Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/6210e133-eb91-305d-b703-1f4e8e26d25b.roa
File:                     6210e133-eb91-305d-b703-1f4e8e26d25b.roa (raw, json)
Hash identifier:          lGl6EvvfGm7mT4bfJ4ZOSZsBL285qaH3mYbfKl8TLTk=
Subject key identifier:   0B:DA:29:AE:C8:9B:A1:91:6C:99:56:C8:CF:6F:E9:D1:76:9C:5A:2A
Certificate issuer:       /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
Certificate serial:       010D0C9F4328584B48E1AE84A0FE4107A64935A0
Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/6210e133-eb91-305d-b703-1f4e8e26d25b.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397122
IP address blocks:        206.51.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:ae:84:a0:fe:41:07:a6:49:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=70038191-e41a-43e3-8de2-9e5a4b47ffea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:ee:6f:18:fd:4c:d6:72:62:b8:39:22:c5:
                    85:8b:e3:42:4d:11:b5:7e:34:ba:50:8b:5e:66:45:
                    32:4b:76:8e:40:7e:63:48:7c:43:ae:98:99:20:41:
                    46:0e:1a:ad:67:eb:db:4e:5d:f6:d6:d9:05:a7:a1:
                    81:41:1f:40:4c:25:14:53:7a:b8:2e:37:97:6f:0d:
                    79:78:66:04:7b:26:64:59:bb:97:70:ee:ee:19:0a:
                    e4:f7:c9:89:d0:6c:94:fc:03:71:42:f8:7e:ac:0f:
                    84:b7:6b:f2:b4:dd:0a:9d:84:05:dc:c8:6a:ae:5f:
                    22:de:69:14:ef:57:65:7c:35:16:5e:7e:84:49:97:
                    c5:5c:ae:e1:0e:53:05:41:67:96:be:f5:c4:c0:09:
                    5c:99:a5:ad:62:42:fe:04:14:9d:77:ea:cc:52:0c:
                    5d:23:f4:16:0c:77:a6:40:48:a1:9b:14:1a:8c:9b:
                    7e:8f:7c:e8:52:06:60:f0:b3:18:43:78:78:8c:3b:
                    47:e2:05:80:f9:6d:bb:71:37:9d:27:6e:26:48:1d:
                    d5:90:40:40:a1:8c:15:ed:77:99:d6:34:3b:5c:87:
                    24:af:c7:32:3a:52:9d:08:2a:73:80:a7:69:23:2d:
                    18:0d:57:c8:e2:16:63:b3:1a:e6:78:4b:38:fa:84:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DA:29:AE:C8:9B:A1:91:6C:99:56:C8:CF:6F:E9:D1:76:9C:5A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/6210e133-eb91-305d-b703-1f4e8e26d25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl

            X509v3 Authority Key Identifier:
                keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.51.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:4b:d2:05:df:7b:60:88:ba:e7:5f:5d:9e:bd:9a:7e:d7:aa:
         de:93:3b:e9:6e:a1:e4:bf:00:fc:8b:34:c7:5e:be:0f:e6:8e:
         17:1e:98:a7:7c:0a:3e:4c:84:f5:fd:fd:10:c9:31:bd:33:f5:
         56:33:e7:a9:10:75:2c:68:34:c9:69:a4:bc:2c:de:94:03:a9:
         ec:cf:d9:98:6e:3d:6d:6b:03:29:3f:cc:ec:66:94:17:07:d9:
         3d:1c:84:46:67:0a:4c:c2:70:b9:f6:8c:a0:0d:ba:43:4d:f8:
         dc:9d:55:bb:bc:0f:7e:ca:66:b0:ea:a9:fc:96:b6:b1:a2:07:
         e1:64:85:94:51:ee:7b:2e:ce:b5:cb:90:6e:34:d1:6e:c8:8c:
         6e:3b:46:d7:77:7b:ca:c3:b8:11:38:8e:32:c2:4f:e8:23:19:
         cc:2c:3f:60:c1:10:3d:d4:f8:c2:f8:55:99:21:a7:98:1c:ba:
         b1:c2:0b:91:31:a9:68:16:58:a1:7a:7d:78:ce:3c:99:82:0a:
         ca:0e:44:c2:78:46:53:e9:d1:23:a9:b6:3d:a8:04:eb:f2:bc:
         1f:18:10:60:2a:c8:0c:d3:b7:54:c4:ac:cb:0c:e3:51:04:f2:
         7a:15:9e:17:1c:76:a8:66:b7:9d:ad:87:e8:9c:27:55:f0:bf:
         1b:b7:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:51:45 2025 by rpki-client