Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/bb4f8f51-dffa-3912-8631-c450929a36b7.roa
File:                     bb4f8f51-dffa-3912-8631-c450929a36b7.roa (raw, json)
Hash identifier:          XYr0Pwg4toFwXGGRLw4camzO0b77t2twEwR0mv8qN9M=
Subject key identifier:   D3:7F:B0:61:BE:8B:F6:28:1B:22:44:80:43:03:E1:35:91:94:9B:10
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F4328584AC01628870EC2711272B3F200
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/bb4f8f51-dffa-3912-8631-c450929a36b7.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        206.195.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:28:87:0e:c2:71:12:72:b3:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=eefc5e93-55f9-49a5-9de8-0fc432e6e69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:a5:e0:1c:86:74:96:5e:6d:de:54:b1:dc:
                    33:e6:3d:e8:3e:77:7f:0c:bc:b0:cb:a3:8d:72:47:
                    ef:11:68:70:fe:84:d3:72:5b:76:e4:d2:73:75:b5:
                    10:b6:89:2c:c5:19:d5:d2:8a:18:04:3a:9e:d4:4b:
                    82:d0:04:4b:30:ce:59:2d:fb:7b:ec:5d:c6:92:14:
                    a3:13:6e:83:0d:6f:41:88:68:29:78:4e:c2:9b:8c:
                    cb:d2:91:ac:63:c6:e4:62:d9:aa:b5:7f:62:f9:18:
                    a3:b6:31:48:f0:d3:a1:69:e4:a9:b2:33:46:6f:2f:
                    ba:30:3e:23:50:33:aa:fb:c6:94:67:ed:68:36:49:
                    82:a0:c8:42:7f:1a:19:84:81:e0:92:db:ff:f9:49:
                    97:2d:94:a1:96:06:c9:d1:29:68:b5:9a:aa:bb:02:
                    a3:57:a0:77:78:57:d5:45:72:4a:88:26:bf:7f:a7:
                    69:80:2a:75:bf:74:b4:20:5e:1c:3a:bc:bb:7a:cb:
                    c9:78:26:06:c1:92:d7:5c:b0:82:7c:71:4c:9b:85:
                    d4:88:4a:f4:34:53:73:23:c3:ce:3b:68:16:42:0c:
                    1d:8d:a2:cd:79:e1:95:73:b6:78:9f:78:9a:27:be:
                    1f:0d:bf:27:48:c1:2a:17:33:2a:8a:b7:74:bc:93:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7F:B0:61:BE:8B:F6:28:1B:22:44:80:43:03:E1:35:91:94:9B:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/bb4f8f51-dffa-3912-8631-c450929a36b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:c7:e0:3f:c9:a8:4c:d7:f8:8c:83:bc:50:26:43:cd:3c:
         42:16:95:ad:1c:55:39:71:c1:aa:28:eb:44:87:3a:d4:ff:74:
         10:84:29:0b:7e:31:34:11:7c:89:3b:0d:86:e7:59:47:60:1e:
         f9:e1:73:d7:6b:67:14:b0:48:ac:65:f5:98:5a:9b:12:0d:12:
         53:37:09:52:28:a8:6e:b1:63:ee:1f:bc:1e:2d:5c:23:b4:da:
         d6:e6:af:a1:cd:b9:bd:eb:fb:8e:a0:68:c1:f1:7c:0e:2d:98:
         2d:66:b5:20:53:43:a1:83:28:25:0c:32:a9:61:3f:89:1e:78:
         69:62:a2:f9:d0:b8:55:ad:1a:63:5f:63:3a:a1:df:24:21:43:
         29:22:1f:4d:a5:b1:c9:57:48:cf:9d:09:a7:c6:0e:00:90:e3:
         b8:3a:3c:bf:26:65:c8:f7:1e:75:c5:a1:09:39:24:dd:65:44:
         eb:be:71:84:e6:73:50:29:2f:c0:9d:dc:da:6f:7f:e9:0c:85:
         a5:e0:ad:b2:8c:e6:2e:9a:42:ad:f4:4c:90:1c:10:ff:d5:94:
         51:bb:00:0d:7d:13:8f:45:b7:ed:f3:82:62:de:fa:98:96:a5:
         39:cb:26:63:0e:7a:ca:bc:75:74:74:07:7b:06:28:da:f7:3e:
         ee:25:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:30 2025 by rpki-client