Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/a8d95147-2bf2-381a-b436-c637c0802b79.roa
File:                     a8d95147-2bf2-381a-b436-c637c0802b79.roa (raw, json)
Hash identifier:          pwcQJJLrgwzEDZqDXy0/2kW19cC7BM+VlzdlbIGqj90=
Subject key identifier:   7F:3C:6D:9D:6E:6B:74:12:B2:AC:54:49:D5:8C:20:57:83:19:43:48
Certificate issuer:       /CN=03d20efd-729c-46b2-b268-510d1f9f7dd3
Certificate serial:       010D0C9F4328584AE461132714F415CDDA234580
Authority key identifier: EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/a8d95147-2bf2-381a-b436-c637c0802b79.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     393424
IP address blocks:        206.108.0.0/24 maxlen: 24
                          2602:fde5::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:13:27:14:f4:15:cd:da:23:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d20efd-729c-46b2-b268-510d1f9f7dd3
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=5cc8296a-fd35-4051-871e-04ac846eccc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:22:5d:e9:6e:fd:93:76:b6:3a:b6:46:bd:dd:
                    24:7b:e3:22:d2:ad:ab:dd:37:22:db:83:82:14:13:
                    8c:dc:a4:8d:66:ef:f9:b8:b7:0e:b1:08:22:96:e4:
                    14:58:e9:d8:28:e7:20:11:15:7e:4c:4e:0f:39:8f:
                    43:c1:fc:cc:bf:27:ed:d7:8f:12:11:d7:fe:e8:15:
                    86:92:c5:a9:01:9d:6c:8b:c0:f4:2d:99:ed:03:3a:
                    0b:54:bc:fb:5a:8f:0f:d6:01:af:32:9d:a3:2b:97:
                    1b:cb:9a:37:8a:47:eb:85:db:68:1c:b6:cb:11:9d:
                    ae:3e:69:07:79:a6:4d:05:5b:94:93:68:52:eb:59:
                    7b:34:11:97:0c:f1:ed:02:49:a8:4a:71:13:29:38:
                    ce:16:3e:55:81:73:21:90:64:af:dc:2e:7a:ee:b9:
                    dd:a3:7a:86:b0:10:e2:d7:bb:a6:da:37:f5:a4:18:
                    a4:36:c5:24:be:c7:36:52:8c:88:ac:12:97:e3:4a:
                    56:9a:25:bd:53:f5:f8:d9:5d:fd:e6:f1:24:6b:1a:
                    96:78:68:7e:43:1a:ab:a4:3b:e0:f3:02:2d:2d:30:
                    cd:72:4f:0f:32:8a:5d:f9:fc:54:ae:2c:f9:ce:21:
                    2c:de:ad:0b:39:f3:db:c2:f1:ac:f0:19:21:b3:5b:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3C:6D:9D:6E:6B:74:12:B2:AC:54:49:D5:8C:20:57:83:19:43:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/a8d95147-2bf2-381a-b436-c637c0802b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.0.0/24
                IPv6:
                  2602:fde5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ba:a7:95:38:15:5e:03:52:34:06:92:a2:75:e1:5e:90:af:
         02:e4:8e:f5:01:5e:98:0f:a7:7e:89:c0:e2:e4:60:e0:d4:d2:
         d5:ea:b7:ed:02:e8:8b:60:89:f1:67:85:12:7f:4f:db:84:1a:
         75:27:48:81:0e:b7:5d:88:e1:b2:2c:34:aa:18:6b:63:74:af:
         55:93:8f:39:ee:d7:4a:a2:f2:4d:81:51:49:15:ab:a3:b6:f0:
         a7:f5:6a:57:01:6c:e7:d7:ed:84:bf:06:97:bf:8f:14:70:7d:
         79:3b:68:34:d6:18:4f:52:48:a5:df:8d:75:19:07:f5:27:7a:
         ec:26:be:15:07:9f:f9:5e:98:b4:79:e1:01:2c:11:bc:fa:f1:
         4f:30:8a:37:4d:7f:fe:90:cd:17:24:24:14:63:80:a5:9f:8b:
         d1:71:90:9e:6d:1c:64:81:08:5e:74:1c:02:fd:d9:59:c0:a7:
         2e:fc:cc:62:5b:5a:71:38:51:38:03:0e:47:a5:ff:3a:55:35:
         79:cf:20:a1:54:a7:29:d9:3c:33:f3:61:f1:66:c3:94:9c:23:
         23:0a:f8:14:10:69:22:2d:7d:79:ba:79:d7:6c:a9:ed:29:13:
         8b:9f:ff:80:fd:d2:e6:c7:99:b8:21:90:f1:a6:57:4d:50:e8:
         40:32:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:52:36 2025 by rpki-client