Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/949fd351-dfc7-3189-bd04-5299a70b031d.roa
File:                     949fd351-dfc7-3189-bd04-5299a70b031d.roa (raw, json)
Hash identifier:          b7kSVqfD8tkvlH+YrHduEeWxzNw92ImP86CPxgty1wY=
Subject key identifier:   50:19:F6:28:58:7B:BD:17:95:D0:A6:5D:90:08:13:3F:46:AD:3E:C7
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584AF25687F900ED6FE6B8B12500
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/949fd351-dfc7-3189-bd04-5299a70b031d.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     6079
IP address blocks:        206.71.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:87:f9:00:ed:6f:e6:b8:b1:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=2043e984-0c6f-4fe0-9996-30b29e5cc0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:37:2d:d6:21:9d:12:57:64:3b:2a:7e:af:ae:
                    30:c0:f8:de:0f:fe:ae:f6:e4:b4:9c:ca:7b:66:b2:
                    18:78:ee:b4:8d:1e:58:53:4e:e6:26:e9:56:71:f9:
                    1c:45:f9:89:d0:48:6a:f2:39:fe:26:86:a6:40:77:
                    f1:2a:e0:d3:a5:46:1c:55:40:46:05:d3:89:32:ec:
                    f8:2c:d5:17:02:2c:36:ef:16:61:18:95:cd:4c:ed:
                    76:a3:81:fa:5c:49:6f:b9:d4:63:25:f9:b5:0f:5a:
                    ca:81:37:8f:8c:06:cc:86:12:db:fb:a7:7f:b8:14:
                    a1:c6:29:b3:f8:30:c0:be:59:32:8f:c5:16:b1:d6:
                    ad:5e:8b:e2:93:63:cf:51:8a:65:22:8d:6f:07:e3:
                    eb:71:28:e0:29:b7:06:e6:17:cb:51:b0:14:2b:b3:
                    1a:80:6d:00:37:3b:c9:29:b2:15:ef:2f:a4:91:7d:
                    fd:83:86:e5:76:0c:f5:52:ea:23:29:8f:d1:31:2b:
                    8e:85:c5:f2:a3:20:8e:80:30:b7:75:9e:a2:ee:c1:
                    62:c7:59:4d:cb:d8:bf:75:98:a4:cb:88:e6:50:e9:
                    74:20:50:48:1a:a0:2b:6c:67:ee:b9:f5:ed:3b:b6:
                    c0:88:29:0e:90:4e:2d:64:fa:3a:e5:b4:01:18:6d:
                    52:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:19:F6:28:58:7B:BD:17:95:D0:A6:5D:90:08:13:3F:46:AD:3E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/949fd351-dfc7-3189-bd04-5299a70b031d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9f:12:cd:da:5f:2a:f4:fd:b1:83:08:82:a9:bc:18:fa:85:
         3c:4f:12:5d:24:5a:7a:34:19:a9:2a:17:85:72:a7:18:a7:f5:
         16:a7:85:e8:dc:f0:de:f6:cb:95:87:9e:81:4b:3f:7e:f9:ed:
         37:51:6b:10:18:d4:f9:14:f6:4d:da:63:59:b0:7e:91:79:78:
         b4:41:a0:28:ce:cc:89:c5:f6:2b:ff:b9:9d:80:7c:d6:5d:97:
         33:b2:30:95:e2:36:72:f9:45:d3:35:47:90:88:6e:67:8d:28:
         5b:84:ee:c7:84:94:f1:8e:d1:c6:90:21:67:78:19:6d:9a:29:
         13:05:40:be:f8:f9:20:4a:f0:05:18:23:43:c3:f3:8a:ed:a3:
         85:80:3f:7d:b4:4b:13:86:6a:75:47:a5:a6:0b:e7:32:24:57:
         2e:28:92:6b:3b:8e:1e:8c:9b:35:ef:bc:6a:24:31:43:6d:dd:
         82:63:c4:65:4a:32:81:96:eb:d9:eb:a8:a0:95:d7:ac:76:b7:
         c0:3f:54:d5:38:dd:cc:37:5e:0f:fa:99:91:45:cf:22:e8:4e:
         4f:9d:37:a6:64:87:e1:98:e4:64:88:46:28:08:ed:31:3c:e2:
         a9:98:af:2b:6f:cc:69:8f:21:d2:58:ad:ab:98:9b:e9:e4:a1:
         ac:00:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:42 2025 by rpki-client