Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa
File:                     8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa (raw, json)
Hash identifier:          UIw5yuT1wOeeGslkwZKVQHtPrpZb2R1shhSIptnYBw4=
Subject key identifier:   FD:D6:BB:31:5C:E4:55:C8:F5:07:10:AD:74:2E:D8:1C:A1:24:08:94
Certificate issuer:       /CN=a29a724c-0ef8-416c-bb2c-359a0122375e
Certificate serial:       010D0C9F4328584A1F901E3E2561185933A25D80
Authority key identifier: E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     40676
IP address blocks:        206.168.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:1e:3e:25:61:18:59:33:a2:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29a724c-0ef8-416c-bb2c-359a0122375e
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=30ba014c-1015-4d29-93cc-9676c559dccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:db:cb:94:be:71:7f:29:b4:c7:11:05:1c:
                    59:e4:f2:e4:4f:21:60:3c:96:6f:77:f4:43:6d:bc:
                    8d:59:99:90:65:7c:17:2a:a5:f6:9a:aa:99:cf:1d:
                    4d:d5:7d:a9:c0:d8:39:b9:9e:6d:d6:56:42:75:b0:
                    c1:3b:e1:1a:e5:1f:50:09:ae:27:0e:ee:a3:ae:8a:
                    ee:59:7e:d1:13:b9:48:2a:fb:e4:0c:fd:c0:8e:31:
                    15:96:c2:e0:cf:6c:60:e2:8d:91:a8:d9:01:eb:60:
                    ea:4e:c3:40:bd:c7:8c:28:17:26:b9:8d:c3:11:9e:
                    81:f1:f2:55:74:de:6e:65:a5:b7:44:a4:7a:15:9d:
                    66:1b:da:af:b4:37:a4:5e:bf:ce:c4:c7:8b:cd:a1:
                    bd:18:44:9f:a4:5d:31:d9:b1:fc:2e:aa:55:09:9b:
                    39:d8:92:1d:37:26:88:5f:9f:ec:5a:68:f2:ff:5b:
                    f4:ea:d9:7e:7d:46:31:6c:56:71:69:b9:7c:11:c7:
                    ec:3e:b2:7f:28:93:07:14:29:17:e0:4d:1c:8a:e8:
                    76:8e:a6:fa:29:07:f0:59:12:4f:d3:c4:7a:bd:a5:
                    9a:e1:f1:d4:f6:e4:77:a9:f2:bd:6e:e4:2e:e2:a2:
                    8b:61:81:97:02:03:27:57:78:5b:2d:dd:41:81:8c:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D6:BB:31:5C:E4:55:C8:F5:07:10:AD:74:2E:D8:1C:A1:24:08:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/8587a946-4c9e-3a4c-92d6-6d9e491f2569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.crl

            X509v3 Authority Key Identifier:
                keyid:E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:12:39:96:03:d0:45:59:e5:61:e0:42:65:2c:ec:9f:99:ac:
         6d:7e:a9:cb:58:03:ed:7e:84:e7:8a:08:a3:7e:ff:aa:bd:b8:
         38:9e:d5:24:c1:f8:a3:ed:bb:05:96:a0:f9:fe:63:d5:2d:74:
         b7:c9:ef:55:b2:53:1f:3a:44:79:7e:6c:7a:44:17:45:28:d2:
         11:d0:b6:3d:9c:f0:3b:f4:97:9b:00:35:1c:ac:3f:46:bf:73:
         77:06:a8:7b:e8:5e:bb:27:bf:95:42:b8:11:39:d0:e8:4d:7d:
         f8:09:05:67:f1:0c:46:d0:3a:51:af:8c:77:a0:15:f6:93:69:
         8a:95:e0:63:1e:73:c1:f1:97:4e:12:65:3e:3a:82:cd:c0:f1:
         41:78:27:2c:29:21:5e:67:40:a0:e1:33:74:83:e3:10:59:ee:
         9b:42:f3:fe:2d:d8:f4:d7:91:6f:e8:4a:bc:2a:a7:22:e3:07:
         06:69:cc:78:a1:1e:c7:79:87:3a:e5:91:29:98:56:ee:f0:16:
         d9:8a:8f:e3:72:45:50:ed:56:05:a9:82:18:9a:53:73:ad:11:
         f5:e6:c1:6f:b3:e2:9a:90:70:35:8b:13:b2:f3:e4:ac:7d:8f:
         7c:7d:5e:94:4e:b2:25:d7:53:7e:33:90:bd:e2:e9:22:20:e6:
         4c:d0:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:33:20 2025 by rpki-client