Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa
File:                     18d57279-9cce-36bc-b8e1-741147e33233.roa (raw, json)
Hash identifier:          GD32PdtrxK/ng2/n6deK1RKlHHzbMkRo1afS4rb3kzk=
Subject key identifier:   D4:FB:1B:7C:C4:BE:41:64:59:6B:30:89:7D:B9:13:7A:1C:35:6A:06
Certificate issuer:       /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Certificate serial:       010D0C9F4328584A1B6005EB7B09B0656C017440
Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     393444
IP address blocks:        205.207.186.0/24 maxlen: 24
                          2602:fa4d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:05:eb:7b:09:b0:65:6c:01:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=6b291d0d-4fdc-4688-b526-e194f6f22429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:d8:c4:54:27:6d:78:b9:11:fb:63:42:2e:
                    54:d2:be:57:2d:77:de:07:4c:01:f8:6c:b2:e2:00:
                    21:d1:55:a9:42:72:f0:e6:0d:91:5d:dc:43:d8:97:
                    e3:37:05:70:a0:e8:6a:20:80:13:27:1d:3a:9b:5e:
                    84:71:90:b1:5a:04:a8:9c:1a:7f:d6:6a:ec:bd:db:
                    f8:b5:6a:f8:ae:48:dd:b8:41:df:4d:d6:52:84:5c:
                    18:75:94:1d:ff:cd:63:90:65:2c:06:0f:fb:34:21:
                    3b:cd:67:83:dd:db:2f:a9:46:cc:2d:3e:51:6b:f0:
                    83:4b:8a:17:33:99:c1:be:bd:5f:2e:fd:67:56:f6:
                    39:d5:81:17:78:01:ce:ed:13:ba:e2:99:c0:cd:fc:
                    dd:d0:76:a8:69:5d:c0:2b:4e:76:fd:fe:4c:69:b0:
                    e0:b6:ef:29:05:0f:de:61:01:8d:4a:b4:6f:5b:f3:
                    22:b2:3c:0b:4f:b0:34:5f:ae:0b:56:dc:10:79:39:
                    36:24:42:da:c3:9c:58:aa:e0:28:39:94:7f:0c:84:
                    11:bb:fb:ba:2e:f5:43:cf:47:a0:2c:e8:e6:71:b4:
                    e3:8d:2b:6a:a3:3f:1a:53:60:6c:5d:31:4a:8d:9b:
                    b1:62:85:41:82:95:3b:2a:7f:0e:f3:53:50:fa:e6:
                    89:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FB:1B:7C:C4:BE:41:64:59:6B:30:89:7D:B9:13:7A:1C:35:6A:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl

            X509v3 Authority Key Identifier:
                keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.186.0/24
                IPv6:
                  2602:fa4d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:53:59:33:52:85:50:dc:90:5e:95:5d:54:ec:c6:7a:bb:ab:
         72:cc:09:1a:e4:dc:4f:c8:58:39:94:9f:51:dd:b3:56:14:b6:
         03:16:e3:96:c9:77:d0:e2:3d:68:5b:bd:75:48:d5:a8:ad:6c:
         9d:c7:10:45:e3:d7:14:b1:56:5c:f6:dd:3b:c9:01:b4:14:dd:
         86:b4:3a:1b:c7:3c:6c:2b:7e:13:e2:58:9b:47:6e:bd:4c:31:
         1f:b3:bb:d8:54:2f:9c:fa:19:d1:c2:9f:23:90:f8:cc:6b:ab:
         bc:a5:b9:45:f1:18:54:c8:b4:4e:46:b6:a3:f3:02:06:93:69:
         37:40:6c:e2:c1:2b:60:01:b7:39:97:da:cf:90:dc:13:34:03:
         f4:00:84:da:ee:4f:af:af:83:55:2f:93:57:61:47:23:e8:f3:
         90:c0:63:48:62:72:d3:86:e3:90:7c:3a:dd:5c:9e:7a:9d:89:
         63:c2:7c:a7:5d:64:38:57:0d:6e:8d:85:60:4f:5c:00:00:0d:
         93:bd:61:93:33:6a:be:4f:4f:84:9f:9e:5a:89:4f:35:e5:8d:
         c7:2d:82:08:56:2c:e4:a9:ed:8c:12:cd:84:ca:ec:39:6f:31:
         0e:05:32:f6:46:07:e1:a6:cc:bb:5c:1a:6e:39:0f:b8:2a:ad:
         21:a4:f2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:47:06 2025 by rpki-client