Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/bb36ecd2-27c3-35c9-ab07-25bff0637f24.roa
File:                     bb36ecd2-27c3-35c9-ab07-25bff0637f24.roa (raw, json)
Hash identifier:          ZK+tt6KjtRk8EoNJIBpYU8UaSFDXRifQttJOWoMocjI=
Subject key identifier:   D2:B8:B2:F3:6A:9F:0D:E0:71:CD:50:11:FE:D6:C0:4C:08:E5:77:6E
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584AA42B77AD49D2AC924CAB6440
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/bb36ecd2-27c3-35c9-ab07-25bff0637f24.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     13916
IP address blocks:        205.220.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:77:ad:49:d2:ac:92:4c:ab:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=4a8eea9a-0c64-4007-84e0-413a18d2bed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:96:9a:d5:ab:6f:be:c7:26:fa:25:fb:cc:45:
                    d8:d2:85:fb:4f:f7:f0:20:48:70:fc:a0:0d:fc:0e:
                    1e:50:51:40:09:5c:f6:0b:c7:64:ac:76:7a:08:9f:
                    19:54:77:19:41:b0:bb:20:e3:74:e4:84:f4:b3:45:
                    a3:d7:37:cd:25:9a:c5:01:4d:f3:24:c2:78:93:39:
                    bc:b1:51:f5:04:db:7e:18:69:7e:39:47:89:59:59:
                    fe:65:3d:f2:90:62:b4:d5:0b:be:5f:17:ed:09:06:
                    81:91:a6:c7:bd:ca:5a:fa:d2:89:d1:91:2e:0d:9c:
                    ed:13:1f:cf:35:04:42:76:cc:87:e1:5b:70:3a:3e:
                    65:5b:32:b7:fb:7d:e9:dc:4c:34:cd:5e:39:77:d3:
                    6c:5f:91:b0:fc:3f:ab:c8:a5:0c:a2:bf:04:1e:34:
                    bd:63:2a:6c:5b:ca:81:77:3a:ef:0e:a9:37:f6:11:
                    84:af:77:a6:11:18:dc:38:36:14:23:1b:79:44:d7:
                    26:94:73:32:a2:17:a4:52:92:11:d3:ca:6a:47:3c:
                    b9:1e:ec:38:3f:dc:4c:e8:7d:37:d0:f2:17:8e:bc:
                    72:e8:fa:7f:e9:e8:65:c7:a9:cd:29:c5:cb:5e:45:
                    b0:79:9b:b7:2a:77:e3:ff:fb:32:cc:52:87:f1:82:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:B2:F3:6A:9F:0D:E0:71:CD:50:11:FE:D6:C0:4C:08:E5:77:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/bb36ecd2-27c3-35c9-ab07-25bff0637f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:5a:d9:ed:df:cd:71:43:5f:1a:d9:27:27:1c:41:e0:7f:35:
         5f:24:b3:37:28:f0:2b:80:46:44:3a:0c:52:f7:08:8d:9f:47:
         44:34:d8:2b:1d:08:35:73:39:f3:31:00:66:e6:58:51:b6:7a:
         27:c0:6d:80:40:42:6a:60:46:40:a9:da:a9:b0:13:b1:fc:c4:
         28:51:4e:93:58:64:df:4f:67:a3:68:ce:13:84:6f:b3:53:8f:
         f3:47:aa:5c:a9:ea:f1:26:22:15:54:fc:04:a0:eb:11:46:5b:
         fa:18:3a:79:96:aa:7a:2d:09:26:5b:36:75:54:b8:c2:29:3a:
         87:bf:7c:a3:b7:0d:af:22:0e:1e:69:3c:60:e3:ab:24:40:63:
         c1:61:5d:bf:b8:57:4f:d2:4f:4b:98:36:1b:ea:49:9f:51:28:
         09:2f:ce:8d:f3:f9:77:52:34:12:e8:2b:97:cd:ed:28:d8:71:
         51:3d:e4:e9:81:31:e7:c8:69:f2:04:1d:44:b7:ec:20:e9:a1:
         44:c7:ec:81:05:83:c5:ac:87:92:27:6e:88:1c:02:2a:b3:f8:
         a9:c8:97:10:40:cd:10:7f:56:81:b0:18:13:c1:c3:f6:23:f4:
         5a:1b:a2:da:bc:d1:d6:df:94:ca:9b:97:c1:40:8d:d1:51:c8:
         b3:81:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:50:58 2025 by rpki-client