Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1e3ad974-e371-34fa-85a8-062a07db7094.roa
File:                     1e3ad974-e371-34fa-85a8-062a07db7094.roa (raw, json)
Hash identifier:          t1WcfFI6czSAhwu9/N4UIgJOwarFkaMmLCNdgMiCQHo=
Subject key identifier:   93:82:05:07:0D:0A:6A:52:5F:23:69:96:E6:65:F8:E7:52:A0:05:BE
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A225AC7DD3D0BB87C1F706180
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1e3ad974-e371-34fa-85a8-062a07db7094.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     271
IP address blocks:        206.12.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:c7:dd:3d:0b:b8:7c:1f:70:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=0795c46c-fed8-4dcf-b275-61e9b895f1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:72:67:9b:b8:93:6d:63:df:85:bd:18:8a:
                    da:da:9a:a1:53:39:fc:1f:78:3e:69:5f:3d:37:5b:
                    ea:7a:0a:53:cb:33:41:a8:e3:ef:4f:fd:d3:df:48:
                    76:f4:3f:ff:d4:91:63:eb:3b:5c:8b:dc:e4:ec:86:
                    88:c5:9f:4c:09:c3:30:76:07:3d:44:9b:f5:ae:ae:
                    94:b9:eb:bf:1c:16:d0:3c:d3:eb:8b:ef:ab:d8:0b:
                    e2:32:02:3a:11:a6:6b:70:f0:61:f3:7e:42:dd:73:
                    56:6a:63:17:20:74:f9:4a:cc:9f:19:48:ad:c1:e7:
                    10:07:4b:77:3a:c7:8a:de:1b:10:2a:b7:d2:ee:7e:
                    a2:f8:8a:bf:05:63:13:76:fb:09:01:7d:b8:e7:7c:
                    93:8a:83:e4:93:34:f6:28:0d:50:85:83:80:dc:18:
                    ba:9b:f8:e7:40:58:1c:4d:46:4c:b4:2e:cb:e0:05:
                    3c:24:75:23:58:68:61:00:4a:34:a6:30:6a:13:45:
                    ba:41:c0:b5:0d:c4:02:93:52:f6:89:2e:64:a2:18:
                    57:a1:22:7e:fb:84:7a:0d:2c:e4:bb:2a:41:62:63:
                    b7:08:b6:de:af:1c:2a:f3:86:3d:0c:77:76:fd:d8:
                    ba:7d:34:36:46:04:16:59:d2:8e:9b:52:df:d6:32:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:82:05:07:0D:0A:6A:52:5F:23:69:96:E6:65:F8:E7:52:A0:05:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1e3ad974-e371-34fa-85a8-062a07db7094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:87:be:79:98:a4:60:04:79:b5:af:c7:cb:51:82:20:db:59:
         76:b7:79:eb:75:2f:22:d2:f9:7d:8a:72:54:88:c0:df:fc:92:
         74:62:47:3f:7e:0f:53:0e:07:ac:58:fb:44:9d:7a:3d:ec:68:
         ff:ae:7f:31:cd:b4:26:04:5b:20:f5:0d:c8:37:7f:05:26:c8:
         8a:2f:90:b1:a6:2f:9d:03:4d:c1:dd:e5:42:f4:cc:2c:c0:50:
         26:7a:98:c2:11:0c:25:09:8a:64:96:c5:7d:37:15:d5:55:20:
         62:a7:8d:ad:ec:9b:61:f3:66:6b:a5:8f:e2:b3:7a:88:bf:73:
         36:f8:3a:e1:2b:1e:28:d9:3e:e9:69:f0:22:f3:ef:c5:3c:ea:
         67:b4:e8:66:a7:6e:cb:22:82:e5:b0:0c:2d:b1:e8:01:ae:d8:
         b5:8e:43:be:cf:b3:e3:f8:c9:5e:31:2e:1c:15:ae:4d:41:03:
         51:f2:83:8d:03:33:1d:cc:2c:13:36:83:63:15:40:dc:d8:39:
         2a:c6:d7:6c:f5:20:d4:76:e1:e9:ae:de:ca:3b:e4:33:d2:16:
         eb:4e:c4:65:5c:89:db:35:9d:21:3e:93:25:6f:5f:e2:af:98:
         23:42:5b:1d:95:39:ae:00:15:26:3c:97:61:c2:69:6e:88:98:
         93:10:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:48 2025 by rpki-client