Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa
File:                     0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa (raw, json)
Hash identifier:          HBS/nDlbLeZKPWvjZEthm2fq9RjDlzstpfs3I9LXTX0=
Subject key identifier:   78:5C:FF:D6:41:C6:16:4A:B9:43:94:44:BA:76:38:93:F3:29:F6:35
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584A2EEABAED399F6F134988F000
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     21947
IP address blocks:        209.200.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:ba:ed:39:9f:6f:13:49:88:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=337d7add-2792-4d38-a915-f3cc386269aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:1c:d7:59:d7:c6:c6:f2:c8:8a:27:4d:c2:
                    41:fd:60:07:e1:7b:d7:fd:4f:6b:1c:79:72:19:ec:
                    7b:a7:36:c2:d4:a7:bf:30:93:1e:33:e4:c6:31:0d:
                    44:13:0f:a3:64:e4:e9:b8:ec:6a:40:e6:c8:56:39:
                    6c:77:f8:9a:1e:b7:31:5d:42:41:ed:a8:71:1d:c6:
                    71:c4:71:00:a7:46:a3:0d:cb:b7:43:62:86:7b:8d:
                    9f:49:20:20:1b:1e:8a:6f:62:56:63:66:3e:61:4c:
                    97:4a:29:c6:ae:1c:38:44:6b:dd:df:ea:16:e2:dd:
                    2c:96:a9:26:e6:c6:da:a9:c2:ac:d0:f8:c0:44:88:
                    b4:65:4d:d8:77:3a:20:c9:85:d8:0e:40:d2:a4:28:
                    51:3f:c0:4d:58:f5:ba:3f:5c:5b:5d:35:53:ea:2f:
                    26:01:38:45:a8:64:ed:ab:fd:9d:4b:12:d5:7a:ac:
                    a4:80:fd:0c:8c:f4:33:1e:96:ca:9c:b0:9e:c3:c9:
                    33:30:5c:da:39:9c:ab:86:97:1b:a4:a0:1d:48:09:
                    9f:04:e1:5d:42:f4:33:63:27:c1:d2:18:87:fc:a8:
                    6d:33:db:8a:5a:68:89:00:0b:a1:41:9b:3b:8d:a2:
                    a1:c7:53:c7:ea:09:82:fb:11:e2:87:35:7f:fd:9e:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5C:FF:D6:41:C6:16:4A:B9:43:94:44:BA:76:38:93:F3:29:F6:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ba:ee:12:56:ce:4d:f2:8f:9a:80:44:79:11:02:8e:92:ab:
         99:1f:25:57:5b:16:35:45:de:25:92:63:36:ba:8c:a6:0b:82:
         66:44:34:35:0f:61:fa:2d:4c:a3:5a:47:97:78:44:b0:23:75:
         33:55:63:cd:45:7d:88:87:c3:ef:dc:73:2f:3c:ac:8d:f9:6b:
         00:00:bd:d9:41:fb:c1:5c:80:c0:5f:d1:c0:4c:5c:95:35:c8:
         d5:5c:c1:4b:21:7a:03:be:82:c9:5f:36:60:5e:83:52:0a:bd:
         e6:fa:d5:67:60:7c:22:45:b0:dd:ba:74:24:28:de:69:da:28:
         63:a1:f0:0f:4d:f3:47:6c:33:2c:9b:3d:51:c5:35:7a:68:58:
         cc:4a:58:40:a4:18:59:e4:cb:b9:fd:7c:57:0a:bc:ff:47:d0:
         88:c4:8f:60:86:7a:12:b4:1d:42:8e:e5:23:00:f1:02:f0:c0:
         59:d7:fa:28:68:76:9a:b6:d3:e5:3f:4b:d6:d1:b8:65:33:f5:
         17:ec:42:76:65:5b:9f:6f:04:4b:85:51:13:1a:b6:85:57:55:
         f0:aa:6c:47:d6:d5:b5:84:ef:63:4f:82:6f:ac:80:51:b2:e6:
         3e:39:1b:fa:86:6c:59:69:58:67:77:8b:88:e3:e3:6c:12:b8:
         35:5b:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:46:42 2025 by rpki-client