Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa
File:                     69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa (raw, json)
Hash identifier:          a9edltfSBLbvn2PRCStfEhffHsH/WmtnhDZIhXq+l+c=
Subject key identifier:   E9:FE:EC:63:DD:DB:7E:FF:25:E1:92:57:28:A2:4F:C4:06:B9:BD:01
Certificate issuer:       /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial:       010D0C9F4328584AC710EAF8BAB8173279FAD080
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     7029
IP address blocks:        206.174.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:ea:f8:ba:b8:17:32:79:fa:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=eadd8f86-7283-4f68-8b17-384cda692e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:8f:40:7e:71:6a:bd:d3:9a:62:7c:79:59:
                    23:0e:11:11:8d:ed:d9:e9:bb:dc:f8:e5:4c:ba:88:
                    bf:90:78:9b:8e:23:92:fe:c8:18:d1:25:cc:db:33:
                    78:1b:b9:74:79:ea:d5:2c:76:b3:bf:8a:1a:9e:d2:
                    51:de:a1:0b:e0:64:c9:ac:1d:22:34:4a:33:72:4b:
                    e2:45:ad:52:48:57:f9:5b:bd:eb:0e:fd:90:17:66:
                    5c:62:fd:ec:1e:e0:f9:c6:6c:3c:f9:78:93:bf:a2:
                    d6:e9:26:73:f7:5c:df:d3:24:1c:9e:55:2d:a6:ec:
                    c5:db:c4:20:1c:10:92:b5:a4:b1:13:21:09:c1:81:
                    63:bb:52:71:73:c0:a2:2a:ea:df:f8:76:95:36:9f:
                    af:4c:b9:cf:1c:f2:55:04:8a:3c:81:09:7e:d8:1c:
                    b5:6a:7b:ac:9a:a8:48:a7:7b:a0:58:88:2b:05:23:
                    29:d1:d0:ea:95:48:2f:3d:34:04:f8:69:53:6a:47:
                    1a:39:a1:5a:17:3f:c5:a5:0d:a8:6d:57:cc:c8:ab:
                    28:6e:c7:fc:bc:bf:71:28:4a:92:70:75:fd:fc:c3:
                    c7:b1:90:e3:ef:a8:5f:32:03:61:07:8f:1c:5c:54:
                    e2:09:21:64:80:dd:52:cc:95:17:7d:40:58:90:a1:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:EC:63:DD:DB:7E:FF:25:E1:92:57:28:A2:4F:C4:06:B9:BD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.174.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:5f:1b:18:4d:08:40:91:d8:54:42:47:34:73:d8:79:c3:
         56:1c:21:a5:1a:fd:5e:5c:42:56:9c:c7:c3:6f:67:d5:ed:7e:
         c2:31:cc:35:2f:d9:ee:c2:e4:ad:5b:1e:2b:f6:c0:3a:43:fb:
         49:48:e3:3a:12:6c:5a:c6:f3:31:e4:50:16:1a:e9:a2:c2:34:
         50:3e:41:83:7f:d6:b0:c6:8a:88:5b:0d:c7:ae:54:68:52:0d:
         16:82:e7:32:61:85:61:ba:54:92:4c:6f:a9:da:95:9c:17:86:
         d9:c4:a3:2e:43:cb:65:1d:e7:21:e5:30:88:3f:a4:64:d9:2b:
         02:8d:ba:ef:c5:c3:51:b2:11:d4:ae:1c:e0:e7:8d:c9:1f:07:
         a5:9e:de:2e:82:86:02:7d:bc:84:d0:4b:e0:e2:64:c8:f6:d9:
         11:46:25:91:4a:81:5a:7a:8d:52:86:60:10:05:11:54:d2:20:
         67:13:30:59:fe:86:af:63:1d:f7:e1:b6:a0:ce:39:9a:c5:16:
         a9:f9:45:ea:40:bf:d3:5b:f6:70:bc:e3:13:43:8d:58:2e:fb:
         8e:a8:27:86:53:9f:f7:ff:ae:9f:ba:cf:85:40:a7:66:e2:a9:
         6c:62:f7:e5:a5:7a:2c:62:49:a0:72:c9:95:63:dc:08:ea:11:
         0e:29:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:14 2025 by rpki-client