Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/6610a540-be97-3ab0-a99d-2e917411ed39.roa
File:                     6610a540-be97-3ab0-a99d-2e917411ed39.roa (raw, json)
Hash identifier:          8D3pPfNHru4qEPUITMNYSC2dNvg1XtJrHDS7jF22Cjg=
Subject key identifier:   06:15:88:8E:FB:DB:8C:AB:F2:CF:4C:7D:7B:97:32:78:90:4D:AA:88
Certificate issuer:       /CN=1bdc33c8-ee14-4bda-ad4b-1789049b3217
Certificate serial:       010D0C9F4328584A23C00432574FAC68438062C0
Authority key identifier: 1F:AC:A9:52:3A:45:24:C6:FB:9E:9D:BA:3A:70:BC:F8:E7:C0:18:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/6610a540-be97-3ab0-a99d-2e917411ed39.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     933
IP address blocks:        173.195.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/1bdc33c8-ee14-4bda-ad4b-1789049b3217.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/1bdc33c8-ee14-4bda-ad4b-1789049b3217.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:04:32:57:4f:ac:68:43:80:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdc33c8-ee14-4bda-ad4b-1789049b3217
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=cce437ab-7fc1-4328-8e13-1a88b7cab1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:6c:22:bf:7d:00:9f:f7:9b:e4:19:c2:79:
                    c3:40:f1:b6:99:19:8c:19:3c:49:32:92:ef:ba:4c:
                    61:7e:ca:4d:38:e7:8b:d8:fc:ca:8e:0d:27:67:e4:
                    b6:04:5f:5c:1d:d4:6d:2e:e5:e1:b5:7d:87:8e:54:
                    d1:43:1e:d6:21:5c:69:23:2a:fc:86:73:75:da:9e:
                    74:d0:1c:89:ee:d4:4e:86:22:21:50:9f:0a:ac:93:
                    47:29:52:9a:1d:3a:7d:df:9a:6e:76:68:9e:50:66:
                    e5:8b:e1:41:4a:d0:e6:6b:2b:00:3e:27:4d:d5:ef:
                    33:12:ca:c9:ee:85:e5:1d:a8:c6:65:9d:c5:35:fa:
                    9d:17:fe:00:83:3b:90:0f:3e:63:dd:82:ba:0f:53:
                    12:19:ae:0a:9a:09:45:ad:22:65:b9:24:28:98:43:
                    72:d8:9d:18:a9:3a:d3:80:a6:65:26:d3:77:f7:e8:
                    70:36:d0:65:91:fc:a7:b8:cd:13:83:f5:6a:01:6a:
                    65:57:d4:51:80:7c:82:e6:d5:20:77:80:7b:b1:da:
                    57:83:35:c4:e6:ca:09:4f:44:6b:62:80:f6:14:2e:
                    84:b8:9a:de:6a:ef:e5:0d:a5:19:2a:11:a5:76:95:
                    e7:a4:13:53:6e:54:ac:6a:f2:af:ee:e8:29:e4:ff:
                    e1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:15:88:8E:FB:DB:8C:AB:F2:CF:4C:7D:7B:97:32:78:90:4D:AA:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/6610a540-be97-3ab0-a99d-2e917411ed39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217/1bdc33c8-ee14-4bda-ad4b-1789049b3217.crl

            X509v3 Authority Key Identifier:
                keyid:1F:AC:A9:52:3A:45:24:C6:FB:9E:9D:BA:3A:70:BC:F8:E7:C0:18:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1bdc33c8-ee14-4bda-ad4b-1789049b3217.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:cb:fb:8f:ad:ae:af:d4:14:e9:5a:92:0f:3b:a7:4a:28:
         a9:78:2f:95:51:c3:b1:b2:7d:ab:6b:da:e5:02:47:bb:9b:be:
         a2:4e:9d:58:56:02:81:7c:74:9d:4d:7d:3a:0a:8f:5a:f6:5c:
         e5:b9:0a:93:b0:0f:c7:62:cb:b1:c5:23:b9:9a:c2:eb:16:64:
         d0:e6:62:93:49:03:dc:2e:fe:b7:d7:9d:1b:16:dc:9d:48:8e:
         4c:24:62:e0:f6:5a:c3:6b:43:33:6e:ae:b6:65:63:90:b3:55:
         33:00:c5:74:91:4a:10:60:1d:52:18:dd:aa:7c:87:b2:e1:19:
         b5:8a:af:72:02:a6:eb:78:9f:b9:f7:ef:23:d9:dc:e1:2b:b2:
         37:01:3c:69:ca:0b:f1:b9:ce:f2:8b:6b:b7:dd:c0:99:0d:87:
         eb:be:88:07:a8:90:7a:79:34:d0:87:19:23:6b:4f:e3:b1:cf:
         a3:cd:b7:0e:9a:0a:39:1d:4a:d9:06:db:da:f1:4a:9d:84:60:
         36:12:69:b8:b2:fa:20:c8:06:f5:f2:e6:9e:0f:25:ab:5e:6e:
         3a:78:ca:f4:81:06:4a:18:e6:7a:a0:2c:5a:3a:b2:ea:90:c4:
         15:39:27:21:25:ca:1c:be:81:38:a7:5b:19:16:13:68:b4:ec:
         64:d8:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:58:10 2025 by rpki-client