Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/3648636d-84da-3434-a4d6-3bd3282c160e.roa
File:                     3648636d-84da-3434-a4d6-3bd3282c160e.roa (raw, json)
Hash identifier:          txH2nJExQHJxpK0dWsUcNW/9wHa9CU9dK69Sj8JFiG0=
Subject key identifier:   3F:2D:6B:C2:B1:61:C7:81:2C:06:9D:48:8B:CE:8B:88:DE:84:FD:61
Certificate issuer:       /CN=b262d7d9-ee60-40b6-9dc2-a6317bece901
Certificate serial:       010D0C9F4328584A411063025A61FDA95D28FC40
Authority key identifier: D5:41:47:B3:C0:F7:E4:8E:7B:A2:D4:0C:B9:E3:12:F7:59:1D:6D:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/3648636d-84da-3434-a4d6-3bd3282c160e.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        209.71.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/b262d7d9-ee60-40b6-9dc2-a6317bece901.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/b262d7d9-ee60-40b6-9dc2-a6317bece901.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:63:02:5a:61:fd:a9:5d:28:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262d7d9-ee60-40b6-9dc2-a6317bece901
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=5680fac5-999b-47a7-8539-f220b4fcbb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:0a:d8:4f:7c:b9:a0:21:86:2a:bd:ed:4c:
                    66:f8:7f:1e:a7:ac:e5:15:49:c2:65:cb:a3:62:5e:
                    d5:56:2f:12:1a:8e:91:8e:6c:33:6e:1c:a0:b4:13:
                    ca:b8:bc:7d:68:0b:ae:33:40:aa:24:ef:86:5d:f0:
                    d8:7c:4a:9d:1b:84:d7:4b:ea:ed:b0:57:22:46:c9:
                    70:fa:37:05:9e:7a:86:4a:05:7f:7c:c9:67:d0:6b:
                    98:29:70:2d:6b:89:5d:20:ca:b6:ef:14:97:15:c1:
                    8f:0f:30:fc:a4:7e:61:c4:cd:9a:1c:ed:90:e8:44:
                    8c:b9:46:36:ea:ef:3e:07:f4:32:9d:a9:92:32:6f:
                    92:6b:12:e7:6a:d4:3f:60:74:42:6e:97:27:84:ca:
                    7e:0d:b1:2b:25:cf:7b:1e:f8:a0:8c:79:2b:c4:07:
                    00:9a:86:96:77:fa:6d:2b:0f:4d:1e:9c:a3:ba:5c:
                    96:ee:48:3a:77:5f:97:f4:0c:b8:68:80:bf:88:4f:
                    2b:5e:b0:5f:df:c0:2e:da:2e:44:1e:3c:68:b6:34:
                    bf:7f:c1:ad:f7:06:a1:01:77:f7:2b:cb:12:30:8f:
                    f0:3e:76:3a:11:6a:bb:26:65:ec:6e:f8:55:8b:55:
                    18:5b:be:c7:93:4e:f9:d7:d1:70:4a:66:12:f4:18:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2D:6B:C2:B1:61:C7:81:2C:06:9D:48:8B:CE:8B:88:DE:84:FD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/3648636d-84da-3434-a4d6-3bd3282c160e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901/b262d7d9-ee60-40b6-9dc2-a6317bece901.crl

            X509v3 Authority Key Identifier:
                keyid:D5:41:47:B3:C0:F7:E4:8E:7B:A2:D4:0C:B9:E3:12:F7:59:1D:6D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b262d7d9-ee60-40b6-9dc2-a6317bece901.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.71.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7b:4c:f3:ae:62:1e:20:3a:26:c2:32:ed:58:eb:60:6f:d3:
         0e:b4:3c:73:d7:c5:72:ea:57:90:cc:3d:32:ba:f3:e9:43:fe:
         11:6a:fd:e8:b6:5e:c1:82:6a:9a:d2:79:35:7d:b9:68:6f:18:
         c8:13:0a:63:d3:b1:80:d1:f6:32:1d:76:d7:44:ef:5d:ed:00:
         2f:3d:80:cd:02:59:9d:d1:47:67:3a:63:aa:9c:b3:68:6b:9e:
         b8:fd:55:c6:19:7b:ef:55:e0:d5:a5:fe:2c:c0:ae:b7:68:f5:
         a8:49:f8:b8:c7:4e:f6:97:0f:76:aa:52:ef:e7:19:24:7a:ce:
         24:a4:58:55:9a:ac:63:90:c8:9d:8a:13:c6:c7:8b:c2:1b:94:
         c6:f4:83:67:49:b5:fe:5a:ee:8c:77:41:ae:a6:03:c1:86:12:
         e4:f0:45:46:45:bb:da:b9:da:4c:7e:5a:74:5e:e9:03:37:05:
         19:64:40:ac:d4:38:b6:4b:58:7e:46:0e:e8:37:91:2d:83:f3:
         02:69:4f:35:c6:88:21:96:37:13:ed:aa:77:96:18:da:ea:da:
         d6:f3:07:64:21:74:79:60:69:c3:db:ee:b6:96:a5:96:dc:d0:
         87:b2:af:7c:6a:8b:4b:6f:e1:00:53:86:70:3c:04:89:4b:98:
         6a:1d:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:30 2025 by rpki-client