Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6da0c892-be19-300d-87f4-fdb8228015ff.roa
File:                     6da0c892-be19-300d-87f4-fdb8228015ff.roa (raw, json)
Hash identifier:          3BbbOjAkoed+XUg+HK0XBWpP6tikq0ILJe8iI8aqTkc=
Subject key identifier:   A7:CC:D1:8F:F7:31:92:31:1E:46:F0:5E:89:2A:7D:BF:62:53:23:8D
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285849D42FAB647A4F0BAC87E30AC0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6da0c892-be19-300d-87f4-fdb8228015ff.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     17057
IP address blocks:        209.8.6.0/24 maxlen: 24
                          209.9.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:ab:64:7a:4f:0b:ac:87:e3:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=ea9e2729-474f-41d8-9c19-523000e8f0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fa:57:45:b2:2d:9a:30:fb:fc:d5:65:1a:aa:
                    05:b7:93:ac:c5:87:7c:c0:78:30:9a:ea:be:9b:84:
                    24:c4:dc:f2:2a:e7:57:14:cf:05:14:64:d4:f0:79:
                    ba:2c:d1:df:d2:6a:00:6e:b1:62:86:30:11:0f:1b:
                    3f:e2:72:7d:94:cd:83:31:b0:a5:d0:e2:93:36:49:
                    8d:d2:72:f8:44:23:87:62:e9:fa:41:3e:86:82:dc:
                    0e:76:c1:95:3a:6d:0d:59:a5:0c:76:5e:f3:64:2e:
                    54:cb:63:32:fd:12:e9:c3:d4:10:8f:2f:df:2a:bc:
                    59:12:85:75:1c:83:8f:d8:26:a5:4c:86:44:ec:71:
                    d4:ad:3c:9b:3f:2d:01:79:70:23:27:51:dc:35:48:
                    41:d4:11:d4:c5:bc:04:77:71:69:a9:e4:a0:55:cb:
                    ae:b7:0b:06:45:c3:48:55:d5:16:6b:7c:e8:61:35:
                    e2:13:a5:ff:62:3b:0b:db:f0:88:e0:d1:6a:04:73:
                    a2:9a:61:cf:c5:24:b6:fc:13:03:ca:91:3a:8d:a2:
                    17:0c:08:a2:ba:f8:90:05:cc:75:b3:5e:16:5b:2d:
                    8b:8e:e5:83:a3:39:cd:a9:a2:c7:d2:02:45:00:82:
                    cc:41:28:69:25:74:ae:44:c0:1d:a9:b9:a7:b2:15:
                    c9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CC:D1:8F:F7:31:92:31:1E:46:F0:5E:89:2A:7D:BF:62:53:23:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6da0c892-be19-300d-87f4-fdb8228015ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.8.6.0/24
                  209.9.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:13:46:ce:7c:75:a0:2b:67:92:18:10:20:4e:49:67:fc:
         b0:36:01:ce:6c:16:1c:a2:ce:c8:93:9a:3e:21:4e:41:37:0d:
         a4:f0:7f:bc:8a:a1:7a:c5:f7:02:85:4e:7a:b4:56:5f:b2:36:
         f5:c7:15:48:aa:fe:98:15:8b:db:c6:de:5d:98:01:5a:11:39:
         9c:7c:21:42:72:ba:38:55:ac:da:88:0d:e0:0e:e4:d0:30:8c:
         28:e8:5b:28:e1:24:c2:97:6b:3c:9c:95:f7:f5:92:e4:41:38:
         7e:67:7b:35:18:31:49:c1:7a:86:b7:b4:18:cd:2a:af:18:fc:
         e4:e7:a7:a7:e9:6b:07:d0:e9:6a:4c:9c:e4:a8:ef:e8:3d:90:
         ca:8b:25:4d:59:04:b6:3d:67:26:a9:e0:23:74:c7:fa:75:d4:
         86:1a:e1:33:bc:2f:17:8f:44:d4:95:6a:bf:fc:72:79:df:36:
         a6:e2:5d:48:84:18:aa:0e:90:96:d6:25:d3:6f:87:50:24:ed:
         79:87:2e:f9:25:ff:6a:a3:74:5b:00:b0:fc:1b:d2:0a:8b:0a:
         c4:12:28:2a:5a:53:2f:ed:ef:a6:9b:2d:27:ea:ec:b7:5e:5c:
         86:6b:85:d9:e3:c4:14:5e:2c:ca:0d:e1:18:05:41:ab:ae:24:
         2f:18:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:19:23 2025 by rpki-client