Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa
File:                     b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa (raw, json)
Hash identifier:          yYrTWHusIO3jZ9xbfWydbGPuUFtQYJF6ZwzVYVXhdS4=
Subject key identifier:   1F:03:B0:D1:A1:30:3D:C3:0D:2E:96:86:34:4E:65:F0:4B:B6:D1:D7
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584AD0D669424446D95A29BC3770
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     271
IP address blocks:        206.12.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:69:42:44:46:d9:5a:29:bc:37:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=023c138f-d075-40f4-99dd-4f507f6af99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:e5:1e:6a:34:92:88:72:5a:67:b9:fd:6e:
                    81:2b:fe:7d:44:fe:cc:f0:04:04:91:25:1c:75:52:
                    11:8f:00:e5:ea:56:19:29:99:a1:6b:78:45:b2:67:
                    2a:1d:a8:b7:71:73:c6:6f:4d:92:75:e1:f6:14:4b:
                    67:24:86:cc:5f:55:62:d6:db:27:8d:0e:7c:a1:91:
                    d5:fc:61:68:a7:1d:d2:01:63:60:42:b7:7e:b5:6e:
                    fa:94:62:3e:54:83:67:68:dd:c5:07:25:d0:b1:9b:
                    da:c9:3f:1f:66:bc:d3:a9:dd:e6:1e:35:82:38:21:
                    a4:9b:f2:74:d3:81:dc:8f:2a:9e:86:d8:58:7d:59:
                    37:bf:0c:a5:20:59:ad:36:23:af:40:1c:a1:60:98:
                    f5:80:79:45:87:61:5d:18:8c:77:e2:0b:29:b1:c7:
                    c2:b5:ff:c4:e0:73:83:be:99:e1:28:bc:cb:b0:f3:
                    36:a7:07:f1:15:a7:fc:26:a8:b5:85:b8:b0:5a:34:
                    ab:59:50:81:66:0f:76:bd:43:a3:2e:88:46:0e:bb:
                    bf:76:5c:00:ae:c8:07:b9:8c:fa:5d:25:fb:e9:82:
                    65:fa:0f:3b:57:ed:44:d9:db:2e:25:cc:88:cf:b1:
                    bc:32:8a:60:77:ba:82:c6:ea:83:91:28:dc:19:70:
                    de:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:03:B0:D1:A1:30:3D:C3:0D:2E:96:86:34:4E:65:F0:4B:B6:D1:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9e:6c:6c:49:f1:17:43:ed:f5:1e:20:79:ef:64:a7:63:73:
         76:cb:73:9d:46:1e:b4:57:89:33:5e:93:cc:51:e2:c2:9e:a2:
         59:9d:f7:1d:80:c9:3c:b1:6d:5d:dc:4c:44:06:8f:08:9b:dd:
         90:7e:91:22:c1:b6:62:b6:52:a2:ba:8e:1c:af:0c:38:e4:0f:
         1d:7f:6a:c6:7e:a1:a1:aa:3f:1c:24:ca:8f:bc:0b:c4:4a:d6:
         a2:78:e7:4c:92:2f:3a:87:a9:e2:8b:88:a5:13:6a:c3:85:14:
         27:25:d7:c6:ba:ec:76:e6:22:86:70:c5:7a:e8:5c:9f:da:69:
         fd:d5:f4:d6:47:f7:d4:ba:d6:50:8a:25:66:41:41:ad:b8:70:
         ea:30:2f:ca:bc:9e:41:e8:45:f1:9f:48:c3:02:bc:c8:1d:8f:
         12:60:6f:31:74:fa:e3:f4:d3:24:56:ee:8e:74:ff:b2:95:d2:
         37:ff:f1:51:4a:04:fa:bd:ed:df:28:83:41:e7:dd:ef:65:08:
         d1:6e:0b:73:e3:b6:cf:f3:59:fe:d3:6c:e1:fa:c7:32:5d:d6:
         26:5b:0d:71:40:8d:e6:18:1d:9f:ff:2e:69:72:a3:9b:29:a1:
         3d:bc:c0:68:0f:03:08:f5:52:7d:70:94:49:0a:36:23:43:28:
         7f:d6:0d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:42:34 2025 by rpki-client