Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/b7860812-99f6-3bac-bb33-e13bb94bffdf.roa
File:                     b7860812-99f6-3bac-bb33-e13bb94bffdf.roa (raw, json)
Hash identifier:          KM3ywooC8jtz91QMzUgjIMlSyicNbLaz5v5BMJEApPY=
Subject key identifier:   4E:33:5C:3F:87:9A:EB:81:1E:B6:85:D0:9B:60:F4:13:FD:1C:10:4F
Certificate issuer:       /CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Certificate serial:       010D0C9F4328584A23C007188141F5845C4A6F00
Authority key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/b7860812-99f6-3bac-bb33-e13bb94bffdf.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     394298
IP address blocks:        203.89.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:07:18:81:41:f5:84:5c:4a:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=bc42201e-a540-4cf2-acd3-1d4766be0a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:50:b8:d5:1e:e9:95:58:b0:61:8f:39:6c:
                    a3:18:1b:f2:95:b5:1c:d3:93:f5:d8:34:07:c5:59:
                    10:ef:21:ea:24:1c:28:ef:8c:cb:45:86:46:7e:a0:
                    a4:e5:70:b7:9e:af:c6:73:85:28:f9:51:ef:91:ba:
                    b4:27:97:e1:9c:f4:b5:90:b2:3c:d7:5d:b1:2c:b3:
                    a3:83:b4:17:77:26:06:f7:93:bf:7a:f8:f1:5b:b9:
                    a7:c2:cb:77:60:cd:87:49:40:85:91:35:ef:b9:15:
                    c9:93:87:f7:19:89:fd:ab:3c:fc:06:8a:53:a6:9d:
                    f7:95:e1:a2:19:7e:12:87:87:b5:fd:e4:74:b7:4e:
                    ac:ca:6b:a1:a9:90:53:48:23:51:62:d1:4a:9e:42:
                    81:cc:1b:a7:4a:5c:f8:ae:da:14:05:f0:a3:13:76:
                    ee:5b:b3:55:00:5f:e1:4d:11:94:09:9a:c2:28:95:
                    41:b8:e9:ef:d5:b8:5d:97:b8:26:91:b2:db:d9:59:
                    ee:c5:ab:bf:36:1a:03:ca:5c:1a:ab:fa:14:91:2c:
                    6c:c6:28:e1:21:a2:42:1b:8d:1c:76:72:d0:8c:2b:
                    a2:00:8c:3a:fa:1c:60:3a:2e:70:ae:69:49:5f:a5:
                    b9:f8:78:98:51:e5:fb:db:db:62:4a:af:2e:7d:47:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:33:5C:3F:87:9A:EB:81:1E:B6:85:D0:9B:60:F4:13:FD:1C:10:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/b7860812-99f6-3bac-bb33-e13bb94bffdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl

            X509v3 Authority Key Identifier:
                keyid:1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.89.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f0:71:f8:ec:50:8b:94:f9:c2:2a:0b:ed:77:ce:61:15:1c:
         e3:77:19:91:84:0b:b6:ed:ba:be:11:ea:2c:06:e6:25:f3:47:
         5f:1a:2e:6a:c5:76:c3:97:2d:4b:82:c3:43:eb:47:b8:f7:58:
         f1:01:da:4e:14:c8:e8:00:4f:fb:f6:93:4b:0e:d8:6d:02:d1:
         62:03:3e:00:45:5c:90:c7:d5:a4:b1:a7:c0:f5:3f:21:ee:54:
         25:c1:5c:20:46:8a:58:6f:1b:ca:67:c1:0e:df:da:50:65:c6:
         ac:4d:1b:ef:6c:20:c8:8e:18:23:0b:73:50:e4:5b:9f:c8:a8:
         b9:55:96:16:58:e3:36:7d:59:86:de:96:78:43:cd:db:37:77:
         5e:a9:a5:93:33:b3:27:81:b4:4f:70:89:7b:b0:78:31:72:d0:
         83:d0:85:58:dc:5b:ca:78:06:0d:1c:28:c1:5c:e3:b5:e4:4a:
         a4:ae:5a:45:2e:65:ba:67:7b:0f:cd:26:03:0a:45:5a:45:61:
         30:6f:00:e9:20:87:73:b9:d4:96:98:55:b5:1a:d6:89:88:e2:
         41:72:6d:ef:9e:92:cb:26:db:2e:eb:ef:fb:47:05:3e:65:09:
         61:84:cc:bb:f7:2e:86:3f:3b:c8:c0:8e:52:b3:04:b5:32:86:
         df:a4:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:55 2025 by rpki-client