Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/906ed54d-f864-33d9-a5bf-421227f7488f.roa
File:                     906ed54d-f864-33d9-a5bf-421227f7488f.roa (raw, json)
Hash identifier:          /CvdZ9Fruf2QGESQuNgshbd+pwrewcjrF4miPjiHyi8=
Subject key identifier:   8A:2B:0B:2C:D1:DD:0C:14:E9:1C:D0:B6:F1:1B:8B:A7:EC:5A:0D:66
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584A8079D57896D597A2A9EBA380
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/906ed54d-f864-33d9-a5bf-421227f7488f.roa
Signing time:             Sun 13 Jul 2025 06:09:43 +0000
ROA not before:           Sun 13 Jul 2025 06:09:43 +0000
ROA not after:            Sat 11 Oct 2025 06:09:43 +0000
asID:                     10794
IP address blocks:        171.161.104.0/21 maxlen: 21
                          171.161.104.0/24 maxlen: 24
                          171.161.105.0/24 maxlen: 24
                          171.161.106.0/24 maxlen: 24
                          171.161.107.0/24 maxlen: 24
                          171.161.108.0/24 maxlen: 24
                          171.161.109.0/24 maxlen: 24
                          171.161.110.0/24 maxlen: 24
                          171.161.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:80:79:d5:78:96:d5:97:a2:a9:eb:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 13 06:09:43 2025 GMT
            Not After : Oct 11 06:09:43 2025 GMT
        Subject: CN=f7ccc2ee-031d-4ec7-bbfe-3bb8234a8f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:63:ca:a0:c8:e9:17:d8:ed:1c:3e:ce:03:
                    39:62:ea:65:7d:bd:0b:83:54:c9:9d:7a:43:53:1d:
                    d3:1d:dc:8c:d7:a0:09:a8:65:4d:69:b2:5f:b4:9f:
                    b5:0f:ca:c1:d9:54:a8:a4:8a:fc:a3:66:9f:f2:66:
                    00:18:13:18:c2:c9:67:bb:7e:b7:4e:29:ae:d9:6c:
                    3b:60:7e:3d:da:2a:b6:bb:cf:e8:25:6e:a0:bb:64:
                    dd:eb:09:a9:68:43:17:5c:ee:63:78:b2:e1:0b:15:
                    ea:6d:cc:d1:1c:67:89:53:e2:8f:06:51:d9:07:45:
                    a9:c6:81:2f:e2:3d:07:85:7c:38:eb:87:d4:91:d2:
                    dd:4e:af:9b:63:f5:bb:03:0e:9f:ad:7d:ce:ff:22:
                    8a:f4:dc:1b:ab:89:4d:94:a1:93:aa:70:71:f8:cb:
                    1d:a8:23:c4:b6:1a:3e:4d:4f:6c:38:cc:2c:04:30:
                    7c:a4:ec:5f:41:98:4b:8c:49:c5:34:91:22:e9:ba:
                    af:b4:7a:0c:fe:d7:5d:8a:21:f9:b7:4a:55:14:c9:
                    02:7f:c2:de:c7:17:d4:11:30:c2:4c:9e:7f:f7:99:
                    40:83:f0:10:4d:1c:0a:f7:41:d8:0b:25:46:58:c4:
                    a6:19:49:1e:90:fd:53:9f:a1:40:ae:a2:ba:5b:24:
                    c7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2B:0B:2C:D1:DD:0C:14:E9:1C:D0:B6:F1:1B:8B:A7:EC:5A:0D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/906ed54d-f864-33d9-a5bf-421227f7488f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:d6:8c:56:ee:66:65:bb:73:31:05:f9:57:06:22:f3:6a:
         e6:2a:3c:84:40:9d:d0:65:1a:38:4e:e5:5c:e2:9e:6a:ab:be:
         1b:3d:0e:91:a2:5a:30:d3:80:68:a0:02:9a:c3:47:be:1a:6b:
         99:82:67:d6:16:de:64:ae:e1:da:ce:e0:a5:ea:4e:8d:df:64:
         a6:4e:64:58:6b:8c:1f:4c:f3:07:3e:a7:e3:ac:58:94:2a:7c:
         d1:bc:bc:b7:2b:d9:60:af:61:85:d8:0e:ef:66:c9:e0:cc:d0:
         45:27:64:80:90:3c:a5:f8:73:fc:fa:65:44:dc:7c:12:ad:76:
         2f:ad:de:59:ff:41:da:8d:96:76:d5:a7:2e:6c:ba:e2:53:bc:
         b5:1e:dd:a8:ef:7b:ae:1b:6f:7a:d8:0c:be:a6:07:15:5b:d7:
         ca:9b:47:3d:c9:3b:eb:76:ef:ed:3b:fa:21:3a:27:7f:1c:d7:
         4a:e9:dd:c1:c7:37:6d:9f:76:17:43:63:e1:77:84:a8:45:8c:
         a4:0e:da:87:8c:8d:26:63:4e:7a:d2:d8:57:43:58:da:fe:a6:
         df:b0:5c:51:59:97:30:4b:0c:e2:a2:55:92:77:e0:f0:81:a5:
         c6:05:37:ef:cf:43:67:9a:77:16:32:e8:67:86:fc:e6:1b:64:
         c1:cd:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:21:16 2025 by rpki-client