Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa
File:                     a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa (raw, json)
Hash identifier:          vpOwxd2p56Fqsra+IFHjCDXiDGEr9AF9DRM7HHDY5ig=
Subject key identifier:   23:A7:8D:3A:00:22:31:C5:F1:9C:7E:A1:7D:8D:F0:60:30:7D:C7:29
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584AD9365AABEC87EAC167959700
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     271
IP address blocks:        206.12.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:5a:ab:ec:87:ea:c1:67:95:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=9b98c991-d536-44c0-91cf-950a25dc648c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:a2:ff:80:83:8b:7f:f6:fa:5b:95:5c:dc:
                    16:3e:d5:df:31:0c:0d:54:eb:c8:41:e6:c3:b5:70:
                    a2:09:33:4f:f6:5e:f7:99:34:90:0f:9c:28:29:cd:
                    0f:c8:3a:37:41:1a:39:1a:8e:0a:10:e2:48:72:c1:
                    03:87:3c:58:78:10:4e:7c:cd:06:89:f2:9d:cb:7f:
                    d9:d0:e0:c2:f0:0e:1d:86:f9:30:40:29:62:c5:88:
                    9b:d2:cc:1d:56:63:09:32:30:38:cc:51:e0:cf:68:
                    e7:ef:55:0c:4a:f2:07:87:d5:f1:d1:e7:27:7e:dc:
                    5e:49:00:fd:9f:71:5e:34:e8:b6:54:c8:2d:1c:f9:
                    35:8e:8e:18:89:01:4e:e4:23:f6:15:85:d5:c6:bf:
                    1d:c1:b0:1d:01:57:93:2a:14:64:2a:f1:88:30:67:
                    75:9b:31:5b:b2:14:7e:c7:a3:40:13:ae:43:02:c7:
                    c8:bc:ba:c4:49:ca:15:4b:a1:ef:7e:98:19:6e:ed:
                    d9:02:c4:d8:34:37:5b:c6:26:39:13:a4:73:8b:fc:
                    5a:4a:be:c3:78:c3:8a:39:67:8c:46:b1:b4:b1:db:
                    93:cd:5f:30:a1:8a:7b:5f:a3:1f:9e:a5:2c:23:66:
                    9a:93:2f:8c:f8:e9:f1:dd:98:5e:f6:00:c3:59:9b:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A7:8D:3A:00:22:31:C5:F1:9C:7E:A1:7D:8D:F0:60:30:7D:C7:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a9a2d30c-8346-32a2-9a67-eda80fb6ab82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:05:be:b8:c2:06:cf:95:d0:79:4c:1b:09:64:44:b1:00:a4:
         40:af:72:b7:32:d6:af:14:ae:3f:7e:d7:3b:f3:2c:b4:d9:e9:
         85:5a:da:9a:89:b0:48:20:0f:29:06:fb:44:d9:0f:bb:60:3f:
         bf:89:3c:aa:bd:15:7a:96:f0:8d:b6:ad:71:7a:fb:1c:13:0e:
         c3:a3:b4:b9:1f:a2:eb:81:bc:d4:a3:2f:71:73:41:4c:c5:ed:
         b5:19:cb:cb:55:98:79:28:71:83:89:8b:55:6f:d7:34:58:0b:
         28:0b:ea:27:40:8d:6f:aa:ed:dd:de:b6:3d:21:5f:3d:29:e9:
         8d:e9:d4:1c:7c:62:10:16:52:80:f1:99:41:74:0d:f3:eb:0c:
         d9:fa:5b:4b:04:de:76:a1:11:84:1a:64:d4:a3:64:82:6f:54:
         0f:f7:50:ab:b2:84:ba:f8:19:9b:00:7c:a5:c1:9a:73:63:bc:
         42:d4:7e:4e:f1:8e:2f:53:72:da:e7:e2:1e:9f:61:97:6b:2d:
         66:1b:35:e2:15:91:28:68:7b:45:03:57:97:4d:0f:00:6b:11:
         8f:15:9b:fe:49:b3:a6:96:b4:6f:fc:3b:c2:ff:e2:c9:9a:13:
         f2:5f:12:38:db:18:6d:80:c3:9d:d1:e3:47:fd:85:6a:26:86:
         34:10:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:39:41 2025 by rpki-client