Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/06cd1b8a-8549-3df4-96fb-cd50f8f72109.roa
File:                     06cd1b8a-8549-3df4-96fb-cd50f8f72109.roa (raw, json)
Hash identifier:          VrY0qLU5Jd32QVwsSeEV+JibV4i2oQI1YGnxjHipnZ8=
Subject key identifier:   1D:6C:F1:99:DD:63:C4:58:A9:BB:8A:B7:0C:8B:EB:E9:AC:1A:8A:DB
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F4328584AC2E0DDE27C68CA23F0DAAB00
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/06cd1b8a-8549-3df4-96fb-cd50f8f72109.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     13706
IP address blocks:        199.101.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:dd:e2:7c:68:ca:23:f0:da:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=2aa47707-46da-448c-ab76-2f0341000c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b3:3a:51:c8:01:9f:5e:49:92:14:f7:8d:fd:
                    1c:4c:73:37:97:f4:c1:0e:dd:96:75:b7:d9:13:a2:
                    bc:4c:0b:7f:98:a8:47:14:da:fa:59:b6:6d:07:85:
                    e4:98:e8:a9:45:ec:08:4a:00:2b:98:b7:a9:af:ec:
                    78:60:98:1b:78:1a:5a:20:90:52:0c:68:d2:80:99:
                    84:b6:21:55:00:cd:d6:46:93:4d:81:73:a5:a9:86:
                    fe:ca:4c:46:b8:ca:06:11:63:9a:3b:1b:54:7f:9b:
                    ac:20:0b:de:58:bc:54:35:50:4f:eb:48:c9:08:d6:
                    a7:2a:e3:01:0b:92:8a:2d:79:20:d1:01:28:a7:5b:
                    7c:25:f7:99:8c:59:46:a1:31:25:e4:37:3b:b9:64:
                    1f:74:d8:b4:4d:22:5b:8e:5f:0a:f1:32:59:1f:ce:
                    41:d9:9b:b3:af:68:36:91:ff:6b:4b:f2:44:2f:71:
                    64:a6:dd:8d:20:58:c8:f7:6a:07:40:00:e6:04:73:
                    37:db:b2:6c:b6:64:42:63:4f:72:70:8b:63:07:04:
                    bb:16:ac:35:af:56:97:a3:38:00:72:0a:0f:68:f9:
                    60:b0:a2:d7:18:e5:5d:59:e0:b4:49:0f:2e:18:71:
                    b6:97:4b:21:3b:2f:db:b2:28:3b:b9:56:54:58:ca:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6C:F1:99:DD:63:C4:58:A9:BB:8A:B7:0C:8B:EB:E9:AC:1A:8A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/06cd1b8a-8549-3df4-96fb-cd50f8f72109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:11:80:97:f2:03:d3:79:d4:74:f0:5c:de:04:46:c0:d9:
         b7:bd:fb:ef:0c:03:d1:fa:2a:0a:71:55:a0:ca:ee:bf:5d:95:
         6b:67:af:26:7f:7e:b6:c4:3b:3b:7f:7a:6c:8b:89:ac:e2:59:
         06:ae:b8:04:81:87:46:2e:89:74:9e:1a:c7:3a:b5:ba:34:57:
         20:5f:e2:d7:5e:36:32:3f:0c:26:e2:16:5c:05:3d:c4:75:8e:
         d8:13:7c:46:3b:4d:8b:4e:8b:20:2c:45:d7:15:8e:23:aa:06:
         a1:fa:b3:fc:e5:6f:f1:f2:40:13:1a:ca:d9:8a:cf:c3:db:4a:
         51:78:cd:71:9b:af:d9:9c:c5:57:53:48:13:c0:86:f0:3a:b6:
         f0:af:2f:88:49:8a:2c:8a:1f:00:1f:c8:ac:71:a8:48:f8:9e:
         65:e3:e0:2d:bf:3e:1b:c5:97:4d:d4:8e:b4:3d:49:34:6b:aa:
         b5:a2:5f:f9:e5:8b:a0:38:fb:a4:0c:06:85:10:56:d5:eb:94:
         7d:5b:d1:67:57:ef:7b:ce:e2:09:4c:0f:cb:c9:a6:22:e3:4e:
         1f:17:ce:ef:03:58:44:55:f8:74:48:58:90:21:59:ac:43:4d:
         7f:d6:3d:0d:62:b7:89:24:14:f4:d0:4b:7f:0d:14:c3:24:ef:
         ea:a8:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:55 2025 by rpki-client