Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f6306b-c2ef-317a-b077-b01c1b216d0e.roa
File:                     46f6306b-c2ef-317a-b077-b01c1b216d0e.roa (raw, json)
Hash identifier:          IMbSRXetpPFXo1YKx7f83VxgsEJJqRzQ4q81DaugMns=
Subject key identifier:   9B:74:57:9E:B9:C0:84:97:B4:B1:4D:94:72:62:EF:C2:22:D0:66:78
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A268AC74FD084A1623B0F3580
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f6306b-c2ef-317a-b077-b01c1b216d0e.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     9009
IP address blocks:        172.111.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c7:4f:d0:84:a1:62:3b:0f:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=282d717e-0f4b-4612-a438-c5a86b1e2bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:46:77:57:c9:51:6e:75:1b:b1:60:b6:ba:
                    18:52:d0:96:52:39:7a:4f:f6:95:e5:2a:96:36:bd:
                    79:60:ca:57:ac:56:7a:6d:8e:de:10:a8:02:d9:52:
                    62:80:f4:49:23:97:c9:98:37:15:9e:8f:34:06:66:
                    c9:2b:2f:c6:b6:fb:23:1b:6d:8a:86:f6:8b:08:bf:
                    ea:a1:74:b3:ce:aa:5b:df:bf:98:03:8e:33:6c:f0:
                    ec:af:20:a8:a6:3b:e4:df:a2:c6:8e:45:7a:9a:31:
                    e5:d0:97:d0:56:94:62:65:ad:bc:01:84:02:b2:3b:
                    55:25:1e:7a:bc:c2:2b:ff:ae:23:ab:dd:61:e3:a0:
                    2f:51:71:12:d3:bf:d7:56:dc:83:e4:ed:81:9d:b5:
                    e2:26:38:55:ef:cd:ca:2e:b5:13:4d:96:b1:f0:98:
                    6b:de:f5:b0:b5:8b:5f:47:40:4b:6b:f1:85:93:96:
                    0f:0a:1b:3c:67:92:26:10:f3:e8:c8:d3:4d:0d:fb:
                    ae:82:38:6a:ac:75:6e:cf:22:2d:02:57:47:a0:e3:
                    d7:23:3d:4b:90:07:02:53:3a:f4:58:a4:2a:5a:e0:
                    66:1b:af:48:94:37:e0:6e:c8:3e:c7:16:12:49:6c:
                    71:11:5e:4f:4e:53:1e:3f:15:36:65:fd:08:2c:e3:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:74:57:9E:B9:C0:84:97:B4:B1:4D:94:72:62:EF:C2:22:D0:66:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f6306b-c2ef-317a-b077-b01c1b216d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ab:f3:e6:d9:ef:48:c0:4b:09:26:5c:a5:0c:24:2f:0f:c0:
         95:6b:ca:d8:42:d1:34:59:58:7a:ce:28:a4:09:75:d1:69:c4:
         16:a8:b3:a3:ee:a8:3a:29:c7:86:30:a9:9d:20:df:25:e8:30:
         82:6e:6f:53:1c:01:c6:f1:dd:d9:3c:1a:7d:06:e5:2c:45:a0:
         86:99:c4:e5:20:2b:a1:d7:7f:97:9b:39:b0:20:5e:4d:55:69:
         87:13:f4:ec:a8:a9:88:1a:a6:44:94:6e:97:82:f9:0c:b1:1d:
         3c:9f:2d:b4:7b:42:f5:30:79:36:d2:b7:ae:7c:a7:d1:45:c0:
         5f:49:ad:4d:48:0a:34:11:09:bc:69:3e:ad:ef:19:8d:8e:3f:
         ea:5d:c0:21:c3:df:0f:3c:c8:da:e5:d2:2c:87:0d:1e:77:3e:
         91:52:0e:8b:b5:f0:d8:94:31:96:eb:a0:3f:54:8a:a0:f3:ce:
         ab:20:78:69:c9:a7:dc:b2:3c:da:eb:fa:41:30:c6:7a:e0:26:
         70:c2:96:06:a5:4a:92:43:ee:c6:d4:29:10:4b:72:7d:81:f3:
         9e:81:b8:c2:97:0b:2b:2e:a8:9e:17:d1:ae:7c:a8:43:98:2b:
         01:5d:70:c0:8d:eb:b6:ef:32:b3:09:72:74:4f:6d:0e:99:89:
         30:54:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:19:22 2025 by rpki-client