Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa
File:                     b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa (raw, json)
Hash identifier:          4PynYC42sIsJb1sS98Aj3KCjggz6UQb+qA8yMXmuYLk=
Subject key identifier:   BC:FE:99:A5:93:AE:59:AB:31:60:F6:09:36:91:A8:94:C6:6E:CE:A0
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285849F050A46C9AEDA79A3A93EA00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa
Signing time:             Thu 22 May 2025 14:50:19 +0000
ROA not before:           Thu 22 May 2025 14:50:19 +0000
ROA not after:            Wed 20 Aug 2025 14:50:19 +0000
asID:                     271
IP address blocks:        206.12.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:50:a4:6c:9a:ed:a7:9a:3a:93:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 22 14:50:19 2025 GMT
            Not After : Aug 20 14:50:19 2025 GMT
        Subject: CN=b4100ed6-739f-4460-a32c-a2d3c1cdc87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:88:49:bf:58:6e:9f:e4:b0:53:4c:54:68:
                    f2:83:bc:58:78:62:f9:6a:70:30:11:27:d7:e4:6a:
                    3c:06:32:78:e6:77:b3:58:67:8a:3e:9e:59:0f:87:
                    ca:67:9e:60:03:03:b2:3b:e8:29:e4:b3:ef:71:bb:
                    9b:65:18:4b:e3:bd:8e:62:e0:26:5e:4d:f1:e0:15:
                    03:11:21:34:a1:a0:a6:32:33:3b:d9:64:08:a2:a7:
                    c9:cb:ac:80:db:0a:92:c3:17:89:67:31:c9:3a:11:
                    c9:a6:ed:7e:ab:92:23:68:e8:4e:0f:a5:be:23:04:
                    83:52:d4:20:53:f4:a7:9c:21:91:da:6e:70:53:90:
                    fb:34:18:27:87:c3:fa:87:bd:e4:98:09:41:49:52:
                    89:ae:4a:54:ed:72:d7:ce:02:5e:4c:67:1f:43:b0:
                    49:6c:38:0d:09:75:76:c6:c0:e6:ec:37:f9:f7:30:
                    73:ef:68:52:83:49:7c:d3:65:ca:33:93:73:95:80:
                    21:e3:62:ea:c9:b8:c1:d2:38:9d:3b:f7:de:64:35:
                    8c:1f:c8:54:ac:70:3f:b2:40:96:d9:00:7c:a2:02:
                    3c:7c:de:64:1f:f7:3d:d0:85:fc:b4:59:5b:9d:28:
                    a9:f4:ab:77:9f:03:e2:4d:c0:84:8d:a9:d3:73:6e:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FE:99:A5:93:AE:59:AB:31:60:F6:09:36:91:A8:94:C6:6E:CE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b59ef3f7-1550-3f2a-bd96-9381bc7244e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:37:55:91:28:d0:bb:a4:21:3f:c1:d8:f5:e4:77:11:6b:5b:
         bf:29:30:1c:70:46:ff:e0:ac:c6:1b:27:eb:1a:96:f2:b7:6a:
         de:9f:25:b7:3b:62:69:ba:25:48:23:4d:eb:6d:21:0c:b4:1b:
         c1:30:96:4b:c1:67:e8:00:36:23:d2:9e:2f:dc:25:45:ce:62:
         a4:e8:7d:71:55:5b:d8:8d:61:52:54:3d:e8:0d:41:b2:3a:1e:
         af:bc:1d:cd:34:f7:21:75:7e:39:f4:08:77:86:2e:d6:4a:51:
         8f:81:da:98:53:fc:00:40:27:67:17:5f:3a:bd:b2:8a:33:e6:
         d0:cf:c2:ef:2a:b6:9d:48:af:d4:73:45:af:bb:d7:4c:f5:fe:
         ea:a9:95:da:c6:80:9d:7d:e2:9c:80:1b:90:5e:4d:e0:fe:0c:
         b8:8a:42:03:a3:ef:cf:ed:97:ad:fa:ab:2f:57:e7:9a:b5:e4:
         f5:24:11:e6:8a:23:6f:57:41:09:eb:23:c2:04:47:ce:46:aa:
         9d:c5:b1:0e:d7:9b:a7:e0:b1:1a:85:2f:90:29:e4:40:ec:d8:
         ca:08:af:c1:be:04:f4:2e:a7:12:01:55:b9:3c:bb:03:bf:33:
         6f:a4:30:c1:c1:d1:de:51:28:ba:ee:7a:1e:aa:01:7b:a6:c9:
         7a:97:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:34 2025 by rpki-client