Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/eaba529a-e760-30c1-9e8a-47ce5d6fbc4d.roa
File:                     eaba529a-e760-30c1-9e8a-47ce5d6fbc4d.roa (raw, json)
Hash identifier:          L/LMwwC9ycxP06GGAiMLwQGSMvgs2SlgLiM1C+RiyLc=
Subject key identifier:   DA:9E:E2:D5:72:42:76:5E:75:32:7B:9F:03:6F:E3:D1:1F:B9:D7:97
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A41105A0B1E8A956C856DD400
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/eaba529a-e760-30c1-9e8a-47ce5d6fbc4d.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     11105
IP address blocks:        206.12.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:5a:0b:1e:8a:95:6c:85:6d:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=874217e5-2101-420c-a54d-680a1ef45ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:b2:7b:21:83:08:51:41:72:21:af:a6:c5:
                    8c:b6:d5:92:2e:1f:c3:c4:af:1a:d4:34:c4:92:63:
                    8c:1b:29:79:ad:f9:cf:a7:85:3f:09:22:e1:40:56:
                    b4:a0:c8:98:5f:78:05:fd:f4:1e:ed:fc:3d:34:bd:
                    91:70:88:1b:0f:97:fc:8d:13:4e:ba:de:ff:c2:bb:
                    e0:f0:2b:80:0f:ce:60:23:d3:c1:47:49:5d:c9:15:
                    3d:a1:5a:6e:9c:15:ea:81:da:60:2c:0c:33:d0:c8:
                    30:59:5e:75:17:f4:1b:99:a0:f5:de:8a:c1:54:a6:
                    ed:1f:ab:60:bc:70:2b:ae:d7:ce:6c:f7:73:02:73:
                    b6:45:44:c9:b3:2e:d1:28:e1:8e:66:5b:ea:ed:d5:
                    62:ee:be:01:a0:0d:9f:ac:e3:17:ff:90:16:8b:8a:
                    22:ec:ce:47:22:81:cf:14:f2:9b:8c:57:56:97:bd:
                    58:2a:9e:1e:88:cb:bb:4a:26:4f:4e:ac:b0:13:66:
                    d1:4f:3f:47:9b:3a:a6:2e:f7:21:cf:44:1a:e7:cb:
                    f4:45:b1:b0:95:04:f1:8e:5f:79:62:82:0c:1b:a0:
                    e1:3e:de:e9:91:c6:50:95:0b:c0:74:4d:ea:1b:37:
                    aa:8c:25:db:84:59:3b:8e:9d:9d:0f:07:93:02:73:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9E:E2:D5:72:42:76:5E:75:32:7B:9F:03:6F:E3:D1:1F:B9:D7:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/eaba529a-e760-30c1-9e8a-47ce5d6fbc4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:00:67:fd:37:b7:e0:d1:f4:26:db:6f:ab:26:ca:96:e2:ea:
         b0:03:ac:82:72:f3:80:46:5f:1a:79:f0:49:3b:66:6a:b2:2f:
         71:be:8d:10:92:d8:41:40:82:e5:2b:84:45:57:5a:4c:01:69:
         9e:6b:42:f6:fe:7f:cf:f7:e1:7f:52:b5:d4:12:34:c4:86:86:
         9c:46:a1:ef:05:b8:2f:d3:27:47:10:ce:b5:60:de:3b:a3:78:
         47:d9:8f:34:3f:ef:62:34:63:f9:86:b9:32:d3:ed:46:07:d7:
         ee:74:33:72:3e:58:64:c5:e0:f5:86:34:2c:f8:cd:e0:d1:16:
         74:e9:7b:29:ff:90:92:94:da:b0:53:f1:92:47:7c:ac:6b:6e:
         ef:8c:79:9d:7f:81:fe:4a:22:ed:eb:ae:15:c7:52:ed:7d:ee:
         e6:4b:02:51:bc:91:1c:40:8e:86:db:e1:b9:1d:d6:05:74:11:
         fb:b0:69:69:ee:8f:26:bd:23:4f:e7:08:b5:7e:cf:ff:64:02:
         3b:32:36:f8:d3:6f:6b:ed:b1:9a:7e:78:1e:b7:e1:3d:b9:e1:
         a0:6c:c8:71:89:1b:2d:5a:f0:42:bf:8e:d0:a1:bd:d6:5b:01:
         63:09:aa:62:88:8c:84:2f:e2:a8:9f:06:00:a1:1f:cf:52:30:
         73:03:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:27:42 2025 by rpki-client