Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/01a37b5f-5443-3669-b248-eb39a56c71fa.roa
File:                     01a37b5f-5443-3669-b248-eb39a56c71fa.roa (raw, json)
Hash identifier:          uIxKlSZMs8bhUce19eIKFbg9A1n++xbIKfZh5kw++E4=
Subject key identifier:   2F:56:87:44:39:1A:99:F9:B6:B0:7F:E6:BB:74:58:1C:CB:75:BA:76
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584A00DAC8D118DA352047C5C270
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/01a37b5f-5443-3669-b248-eb39a56c71fa.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6461
IP address blocks:        206.222.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c8:d1:18:da:35:20:47:c5:c2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=179e8159-f520-459e-a57c-92a6d5da1309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:36:56:78:aa:8e:5f:c2:d9:b0:0b:2c:6b:e3:
                    5d:2b:17:71:11:8b:b9:e4:16:a6:1e:7e:a3:34:2d:
                    57:f0:e9:7b:f8:ef:6a:d4:bc:39:a2:89:c9:43:21:
                    4d:ac:6e:47:c6:ff:a2:ad:c8:de:94:39:d7:b1:55:
                    6d:3b:74:88:24:14:92:c0:27:32:46:4c:90:38:c6:
                    31:47:79:61:54:f2:b2:27:34:13:48:44:81:d3:ba:
                    e3:af:ed:a3:05:90:84:88:bc:b0:33:99:86:87:94:
                    15:40:54:60:d9:a5:ac:4e:09:c1:4f:7b:0e:7d:e6:
                    00:81:03:d6:7c:25:48:a3:c9:fa:f9:8b:ed:53:5c:
                    53:7b:d3:74:95:ae:e8:e0:cb:00:89:82:39:f8:46:
                    eb:e5:ac:00:c6:9c:fe:2c:51:0e:94:c7:22:27:b7:
                    9d:34:15:47:66:c2:64:2e:6e:08:e3:41:d8:b4:6d:
                    8f:e5:11:1d:34:36:ca:24:1c:ea:0f:66:8a:ad:23:
                    12:4a:04:f4:9b:87:e5:d8:1d:39:87:e1:f1:02:13:
                    5c:ed:57:06:f3:51:9c:c1:ac:90:72:56:ca:b2:1b:
                    2e:0a:27:ec:ae:1b:42:e9:91:35:a0:e8:f7:8f:01:
                    a1:e5:8d:09:08:7c:d4:68:5d:c4:cd:10:0d:c5:de:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:56:87:44:39:1A:99:F9:B6:B0:7F:E6:BB:74:58:1C:CB:75:BA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/01a37b5f-5443-3669-b248-eb39a56c71fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.222.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:4a:3e:a8:79:ea:37:46:48:cd:7f:c8:4a:2d:05:05:1a:
         33:f7:fa:e9:31:36:bd:92:10:a1:3f:9f:6c:bd:14:29:58:03:
         ae:5f:ee:33:d2:5e:56:48:a1:44:7d:78:3b:4f:20:68:ea:d6:
         99:b5:84:f5:1e:44:c2:42:2e:af:c0:53:d3:72:36:06:1c:8f:
         e0:4b:34:8b:c0:2a:78:5d:da:64:05:43:47:07:ff:54:89:c6:
         f0:a1:d8:e4:58:51:32:11:5e:e0:63:33:05:04:de:29:56:80:
         4e:9d:89:20:8b:5d:55:63:0c:c4:55:06:4a:08:82:15:5d:c8:
         f3:5f:e6:5c:2c:89:11:58:00:5d:b6:fe:d0:f0:93:c6:f2:1b:
         a1:e8:48:91:07:4c:35:2a:42:81:67:a4:65:24:29:13:83:ad:
         c1:88:20:8b:24:c6:8b:c8:4a:46:8a:54:64:fd:53:14:3d:f7:
         09:72:0a:0e:c4:40:9d:b2:52:98:e9:92:0d:83:74:f8:dd:e2:
         e5:a2:f8:57:0c:bf:41:13:18:8c:b9:97:63:95:50:77:85:b9:
         8d:ac:bf:ef:e2:f4:31:d3:2e:ce:9d:f4:7d:e0:1f:b3:ee:4e:
         53:7f:07:af:9b:e6:8f:a2:22:70:61:43:fb:7e:87:6b:26:79:
         10:8e:be:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:45 2025 by rpki-client