Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa
File:                     f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa (raw, json)
Hash identifier:          /hbIhoaX8EJF6Ar4ZT2A4mInGDKVIP0kfMML806CxvQ=
Subject key identifier:   67:66:47:EA:30:41:C3:FD:20:29:AE:B2:B2:B5:63:B3:56:F2:85:56
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C011B72128AA53E4B23E40
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        204.111.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:11:b7:21:28:aa:53:e4:b2:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=266719ab-68eb-45d5-b77c-7ea58a7b900c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:27:e9:bd:4c:f0:bd:78:0f:c6:65:30:f8:bd:
                    97:e4:f0:94:c7:61:e0:9a:a6:c9:60:a8:ec:90:1c:
                    39:d5:79:02:85:5f:31:54:23:7c:f3:da:bc:56:3a:
                    dd:05:7b:59:78:96:f8:70:ae:37:b1:a6:dd:c2:af:
                    74:df:a1:d9:95:30:17:0d:2d:fd:10:f5:48:98:d5:
                    26:26:e3:b3:f5:ab:00:c8:30:f3:92:91:41:aa:68:
                    12:b3:f3:bb:9e:f3:9b:7c:3e:99:62:91:7d:4d:59:
                    b9:44:3f:18:b0:7a:a5:95:92:dd:6c:49:bf:68:31:
                    46:49:d2:21:4d:01:e3:14:c2:fc:e4:98:0a:89:ca:
                    6d:6a:1e:0e:30:3f:11:f7:8f:56:4d:77:64:fd:f7:
                    d5:a8:b5:95:5f:9e:bb:d0:91:3e:e1:27:70:46:d7:
                    c6:af:7f:65:59:e8:78:e5:44:e8:28:f8:b3:5a:e1:
                    e9:d0:95:d5:25:5c:c2:19:3d:35:a1:cd:20:bd:1e:
                    04:cf:cc:93:45:d2:b1:e0:8c:d1:fc:f6:c5:69:db:
                    02:b1:20:fd:6d:ff:44:32:2d:e3:a1:e5:da:48:af:
                    52:2b:9f:6f:93:4d:c2:a2:b6:82:95:3d:9a:19:47:
                    b2:38:26:8d:8e:46:ea:c9:83:9b:21:14:0d:a4:72:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:47:EA:30:41:C3:FD:20:29:AE:B2:B2:B5:63:B3:56:F2:85:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.111.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:70:f1:66:83:8f:71:9e:80:15:1e:d2:e2:64:59:fa:cc:
         4d:ed:a1:25:ce:7c:d2:a2:ce:d5:3d:9f:16:7f:d7:3e:ff:49:
         81:41:de:a1:74:50:3c:67:98:7a:84:fc:a7:e5:73:70:b0:63:
         01:0c:c6:d0:a1:0d:58:d8:37:d7:be:96:e6:0b:e4:92:3f:27:
         c4:ce:bc:80:0d:47:b8:31:28:ce:cd:0d:a8:8c:dc:ed:4c:ff:
         ff:3c:5f:08:e7:8d:b6:9c:c3:50:cc:92:ef:cc:47:c1:41:76:
         3a:76:0a:4c:de:5c:b2:08:17:98:b8:87:4a:92:40:a2:45:d0:
         06:cc:30:29:60:4e:18:af:b4:0f:f2:0c:22:29:c6:0a:18:99:
         4c:95:ed:6e:81:49:de:e1:bb:f3:6b:50:39:e1:45:01:6a:58:
         40:de:b9:a7:7d:09:13:1a:01:ea:e4:b3:28:49:07:44:9b:70:
         fc:1b:54:f1:4a:92:41:f7:17:68:9e:8e:62:46:05:bb:c7:54:
         d0:6a:c0:52:c9:7c:7e:f4:55:a2:11:77:65:f4:5b:84:b0:e9:
         d3:d6:05:e2:ff:23:99:7b:dc:39:00:64:48:16:96:98:9e:c2:
         f1:7c:82:fe:50:15:1c:d3:b8:ee:28:dd:d9:07:47:c1:0e:78:
         6e:34:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:54 2025 by rpki-client