Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/67dc5438-0a89-3344-b83b-3be5abdb835d.roa
File:                     67dc5438-0a89-3344-b83b-3be5abdb835d.roa (raw, json)
Hash identifier:          mkGiFGnKeYi6HFg/JBllp+BuIUX02oRdMKf5X2In5LM=
Subject key identifier:   90:DC:6C:5B:D1:01:EC:DE:AC:5D:35:66:D9:7B:33:EE:19:E9:38:11
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584AB220BBB1F6B9100765ECA280
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/67dc5438-0a89-3344-b83b-3be5abdb835d.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     6453
IP address blocks:        206.82.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:bb:b1:f6:b9:10:07:65:ec:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=7d0ad9d2-3052-44b8-b751-d70de7b338a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5d:51:d6:76:73:ba:45:29:2c:c8:cc:87:90:
                    45:25:ac:72:fe:ab:0a:24:57:0d:66:61:39:5d:42:
                    8b:be:83:02:bc:f0:15:e6:7b:1b:6e:02:53:67:79:
                    3a:d6:e0:2d:d3:5e:7c:cb:58:35:b4:25:11:df:7a:
                    2a:15:e7:bb:22:1e:69:97:04:38:f4:43:22:00:95:
                    62:16:e7:e6:d0:e2:ae:0b:e3:ba:ef:64:01:b0:46:
                    bf:a9:1d:f1:bd:2f:cb:4c:33:13:4c:05:f8:ff:e6:
                    3e:e6:6a:e6:d5:a7:ff:35:37:38:a7:8f:8c:60:d5:
                    27:8c:12:1c:0e:7d:0c:88:c5:51:11:96:b3:50:29:
                    6a:91:10:7c:d4:ec:a1:64:7b:a2:65:ba:f5:e1:55:
                    98:0b:6d:4f:62:00:46:7b:42:55:63:f9:69:cb:22:
                    40:5c:35:75:d9:9e:c2:75:a6:5d:e6:27:35:78:85:
                    e8:69:55:f2:8f:27:ca:57:b8:65:3a:16:93:17:8a:
                    32:8f:8e:9c:ed:1b:9f:c3:6a:9f:e3:9e:eb:e9:de:
                    46:50:37:89:5b:32:df:89:53:6b:95:e9:38:d3:72:
                    b8:99:13:68:fe:10:6d:2a:74:b0:d4:8c:e8:b3:41:
                    bc:2d:6a:a9:37:f4:75:9b:84:3e:4f:7a:55:e9:36:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:6C:5B:D1:01:EC:DE:AC:5D:35:66:D9:7B:33:EE:19:E9:38:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/67dc5438-0a89-3344-b83b-3be5abdb835d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:31:2a:ae:fc:40:62:f4:26:a0:6b:d3:95:d0:e1:c2:91:04:
         5f:1a:3a:9e:9f:6a:bd:88:4d:36:1d:8c:51:e0:81:ce:6f:43:
         b7:1a:36:88:19:1c:50:75:15:ff:ca:47:7f:80:8b:fd:4d:af:
         0b:47:e7:cb:14:0d:5a:ec:50:00:29:ed:87:a0:ae:de:f0:55:
         e6:3b:f7:d3:81:41:df:9c:ab:26:21:94:94:36:fb:a5:56:34:
         66:7b:a0:b1:e9:ba:76:f3:22:fd:24:8f:11:8e:e5:fd:42:5b:
         0e:98:5a:94:90:99:be:89:6c:e9:d2:3b:62:6e:9e:0d:63:a1:
         7d:2d:9d:0c:6e:e9:58:8f:ae:43:2d:a1:da:a8:f9:20:e5:d4:
         71:0a:22:43:21:0a:8f:6b:6b:9d:79:aa:9c:3e:76:3a:0f:9d:
         09:4c:ea:0b:8f:4e:31:7f:24:5b:15:36:c6:d2:eb:bf:b0:95:
         9a:78:7c:27:48:71:ac:e0:a1:ab:52:14:b3:c7:1d:1b:0e:e3:
         ad:77:3d:ea:c1:a6:bd:a4:e6:4d:62:fe:a7:d4:f2:da:a0:68:
         f6:35:68:9f:91:29:01:8d:55:ac:b0:c5:a3:7b:c8:22:8a:c3:
         8c:65:de:a5:3a:be:08:f5:11:4d:98:5a:af:e8:4a:d4:1a:78:
         ce:79:6e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:15:45 2025 by rpki-client