Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/b44530bc-cc0b-34b5-994a-882031d221d5.roa
File:                     b44530bc-cc0b-34b5-994a-882031d221d5.roa (raw, json)
Hash identifier:          KwUETq6hxmjbFpuEhGFBeHdcjgpMuwHPsOm+SQBmIy0=
Subject key identifier:   1A:47:88:AA:29:CA:C2:CA:4F:53:C8:96:00:2F:E1:8A:11:3A:0D:C7
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F43285849D594D869233EB68503761240
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/b44530bc-cc0b-34b5-994a-882031d221d5.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     398068
IP address blocks:        206.227.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d8:69:23:3e:b6:85:03:76:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=63367e0b-7482-4bc2-b6ad-972b63f05584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:5a:09:8f:87:29:b2:fa:79:5f:91:e6:d7:
                    65:97:26:eb:7e:2c:d3:3d:bb:e7:94:27:c4:ed:ca:
                    46:d9:4e:c7:52:17:c3:85:a8:be:65:9f:c3:89:06:
                    97:78:eb:a1:5f:b8:08:fb:bb:06:82:1e:7c:61:52:
                    e0:93:75:01:d7:b0:9e:e0:a5:f1:26:d3:24:8c:66:
                    70:89:e6:f6:d4:3f:d9:0b:cb:ac:3a:ed:7f:f0:46:
                    a1:71:7e:42:99:08:f0:82:c1:4b:10:95:27:3b:2a:
                    a1:9c:2d:11:d1:a5:80:e5:02:a0:6d:5a:3f:d2:37:
                    61:47:09:9f:c1:04:58:19:a2:de:60:c7:17:23:43:
                    27:af:74:75:0b:16:62:e6:9b:c1:be:79:75:62:54:
                    31:8d:c6:c8:b7:bc:65:53:20:f8:f6:0c:a1:45:df:
                    38:8e:b4:dc:3e:8d:fc:73:5c:ba:ce:86:7a:bd:d1:
                    e9:69:d7:45:03:8b:1d:7a:0b:a1:cc:38:c2:9e:4a:
                    66:e3:1d:ec:e8:2c:4e:33:d3:6f:e1:9e:74:b5:4d:
                    61:1f:9b:14:31:0f:df:e1:91:21:c5:d7:c5:1f:c1:
                    6f:5d:e5:6e:25:58:b6:fc:50:f0:54:41:2d:7a:21:
                    90:ce:6a:d9:4a:41:a6:ab:7e:22:51:66:a6:d4:68:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:47:88:AA:29:CA:C2:CA:4F:53:C8:96:00:2F:E1:8A:11:3A:0D:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/b44530bc-cc0b-34b5-994a-882031d221d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8c:cf:fe:f6:dc:06:f4:1f:95:0c:70:22:9d:59:ac:c4:af:
         5a:f5:90:0b:62:49:7a:fe:1d:af:b5:43:36:fc:35:90:7b:7d:
         88:3c:5f:c8:5d:83:48:62:c9:a7:4d:cb:50:37:e5:f7:8d:61:
         66:a7:ad:a6:b5:87:48:f4:60:0b:67:0d:06:0d:79:52:1c:4c:
         f6:26:03:cd:39:4f:7c:bd:bd:75:99:62:73:6e:53:70:cc:3d:
         4c:ed:cb:11:dc:a1:94:32:c0:95:eb:e8:c5:be:c1:18:6f:3e:
         fb:66:c3:58:c7:c7:ec:4c:04:96:cd:e9:86:a8:ef:f3:1c:f6:
         49:c5:65:72:c1:9d:6f:bb:15:33:22:9c:62:37:20:b8:bd:60:
         4d:a4:dd:42:f3:29:f5:51:fc:79:d7:04:43:30:46:1c:bb:17:
         9c:e4:43:44:ff:be:3a:e4:56:4e:cb:6e:28:b4:c9:56:06:59:
         80:72:b8:00:49:71:59:11:cb:a6:c5:7a:39:28:b6:bc:5a:43:
         4a:fc:7f:c2:89:f9:55:bc:d0:8e:5f:00:91:7c:23:99:a6:32:
         68:89:26:88:8b:13:c0:aa:1f:4a:5f:18:fe:de:ba:7f:a6:e3:
         66:4d:d8:c8:0a:98:6c:a1:aa:13:9e:ba:5b:bf:25:89:84:99:
         30:3d:87:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:46:44 2025 by rpki-client