Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/b72aacb9-ecfa-3199-959a-464fa9e0a6e5.roa
File:                     b72aacb9-ecfa-3199-959a-464fa9e0a6e5.roa (raw, json)
Hash identifier:          h6IZCcNvsxXp1KYp6IntHF2bskHfoZgtygf97JdpH2Y=
Subject key identifier:   B6:1E:0C:06:6D:4A:EE:38:03:CA:FC:F1:B2:3E:C3:C3:28:CE:F2:27
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F4328584AB650D7F0051019F3480BE580
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/b72aacb9-ecfa-3199-959a-464fa9e0a6e5.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     398071
IP address blocks:        206.227.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d7:f0:05:10:19:f3:48:0b:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=7673d1b3-bc12-49f0-bf4b-86542e9bac4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a0:c5:5b:e6:57:c4:ee:8e:91:0e:07:52:18:
                    94:6b:44:8b:bf:4e:be:5b:b6:2c:be:de:80:83:cb:
                    5d:65:83:7f:d5:e4:a7:a5:78:6b:b7:e2:ed:e5:53:
                    f7:6f:1d:84:26:d8:fb:87:ec:81:42:80:2a:35:da:
                    f4:7d:b5:dc:f0:c9:ee:b4:da:2e:39:9f:64:f2:dd:
                    49:56:29:22:3a:f0:da:10:17:bd:a0:44:27:68:77:
                    9d:ae:d3:8c:d1:0c:42:b3:ae:88:1c:98:56:7b:9e:
                    a1:07:aa:bc:b6:45:6a:32:f5:76:56:dd:84:87:e4:
                    6f:f2:c1:5e:5f:0b:63:b0:3f:19:04:ba:5e:32:dc:
                    4f:e9:0d:08:70:9d:ea:cb:f9:66:0c:d8:a2:d2:c2:
                    b9:eb:96:a6:31:2e:4e:55:ef:55:6a:b6:c4:94:da:
                    2f:be:64:0f:89:00:d0:5b:43:bd:56:c6:8c:02:41:
                    a5:b0:7c:b2:5b:6f:60:63:25:97:aa:cf:90:41:d5:
                    99:7f:61:90:72:ba:39:8c:84:98:99:ae:9b:d4:e8:
                    ac:2e:69:8b:6d:57:91:43:35:17:50:dc:4f:39:e3:
                    86:96:16:d6:11:53:5d:a6:13:76:60:55:5c:5b:78:
                    99:5a:1f:de:57:ed:58:e3:89:4e:9e:d3:8b:01:e9:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1E:0C:06:6D:4A:EE:38:03:CA:FC:F1:B2:3E:C3:C3:28:CE:F2:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/b72aacb9-ecfa-3199-959a-464fa9e0a6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a0:f0:45:2c:2d:4b:9d:90:23:fd:be:c9:f5:cf:5a:36:fe:
         60:0c:86:06:1e:6e:64:d8:4a:a3:48:31:ea:bd:fc:b4:58:d1:
         4d:00:66:cb:9e:d3:95:64:95:b7:31:14:b7:22:c1:e5:99:93:
         43:75:b0:59:74:da:01:a8:03:df:35:11:d4:1f:dd:3f:ca:b2:
         e1:c3:ed:09:92:31:3a:cc:d1:b4:d1:b2:d7:74:6d:3d:35:8c:
         e3:62:84:9b:4f:e2:89:d1:5d:48:b2:f6:45:97:89:23:fc:01:
         9b:0a:05:f2:97:cd:bb:ee:ba:4c:7b:1b:01:23:50:15:b8:2f:
         a0:d4:8d:3a:65:a8:b0:73:25:5c:6d:10:96:bb:d1:7b:13:dd:
         ce:84:9b:4c:41:1a:c6:d0:72:2b:20:c0:bc:af:cd:58:43:fc:
         a6:6f:37:8a:9b:9e:01:b9:ba:44:ee:58:54:56:f0:08:50:6d:
         6b:87:ec:52:d6:bb:2f:bb:17:38:85:1e:72:11:24:0e:16:60:
         f9:ad:36:7f:b4:dc:73:4e:de:3c:e6:bd:41:d8:26:e3:84:54:
         45:8a:14:c0:eb:92:dd:f5:17:6d:06:65:a2:6b:e7:54:bb:4c:
         e4:01:25:1c:5a:a7:75:27:ff:47:ff:f6:92:f5:c2:79:7f:18:
         cb:de:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:15 2025 by rpki-client