Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa
File:                     fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa (raw, json)
Hash identifier:          4792MQGU49F4DlFwq7nrXjUH6l8mSTnj+YSH1mTpEug=
Subject key identifier:   CB:89:AA:18:40:7B:EF:8A:8A:59:1E:9D:34:27:FE:A4:5C:26:B4:F4
Certificate issuer:       /CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9
Certificate serial:       010D0C9F4328584A4F05C370EAE378A55D596500
Authority key identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     398949
IP address blocks:        192.64.206.0/24 maxlen: 24
                          192.64.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c3:70:ea:e3:78:a5:5d:59:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=062615f5-ea71-47aa-89f6-e34ec6531e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:19:14:d0:5f:30:07:c6:83:c7:6c:e1:bf:
                    74:8b:8a:7d:48:5f:67:0e:be:c1:9e:34:79:a2:3a:
                    18:9d:88:b2:c5:63:b0:06:59:3e:07:31:2f:35:98:
                    fe:af:a1:1f:5b:e0:f5:e2:1e:03:eb:33:31:6f:b2:
                    4f:fe:bd:74:42:52:10:46:56:e5:24:ce:2e:7e:a4:
                    2c:91:a6:49:39:27:b4:09:d5:f8:3f:7d:98:dd:3c:
                    6a:71:ca:b0:93:e4:a7:cf:54:04:9a:b4:3b:bc:ee:
                    28:77:7d:06:d4:19:19:30:f4:96:89:1c:41:e0:bb:
                    75:a4:84:65:0c:f8:4d:80:50:3f:99:4a:60:5b:eb:
                    aa:66:ab:42:d6:c4:ab:be:f1:7e:13:2b:31:79:97:
                    dc:91:f3:2a:cb:98:2e:2e:58:fb:41:16:1b:36:90:
                    80:75:83:31:ff:2e:27:0c:02:2a:0d:a2:d9:c5:b1:
                    fb:29:99:dd:d1:65:f6:e7:3a:bf:21:ff:54:e7:d3:
                    95:01:59:28:94:10:c1:a8:f9:70:98:57:a0:9d:d7:
                    08:a3:99:78:83:86:29:77:e3:ea:22:0e:ad:0d:7a:
                    80:ae:65:41:90:c0:37:5d:42:96:29:03:af:fc:c6:
                    cc:17:94:df:22:a8:50:ce:1f:e5:86:2d:6d:fe:b0:
                    f1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:89:AA:18:40:7B:EF:8A:8A:59:1E:9D:34:27:FE:A4:5C:26:B4:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl

            X509v3 Authority Key Identifier:
                keyid:F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:a2:7b:b8:3c:f3:15:84:ef:f0:63:ec:2e:f1:22:cb:bf:
         7c:d6:10:80:40:64:7a:27:bf:92:8d:52:cd:38:67:af:ee:38:
         9a:a4:3a:24:c5:59:f2:c1:3a:8a:11:fb:e6:ef:dc:53:5b:62:
         ef:82:0b:9e:2c:82:58:60:f9:a5:a2:66:41:b1:be:93:29:5e:
         13:59:db:84:ab:2a:4c:0e:af:a2:87:00:1c:e9:c4:1a:a0:87:
         95:c0:49:be:4a:09:3e:43:93:6c:ab:62:5b:70:e3:c6:be:35:
         09:0c:9a:8a:16:c7:e4:e2:2d:29:24:4e:b5:db:b5:8e:be:af:
         7b:36:fb:be:49:c0:39:8d:94:1a:16:9d:fa:9c:69:1a:ad:b2:
         af:b8:fa:33:88:f3:92:4f:2b:95:5c:ca:53:b1:69:b0:48:f9:
         62:12:2f:76:49:bf:7f:62:35:31:4e:c0:71:21:d3:2a:ae:67:
         24:b0:89:c0:0e:1f:87:ca:d0:22:a9:eb:ef:d5:5c:43:e6:f8:
         50:1c:76:8c:22:23:63:5b:8e:f6:58:e2:a2:a3:52:f7:2a:9f:
         ef:e6:f0:56:53:e4:73:5a:64:2c:9b:45:cd:f0:57:a3:d3:65:
         97:96:4f:df:63:8f:c3:8b:75:10:b0:57:0b:87:85:d4:ce:25:
         05:c3:4c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:28:55 2025 by rpki-client