Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa
File:                     14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa (raw, json)
Hash identifier:          G7A/MdN6p54mgD4QgpnuIf2T0ZYkBRLX/wpJA4JIXRg=
Subject key identifier:   66:78:F0:60:CB:68:46:4E:2B:D2:75:40:4D:AB:44:03:8D:0F:99:ED
Certificate issuer:       /CN=209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7
Certificate serial:       010D0C9F43285849CBCF8EA8945FC4DE6E567800
Authority key identifier: 81:15:A2:E7:D6:95:EA:BE:06:B5:02:F1:90:09:98:2F:53:CD:D4:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        192.206.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8e:a8:94:5f:c4:de:6e:56:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=7e42c018-8f65-4e80-897a-a4e5f7fb7b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:04:ec:e0:de:02:2c:c3:c8:d3:1d:73:70:
                    65:52:f9:db:ad:b7:09:d1:2d:af:8b:85:a2:4e:e0:
                    18:86:92:8e:63:60:97:27:5a:21:b3:7a:36:9d:e9:
                    4b:28:94:1b:2f:c6:68:94:28:61:10:00:91:ce:b6:
                    49:39:f9:61:65:10:28:3e:8f:2c:c9:7e:9a:6e:33:
                    0a:2a:ee:ef:b2:38:16:bb:a2:ce:85:5a:10:33:da:
                    12:40:a7:29:53:d3:c0:5b:e8:5a:af:f4:43:fd:58:
                    82:cd:ae:3e:21:6e:01:60:b4:bf:28:23:29:c3:3d:
                    22:59:37:5c:81:f7:4a:33:86:cd:60:92:0c:47:5d:
                    57:50:df:10:02:2e:83:0d:9a:44:05:38:c5:cb:c5:
                    e3:6d:9f:fc:b8:f8:dc:46:dc:f6:db:da:61:67:65:
                    ee:79:d7:fa:88:60:ee:c9:9b:30:79:16:67:d2:52:
                    d6:04:5a:cf:22:78:aa:e5:5c:f3:9d:c1:db:ac:b4:
                    1e:7d:ce:50:3f:fe:3a:b7:2b:db:f0:dd:e0:dc:ee:
                    8c:30:43:4c:89:e6:03:d2:f3:c2:21:d3:df:a0:ab:
                    ef:9b:f4:98:58:a9:7e:f6:38:d5:0c:a3:03:68:51:
                    88:24:ee:ba:24:f1:59:99:57:1f:de:bb:f1:c9:09:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:78:F0:60:CB:68:46:4E:2B:D2:75:40:4D:AB:44:03:8D:0F:99:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.crl

            X509v3 Authority Key Identifier:
                keyid:81:15:A2:E7:D6:95:EA:BE:06:B5:02:F1:90:09:98:2F:53:CD:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:6d:9f:ef:3c:48:b0:5a:35:fa:95:1d:00:91:5b:80:78:
         15:48:5a:7e:3d:9a:33:c8:e5:be:0b:b6:bf:76:c0:92:77:20:
         85:35:8e:c2:aa:8a:0b:84:da:3b:e9:f4:25:ab:a3:30:bd:75:
         29:1a:d0:34:ec:1f:7e:5b:0f:25:4a:0a:60:d0:6a:1e:0b:d9:
         4a:a8:cb:03:e6:97:7a:0d:46:31:38:72:0a:b1:89:74:0a:cb:
         38:a3:21:cc:02:37:3f:49:7b:6c:ee:da:18:2b:36:b5:0e:01:
         a4:f3:39:e3:4a:84:22:33:00:a7:73:29:63:b4:cb:59:29:cf:
         9c:06:cf:66:42:fd:fe:aa:62:f2:99:19:64:48:f4:a0:87:f2:
         2b:48:d2:1f:df:cd:79:83:59:65:a9:8d:b2:46:ae:bf:ea:99:
         94:94:5e:dc:8b:68:88:86:e8:36:f0:44:ca:0b:9a:8b:2e:86:
         07:1e:58:01:61:8d:4f:10:bd:cc:bd:ee:11:e6:46:f2:10:62:
         ea:25:13:d0:09:9c:29:e2:f4:8d:48:1f:1d:b8:b4:a1:c4:f9:
         c1:01:b2:ce:bd:56:4d:2a:ba:f7:34:02:ed:21:cc:8b:a0:a6:
         af:69:10:93:ab:14:a0:8e:c4:95:41:1b:7f:0a:e7:51:fd:91:
         f9:73:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:13:00 2025 by rpki-client