Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/663fc84b-e171-3e08-be49-f667b2afe080.roa
File:                     663fc84b-e171-3e08-be49-f667b2afe080.roa (raw, json)
Hash identifier:          XKfYkr3FVQDQxE8mtt4Zm+RkP66VYOJrmN5zhdvnkzA=
Subject key identifier:   56:1F:98:D4:6B:11:C4:49:9E:04:B4:9F:35:D4:85:C8:1C:D0:6E:01
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584A2ABADECAB3F60D6680AC6E80
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/663fc84b-e171-3e08-be49-f667b2afe080.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     33211
IP address blocks:        206.41.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:de:ca:b3:f6:0d:66:80:ac:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=e53f96ee-01c1-4bd8-b7a8-e42ee1728924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:49:fc:36:ba:5a:3a:a2:38:b9:05:95:f8:
                    a5:e4:bb:11:cb:84:15:c8:df:9f:8b:b1:d9:2f:df:
                    10:a9:73:f4:2e:64:3d:e7:33:74:25:87:dc:c4:d5:
                    5f:01:aa:89:c0:1a:8d:86:f5:4b:b6:bb:23:f5:0c:
                    38:18:6c:b2:fc:d8:e2:16:64:f9:ab:e4:cb:21:a7:
                    6c:a0:c0:36:8a:67:fd:0e:59:4e:01:05:d1:64:0e:
                    db:3d:54:0f:25:01:da:58:e8:84:f0:35:3f:8f:2f:
                    81:18:51:51:be:be:9d:77:b7:62:21:26:af:33:41:
                    fa:3f:b5:a9:61:03:a6:de:d3:95:2d:37:bc:e4:50:
                    5c:f4:be:62:2c:d9:bf:4e:13:d2:f6:67:4e:6f:e4:
                    47:da:e3:24:73:42:07:1d:8d:1a:5a:a4:06:df:26:
                    5c:7d:3f:a4:89:33:95:88:2f:72:9e:12:da:b3:76:
                    a4:68:84:f5:61:b3:49:23:4d:6f:88:eb:dc:3a:e5:
                    28:8b:b3:ed:39:1c:dc:33:40:3c:d4:08:63:49:af:
                    7e:0a:d3:59:b5:a0:6f:83:9d:f5:a9:8d:97:d4:41:
                    93:9e:d3:8f:6d:8f:04:92:ed:20:ac:4f:94:45:03:
                    77:42:48:33:66:33:07:39:a2:bc:a9:a0:f0:ed:67:
                    be:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1F:98:D4:6B:11:C4:49:9E:04:B4:9F:35:D4:85:C8:1C:D0:6E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/663fc84b-e171-3e08-be49-f667b2afe080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:cd:32:aa:a7:9f:17:65:6e:cd:3c:63:c9:77:2b:b7:19:02:
         36:e1:9a:89:73:7c:55:b9:7c:9f:8f:65:f8:cf:11:9e:0e:28:
         68:c4:59:a8:2f:1d:5e:71:ac:ed:38:ec:ed:d8:8b:30:2e:00:
         73:ae:37:92:3d:93:8d:12:6c:9b:81:ee:e7:21:84:09:a9:e9:
         68:6e:22:4d:ab:6e:92:f6:3c:3d:da:71:cf:a6:ac:8e:fb:41:
         68:3a:da:bc:c5:7d:45:15:92:99:a2:54:c9:a6:be:18:e2:e6:
         c3:4d:3f:65:e1:4b:5a:b1:62:34:81:a7:dc:79:8e:73:d1:52:
         eb:8b:73:9a:cf:ea:fa:af:96:75:db:68:c0:c2:5a:fe:60:41:
         21:ef:dd:aa:f8:86:2c:6e:ac:f6:db:ae:d9:a4:48:62:45:c1:
         9e:35:fe:5c:8d:c8:dc:bd:b9:d8:f7:44:d0:cd:22:e0:b3:ca:
         2c:ff:da:85:6f:8c:52:6e:4c:03:6b:31:86:22:f4:d5:46:ff:
         46:43:14:f3:1e:5d:da:4d:05:30:81:fc:a1:2e:6e:cb:b1:d2:
         71:14:53:32:f6:da:9a:2f:2e:83:37:ab:5f:a4:bc:fe:24:0a:
         ab:5a:5f:47:dc:d3:1b:1f:d0:e0:0e:9d:d5:07:ef:94:02:d8:
         12:92:0b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:44:53 2025 by rpki-client