Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/17c85b52-7b40-341c-bb83-6a1f853d2d99.roa
File:                     17c85b52-7b40-341c-bb83-6a1f853d2d99.roa (raw, json)
Hash identifier:          1AVwOazpQqOz+JPiW/XJmfC4gYbcIXCGRyf0exwqKGQ=
Subject key identifier:   04:63:F2:4E:ED:15:51:13:48:FA:60:39:E7:8E:E3:91:84:04:76:0B
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584AB91B941C7B146424F38C3F80
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/17c85b52-7b40-341c-bb83-6a1f853d2d99.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14436
IP address blocks:        206.108.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:94:1c:7b:14:64:24:f3:8c:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=2c9d9bbe-c97e-4bd2-af86-4c86ad280ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4a:21:a9:cb:9a:69:df:0f:33:67:b4:20:b6:
                    83:fc:48:a2:05:c7:01:b7:58:9d:9a:4e:cd:82:9a:
                    2b:55:ef:59:b7:f4:a8:fe:25:62:e8:ab:3e:4d:28:
                    9d:c9:e4:f4:87:d5:dc:b4:a6:81:90:d8:5b:45:91:
                    bb:ba:44:b7:3f:00:0e:1d:11:7e:0f:fd:06:86:db:
                    82:b6:48:48:cc:51:89:c1:b6:b6:39:62:e2:78:7e:
                    6a:d4:5d:04:86:d6:3b:27:c6:49:c6:5a:76:d6:86:
                    65:6a:b9:cd:d9:31:1b:b7:e2:44:a8:f0:84:ce:bb:
                    47:5b:09:4e:bc:55:ea:3d:da:58:2c:1a:e0:49:00:
                    a3:6b:38:ac:71:eb:21:f0:34:8a:16:58:f4:fc:4b:
                    a9:d9:59:c4:f9:71:cf:84:98:bd:47:72:5d:77:a8:
                    60:f3:b7:b2:8e:7c:9d:fc:47:4c:ec:f7:fc:85:e1:
                    72:c1:ea:86:bc:a6:75:24:3c:57:3f:35:2f:9a:76:
                    11:e2:7d:cb:ae:2e:26:a1:57:78:ce:0c:4d:b1:dc:
                    e2:f6:53:b8:94:f2:da:a6:ad:ab:e6:b6:4e:8f:f6:
                    45:40:14:6a:54:2d:9e:ad:15:6c:4f:68:14:55:c4:
                    ce:dc:6e:04:78:cd:ea:fb:d5:88:3d:1e:6f:38:21:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:63:F2:4E:ED:15:51:13:48:FA:60:39:E7:8E:E3:91:84:04:76:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/17c85b52-7b40-341c-bb83-6a1f853d2d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:d8:7a:56:f1:2a:75:4e:77:ef:97:5d:0d:02:cf:b4:9f:
         01:fd:85:fe:be:d5:3c:eb:31:38:12:33:51:ba:36:9c:af:35:
         63:91:d6:93:87:89:dc:f7:64:2d:fc:b6:8c:19:34:62:ec:a2:
         70:67:ac:7d:a4:0d:dd:44:36:21:99:37:86:83:66:6f:a1:b0:
         5e:32:46:7f:4a:e1:ac:20:de:7b:90:bc:5c:c0:6f:dc:59:96:
         d4:bf:b7:28:0a:48:3c:f8:c3:75:24:78:03:63:16:a7:0e:cf:
         71:5e:e3:07:07:8b:5d:9e:87:c3:80:5a:42:db:d9:81:7f:00:
         37:78:51:ea:1f:d5:0f:78:20:db:5d:3b:52:af:ba:f4:5c:97:
         b5:b6:16:b6:59:21:1f:19:32:20:04:35:18:49:5a:bb:27:b6:
         46:6f:d1:31:58:29:6d:48:d5:03:25:df:d8:0b:13:64:d0:60:
         fd:21:d9:31:88:51:8f:4d:4d:5e:98:a7:55:b9:14:87:d3:57:
         ef:c4:fc:4b:b3:2c:89:63:cc:c8:f9:90:29:e9:f2:77:31:7c:
         38:0f:a1:3e:8f:f8:8f:99:4f:8d:b0:c6:e0:b2:8c:18:0f:e8:
         36:71:a6:42:e1:f9:c5:58:87:8a:06:4f:9c:f6:5d:6f:4f:1a:
         25:2d:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:28:36 2025 by rpki-client