Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/d79943c6-e491-304d-bc93-09d1a586c483.roa
File:                     d79943c6-e491-304d-bc93-09d1a586c483.roa (raw, json)
Hash identifier:          29KVQTQVgFxK7zECzDPhfab8hAUzSmTBTLCCMTKcm4o=
Subject key identifier:   26:21:99:7A:FC:39:64:7C:06:1A:8D:2F:E8:73:A1:74:2F:22:E0:A5
Certificate issuer:       /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial:       010D0C9F4328584AC710EB74552238A6320D1600
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/d79943c6-e491-304d-bc93-09d1a586c483.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     7029
IP address blocks:        206.174.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:eb:74:55:22:38:a6:32:0d:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=c8fe8c01-0376-46ca-96f2-2e150d23175e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:fe:51:5f:79:d2:4e:4f:62:b3:56:a5:2d:
                    aa:7c:3e:59:32:1e:db:e3:aa:f0:2d:da:f9:9a:63:
                    23:4d:17:09:7e:0d:c0:23:9e:f4:1b:3b:a8:d0:9a:
                    89:e9:f5:44:49:e3:3e:63:48:26:de:11:dc:e1:f9:
                    8a:a5:d1:29:d0:79:5c:78:b0:c8:37:b7:be:d0:7b:
                    af:38:34:b8:0b:8a:81:9e:2c:51:39:53:a8:31:a3:
                    bb:d0:fb:35:39:cb:0f:da:49:50:a1:e5:6a:55:67:
                    8b:4f:f6:de:b9:be:9f:98:f8:7a:de:b2:74:a4:c9:
                    f0:56:66:54:53:e1:b9:71:f8:4b:21:c3:35:17:8b:
                    dc:00:4e:7b:72:99:c5:35:6a:d3:79:b2:56:9f:a9:
                    ff:92:76:ad:b3:c8:6a:c1:f4:ec:b9:85:cf:7e:a6:
                    e7:26:ab:97:ba:3e:49:28:27:03:54:c4:de:92:d1:
                    4f:62:44:ab:a5:05:0b:9b:63:33:9a:7d:ff:8e:f8:
                    e0:10:b9:18:c3:36:9f:df:c1:1c:f5:0e:b8:38:94:
                    95:3b:9c:8e:57:a2:ae:23:19:97:06:9c:a4:68:32:
                    01:62:01:85:af:b4:ef:6d:81:da:f8:dd:d8:d4:06:
                    d1:3f:61:13:b6:97:68:35:23:51:a8:72:01:b7:e4:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:99:7A:FC:39:64:7C:06:1A:8D:2F:E8:73:A1:74:2F:22:E0:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/d79943c6-e491-304d-bc93-09d1a586c483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.174.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:dc:be:f5:45:28:f9:64:39:e6:6d:80:8b:60:a1:55:4f:
         4b:fe:e2:75:90:f7:f2:cc:fe:38:16:54:3a:89:4f:f4:d8:e7:
         ea:97:af:84:ac:2e:33:73:76:6b:19:36:0d:eb:e3:7b:a6:ca:
         5e:8e:3c:30:d2:cc:40:e3:6f:bf:30:6d:37:e5:c4:8e:f7:42:
         db:3b:b4:1d:95:45:1d:e2:dd:2c:5a:30:00:f7:fc:75:9a:3c:
         69:7e:55:96:7c:4f:34:e8:48:8c:9c:8e:a6:a2:7b:80:a7:2b:
         78:7f:ea:b8:cc:8b:9a:be:d1:09:42:99:8f:13:82:bc:cf:3c:
         8d:b2:86:d5:62:8f:31:3f:0d:fe:e8:93:bb:ae:ce:0f:dc:68:
         2d:90:51:a5:2a:bd:a4:cc:9c:3f:b4:18:21:64:de:eb:a3:cb:
         43:f4:87:a7:68:38:4c:79:ef:f8:cd:63:74:54:b7:2c:33:01:
         d6:de:26:67:e7:b2:63:aa:04:50:92:16:f4:34:d1:62:02:2c:
         9d:6f:f5:6d:81:77:f3:4f:15:a3:bb:41:7d:af:57:d1:26:d5:
         a1:45:17:51:2e:eb:71:33:fa:da:6f:09:fc:ce:60:ef:28:96:
         35:73:28:79:51:06:b2:a7:62:af:e3:6b:31:08:06:cc:0f:bc:
         df:11:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:53 2025 by rpki-client