Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/7b955745-927c-3c7f-9d47-e4d308f4614a.roa
File:                     7b955745-927c-3c7f-9d47-e4d308f4614a.roa (raw, json)
Hash identifier:          L3D6Kc1RlvxtHwUbhLy3nmKY5tVuEiiPLhyH/EOG98Q=
Subject key identifier:   59:FA:8F:9E:DF:A5:03:13:D4:CB:75:7D:92:1C:16:33:16:FA:AE:01
Certificate issuer:       /CN=c186a276-9141-41da-babe-4559d2c6d734
Certificate serial:       010D0C9F4328584A9BCB72A270AA9EACA21B7880
Authority key identifier: 6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/7b955745-927c-3c7f-9d47-e4d308f4614a.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     15305
IP address blocks:        206.168.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:72:a2:70:aa:9e:ac:a2:1b:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c186a276-9141-41da-babe-4559d2c6d734
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=e866ef8c-5fed-4da5-b510-d421bc26bf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:df:86:ed:08:5a:2a:b0:2c:57:68:12:0f:
                    cd:f9:b5:dc:94:08:17:bd:bb:28:89:56:78:28:1c:
                    cf:5b:7f:9e:fd:2f:97:13:d7:41:99:d9:0c:ff:fb:
                    e7:b5:87:32:a9:de:30:80:be:1c:f5:30:be:9a:67:
                    cd:28:53:81:27:1a:fb:70:85:43:b7:97:83:ac:7b:
                    fd:e4:c3:48:d8:50:ec:07:cb:0c:5d:96:66:12:67:
                    53:5a:9f:2a:6c:1f:da:e8:c4:9e:bf:6a:fa:fe:9c:
                    56:77:86:46:14:8a:bf:6e:dd:3e:a7:b8:24:c8:59:
                    9d:be:6a:0f:35:18:b0:a9:e0:cc:18:3e:b0:5f:85:
                    6d:4a:ab:d2:d9:dd:5c:94:d2:77:44:f1:96:fa:74:
                    70:88:99:47:35:9a:1b:ae:3c:6e:c2:c6:26:db:e2:
                    cf:28:72:9f:fc:f0:47:70:68:3b:f5:10:c5:7b:26:
                    36:4a:4e:0f:75:21:91:79:0b:78:bc:2e:8a:7f:d9:
                    3f:d2:66:1d:28:9a:8b:7a:4e:70:a4:7c:17:61:0a:
                    a5:d0:ea:dc:8a:5e:57:80:76:a0:6a:31:fc:f3:fc:
                    d3:46:c1:35:2d:89:ae:cb:98:f1:28:a0:8b:9b:0e:
                    78:f3:ee:80:4b:4a:17:e2:1b:21:1f:85:e0:f3:41:
                    18:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FA:8F:9E:DF:A5:03:13:D4:CB:75:7D:92:1C:16:33:16:FA:AE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/7b955745-927c-3c7f-9d47-e4d308f4614a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl

            X509v3 Authority Key Identifier:
                keyid:6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:52:91:99:ad:93:52:61:df:21:0c:22:66:48:49:33:ec:30:
         dc:8c:8c:16:e5:1e:fb:b8:79:d2:1f:9e:65:ad:1d:d0:77:bb:
         c3:c6:63:64:14:63:0b:2a:b7:5d:fa:35:b1:93:b5:59:d8:1d:
         7e:64:dd:2e:f0:8d:80:b1:fb:b9:46:90:ba:09:f1:b5:7d:ce:
         6b:3f:91:4d:4e:f7:9a:82:d1:a3:37:c4:33:cc:00:5d:8f:64:
         68:76:34:3f:f4:03:68:1f:53:b6:1a:ec:a7:22:f0:3a:71:94:
         82:fb:6a:ea:ab:b6:b3:58:33:b3:4b:ae:3d:7c:77:a1:37:04:
         53:71:a6:bd:3b:1d:d0:08:8d:38:45:6f:e9:3e:59:f2:da:09:
         41:90:48:bc:da:f7:25:4f:1e:05:bf:2a:15:8c:a7:7e:cf:3c:
         43:46:ad:39:6a:37:60:f9:d3:73:14:bd:e8:f7:7e:bc:bc:7e:
         d9:fb:75:f8:66:ce:dd:36:87:11:2d:1a:82:a3:5b:09:34:1c:
         25:6e:fc:b9:2d:bf:8a:e5:0c:7f:c0:51:b8:47:98:d9:d1:d6:
         57:1f:a5:ab:cc:1f:05:81:ce:c8:97:ea:d2:a2:e8:a6:73:84:
         47:91:10:be:ce:29:40:14:5a:88:2a:0f:0d:fc:da:52:36:94:
         6a:1f:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:24 2025 by rpki-client