Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa
File:                     c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa (raw, json)
Hash identifier:          MzeGNuqVp/kZNmgcFCiiCO+/s1+Ntv9eYHOEkols/d0=
Subject key identifier:   CA:D4:97:BE:82:D8:F2:9A:39:3C:D5:87:16:22:CE:82:FF:A0:6F:FA
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A411059AD5B00F94B08200800
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     16462
IP address blocks:        206.12.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:59:ad:5b:00:f9:4b:08:20:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=d6754dde-74cb-4a58-919f-3e5bfe54b088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:87:91:93:de:ed:ab:5b:4d:a8:08:9c:95:8b:
                    1f:f8:e4:93:37:81:97:42:c6:3d:11:bd:dd:ff:a1:
                    13:34:77:51:2e:bf:9c:14:e0:86:2f:ec:8f:61:92:
                    4b:24:de:d7:22:41:da:56:a3:f7:1a:21:56:d1:c2:
                    ca:68:14:b9:b4:7d:65:8e:3a:11:d6:aa:13:fb:cd:
                    ce:06:6e:a3:8a:7d:75:0e:4e:7d:23:9b:4b:ee:ab:
                    e5:c8:dc:45:ac:b5:4e:3f:95:3c:c6:d0:90:7d:3a:
                    45:95:12:9b:50:3b:34:15:92:1d:01:46:f2:4e:f3:
                    a3:bb:06:11:a8:79:9a:7e:b6:a7:53:fa:53:ab:22:
                    af:4b:21:c0:2d:8f:07:c1:74:93:0a:0e:0c:42:cb:
                    76:3f:70:81:37:f8:51:27:6e:6d:e4:a6:c6:9a:39:
                    99:41:36:5c:d3:dc:38:b9:9b:06:42:7d:db:a0:3f:
                    ba:90:b9:42:48:e9:ad:3e:67:10:54:77:e0:5d:23:
                    fa:94:b4:06:2b:75:b4:3c:69:b8:47:aa:16:a3:a2:
                    81:dc:5a:f1:b3:4a:b5:e5:3b:b5:6e:8b:35:5d:a9:
                    38:61:b8:c8:27:f3:7d:e6:03:46:09:06:7b:5f:36:
                    f7:6a:14:11:bb:5a:f0:7f:20:50:22:8b:c6:54:2d:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D4:97:BE:82:D8:F2:9A:39:3C:D5:87:16:22:CE:82:FF:A0:6F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c462bd34-0e87-31d8-8da0-0cf0e2405d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:e0:43:23:79:a0:07:a9:69:aa:b5:53:d9:f7:78:59:ff:
         12:d3:90:63:3a:53:a4:3b:f7:35:b4:c0:ab:ac:1c:e7:2a:9a:
         f9:1c:72:bb:42:d0:2e:74:6b:70:9b:f5:cd:68:bd:7d:eb:f4:
         ac:de:6f:59:7e:b1:a0:60:b9:9f:1f:1a:ee:3c:8c:2a:7c:27:
         aa:bb:0c:1a:7b:05:f9:1d:61:0f:0c:08:91:e1:2f:ae:50:d7:
         5e:29:4c:ba:26:bf:0a:4f:30:71:8e:49:a0:5a:59:7e:5c:9f:
         c0:a9:f3:1b:bb:cf:22:bb:82:2b:a1:50:af:af:70:ab:f0:8b:
         e4:8f:41:f7:72:af:5a:84:2e:32:5d:c4:a1:ad:31:a6:99:1e:
         76:94:40:57:9e:63:85:70:db:08:99:8d:bd:ad:8a:64:d2:88:
         52:8b:4c:67:7d:53:c5:f9:18:68:ca:ec:9c:9c:0d:15:ba:01:
         f0:13:78:09:63:02:6f:9f:48:73:57:91:33:c7:a6:ea:cf:d8:
         b0:29:aa:17:d1:92:f4:da:b2:6f:a8:0c:b1:69:30:00:34:8d:
         9c:ab:31:ce:8b:9a:60:0a:7c:fa:94:1f:76:c2:0e:34:a0:b1:
         b3:7b:75:b4:13:6a:2f:33:a7:f2:68:fc:b8:35:d9:8b:3e:f3:
         82:ff:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:26:06 2025 by rpki-client