:40:ed:aa:0d:05:cd:
                    ad:e5:9e:16:c4:e7:90:78:6b:84:3d:c8:f4:c7:df:
                    bf:2a:9f:46:c1:eb:e4:42:c5:a1:db:74:e9:cf:59:
                    70:b3:5f:81:1d:5e:c5:52:c9:a8:25:77:db:fd:0c:
                    ea:ca:e5:ae:31:03:49:ba:34:13:8b:16:7e:fa:dd:
                    27:cf:28:36:7c:fe:6e:a0:52:94:d0:c3:82:10:dd:
                    99:1c:14:7b:ec:9c:6c:83:9b:fb:9e:16:f3:24:80:
                    29:42:3c:73:e8:52:cd:61:7c:16:26:4c:46:eb:f4:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:14:B9:8E:24:4F:44:2E:2C:42:B6:AC:0B:09:DB:54:6F:87:4B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a6dcc26a-cc7d-3de0-807c-6700106ff4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:69:2f:91:33:fc:ce:95:f1:06:fd:a1:83:7f:a1:79:03:cb:
         23:cd:1a:f1:a0:f3:4a:ae:fd:68:3a:4f:63:a8:2b:0c:b1:04:
         17:e1:e5:b7:39:d3:5e:0d:7c:3c:5b:f9:be:09:c8:16:2e:0e:
         41:20:bd:14:a1:4a:9a:80:26:52:30:28:b4:16:e1:81:96:e2:
         dd:04:b6:64:21:98:d2:5b:42:a6:cd:1b:c9:85:41:b8:2b:b6:
         74:c4:70:fb:a1:80:7d:f3:ab:43:11:9e:03:c3:b4:d3:e8:1e:
         9b:ab:ea:7e:9c:d6:50:a9:cb:0f:94:61:f1:7d:c3:40:e6:2f:
         e5:f4:89:dc:a4:a7:47:3a:3f:29:94:2f:e0:a1:de:04:a7:45:
         3f:52:90:c8:13:4a:37:8e:66:f3:19:d3:12:8c:f7:4c:dd:22:
         30:dd:ce:f1:20:15:ce:28:a1:95:cb:c0:9a:5d:d0:c6:89:66:
         91:64:d7:f1:f2:ed:44:c2:d1:22:a2:8b:b5:2f:59:bd:4d:55:
         e1:44:9a:9e:0d:2b:14:ae:33:6a:53:0f:47:16:00:cb:fd:aa:
         e3:c0:96:8e:f1:a3:89:8c:0a:20:76:26:cc:9d:72:0b:e9:8a:
         58:36:2e:5e:49:25:94:2d:f1:29:5c:ae:8d:b2:15:c1:ef:37:
         1b:5c:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:11:50 2025 by rpki-client