Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa
File:                     d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa (raw, json)
Hash identifier:          XNP4j8SstjwdPvyJNW3px3J8G74K4MrXE+j/pobEQiI=
Subject key identifier:   16:9A:A6:CA:F2:60:82:44:19:6B:B1:9C:4B:ED:40:0F:CF:D1:B9:99
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584AC710F15BB4F2988488394E80
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     18914
IP address blocks:        206.168.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f1:5b:b4:f2:98:84:88:39:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=bd6ca043-4476-40aa-a3f3-01d08c3870a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5f:a8:a7:00:a9:16:78:08:35:8a:fd:3e:9d:
                    f9:6b:b2:2a:07:c4:78:49:04:e0:42:0e:3f:f9:71:
                    f0:d4:82:28:4f:a5:b9:3d:4a:e5:64:67:a4:99:17:
                    44:36:99:3e:ee:c6:6f:58:ae:61:a9:f7:0f:9d:fd:
                    43:c5:0f:2a:45:51:34:b4:0f:d5:99:15:3c:6e:27:
                    8c:42:c0:dc:1e:83:f0:cf:7a:d9:b2:b9:44:09:05:
                    d5:c1:1b:49:97:1c:4d:0a:d9:5b:4b:c0:8d:65:e4:
                    c9:d9:e7:46:ea:f8:9f:e3:00:fd:a4:bd:30:69:88:
                    97:ac:b2:42:f5:8c:a0:28:e5:93:7b:ec:89:b8:d1:
                    d1:a5:99:c1:1c:a1:f1:5f:b9:a0:b5:ad:9b:b8:a3:
                    eb:34:54:f3:ec:eb:52:bc:1f:64:aa:f8:c3:1c:ea:
                    bb:65:a0:f9:04:1a:c0:b8:43:37:9d:06:dd:d3:42:
                    fe:27:af:01:42:1c:d4:80:45:6b:aa:49:e1:57:6b:
                    5e:95:d2:af:aa:a5:10:69:de:a4:56:0c:29:85:96:
                    31:91:ef:f3:b0:79:7a:c5:99:a4:b3:be:0b:0a:da:
                    a6:9d:8b:96:e4:54:4d:44:7b:da:49:b0:d3:17:44:
                    aa:8b:dc:f0:f7:a2:0d:df:37:4e:05:53:fa:14:58:
                    26:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9A:A6:CA:F2:60:82:44:19:6B:B1:9C:4B:ED:40:0F:CF:D1:B9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e5:59:21:d0:a9:c0:40:81:7f:19:61:d7:43:c0:83:c6:81:
         f4:72:1d:63:5e:73:bd:45:58:bb:68:1c:a3:34:01:4f:c7:dd:
         c9:5c:76:c1:58:04:e9:8a:b6:ca:de:c4:2d:f6:4d:9b:7c:20:
         e0:1f:a2:61:ef:c7:1c:7f:f1:bc:45:21:87:18:07:20:f4:bb:
         38:05:6f:59:56:e7:bd:b1:af:4f:35:bb:84:ee:8c:76:58:29:
         22:71:8f:9e:9b:67:e4:4b:3e:cf:30:17:95:f9:e3:6b:33:8a:
         bc:66:4c:cf:72:5f:b0:1b:9e:44:e4:43:13:23:91:c3:15:3d:
         4d:ba:d7:1c:7d:1c:de:4a:66:09:be:25:ae:3d:d2:40:93:21:
         76:98:08:c1:b4:f3:b4:12:ab:e1:75:59:a4:9d:a9:41:ae:31:
         65:f8:40:76:4a:77:0f:dc:80:8d:7c:a5:18:28:d8:91:f7:bf:
         7a:9e:35:c9:e9:92:3a:2d:2d:22:96:f1:58:cc:b2:9f:d8:50:
         16:b2:5a:36:ed:9d:a6:41:8f:e4:bd:74:ea:06:93:fb:07:8b:
         0b:f7:cd:e1:c9:d8:56:f7:75:95:46:8c:c3:49:1e:16:c9:56:
         75:42:4e:34:61:60:4a:96:af:71:71:b8:62:48:3a:79:ab:65:
         24:43:88:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:44 2025 by rpki-client