Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/e7022e3a-f48f-338a-ad62-7a1b32063e4c.roa
File:                     e7022e3a-f48f-338a-ad62-7a1b32063e4c.roa (raw, json)
Hash identifier:          JgOi8LY6XmKv8rSMuTAtiE94+Ad9BEDPjUtBy55aqbE=
Subject key identifier:   E6:27:39:D2:FE:03:15:D9:2E:56:B8:BD:52:63:FD:0B:E9:54:A4:98
Certificate issuer:       /CN=6935e5f0-57c3-49af-bbca-0feb72f3c19b
Certificate serial:       010D0C9F4328584A225AC3892D5346F209A07500
Authority key identifier: 6B:A9:25:AB:2E:3C:50:09:B3:A3:40:A3:2A:47:41:4D:25:59:1C:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/e7022e3a-f48f-338a-ad62-7a1b32063e4c.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        205.235.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/6935e5f0-57c3-49af-bbca-0feb72f3c19b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/6935e5f0-57c3-49af-bbca-0feb72f3c19b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:c3:89:2d:53:46:f2:09:a0:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6935e5f0-57c3-49af-bbca-0feb72f3c19b
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=85994a61-8486-4b60-b22e-765b71e23648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ee:08:9e:19:66:d4:38:b1:a5:5e:51:95:00:
                    4a:30:34:33:cf:2d:b5:fa:e8:c6:02:1e:5d:76:c2:
                    89:82:85:2f:11:24:22:94:27:5f:4a:36:39:63:53:
                    5d:92:e8:c3:3f:b6:28:b6:21:85:af:62:c2:60:e2:
                    85:6c:96:1a:b7:53:40:00:a8:94:d8:63:a5:66:ae:
                    55:ab:d2:03:8e:e1:d0:f8:00:08:fc:94:8e:5b:2a:
                    6c:9d:d4:2c:13:94:0c:fa:a9:1a:05:53:ba:39:16:
                    9f:db:64:ea:5c:0e:94:b0:4d:38:b7:33:2f:54:0c:
                    20:3a:00:6c:01:2b:db:12:35:01:b5:05:bb:e7:65:
                    a1:5f:4c:93:2a:db:c9:07:6f:b9:f1:d7:80:d6:74:
                    0d:ff:34:c8:e4:dd:55:20:c2:e7:e4:5e:d6:88:be:
                    5f:7e:b2:7d:ba:07:2e:b1:b0:c6:35:60:6a:fa:7a:
                    69:78:63:76:7a:5e:e8:1b:fe:c9:ca:57:8e:a9:9e:
                    54:b2:85:af:9c:84:c9:b0:43:a5:ec:b0:92:85:63:
                    90:46:12:79:b4:12:f6:ef:2f:25:aa:b4:e7:7a:34:
                    73:83:19:86:8f:67:db:c5:98:77:99:68:87:d0:3e:
                    1b:36:38:62:8d:cd:81:b7:85:73:bb:9b:d0:9b:0f:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:27:39:D2:FE:03:15:D9:2E:56:B8:BD:52:63:FD:0B:E9:54:A4:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/e7022e3a-f48f-338a-ad62-7a1b32063e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/6935e5f0-57c3-49af-bbca-0feb72f3c19b.crl

            X509v3 Authority Key Identifier:
                keyid:6B:A9:25:AB:2E:3C:50:09:B3:A3:40:A3:2A:47:41:4D:25:59:1C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.235.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:8e:b5:b5:b0:7c:9f:3f:4f:a2:11:51:30:e6:bc:1a:59:
         b6:6f:b1:3d:5e:0d:c4:87:44:3c:a9:1b:7d:ed:76:59:e1:76:
         ad:94:fe:71:73:01:92:cd:1b:d2:f3:7a:79:bc:50:75:ca:db:
         cb:09:51:b1:43:9d:f3:b6:7f:36:a4:73:d6:4a:dd:38:3a:be:
         1c:02:94:b8:7b:03:d5:13:48:80:4b:e3:2f:fc:6f:ae:df:9b:
         15:04:ae:1e:64:d9:5e:c6:2d:06:d0:28:99:06:ef:31:dc:21:
         6d:be:ac:10:79:e5:e9:5f:7c:9c:1f:cf:f3:f0:b7:b2:18:c5:
         14:38:f5:c2:f1:b6:03:69:bc:98:64:d5:42:a5:8f:a6:b1:c4:
         fa:36:bf:f0:20:43:f7:89:8e:2e:95:00:38:c0:a4:e8:d7:d6:
         bb:23:92:bd:1e:e7:48:e5:5b:ce:fa:43:39:33:07:b9:4b:43:
         b4:22:f5:7b:71:52:65:56:d0:54:d3:b0:86:2c:7d:b5:4a:4b:
         3a:78:d1:a7:f9:85:ec:1c:7c:f0:a0:60:7e:3d:77:9a:2d:65:
         9d:2c:cf:59:16:81:7e:d7:31:29:50:2d:0c:ea:d5:20:53:9d:
         de:db:1d:d2:4d:42:3e:7f:7a:82:d1:6c:07:4f:d5:0d:3b:8f:
         63:53:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:59:24 2025 by rpki-client