Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e894568-7389-307c-b373-31f7ef2ccd63.roa
File:                     6e894568-7389-307c-b373-31f7ef2ccd63.roa (raw, json)
Hash identifier:          ubb06FulEspwZfjhsGRFGZ+a3t4wv+2Fzmdh/GcH87A=
Subject key identifier:   B2:DF:62:25:35:34:65:32:FB:A8:B9:33:97:EF:54:85:63:82:97:51
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A1B600B843B9491C3464FA940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e894568-7389-307c-b373-31f7ef2ccd63.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        172.235.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:0b:84:3b:94:91:c3:46:4f:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=186d7c89-7263-44f4-89b2-d19153b50c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3a:2f:ad:a1:93:49:f0:be:3a:bd:e1:56:3e:
                    d3:43:cc:54:0e:82:cd:b0:86:05:07:70:c1:51:61:
                    52:69:e4:c7:87:8c:34:df:1a:e4:55:12:07:a0:92:
                    68:7a:23:b7:19:99:8b:4d:0c:2e:d9:8e:7c:49:5d:
                    fd:07:f1:98:fe:f9:cc:95:62:2e:5e:7a:7b:91:27:
                    37:78:35:4e:b2:78:56:4c:e3:33:ee:03:35:47:42:
                    92:32:6f:a8:cc:d4:e8:45:9c:60:41:e6:d8:bb:ae:
                    9d:43:6b:ec:ab:76:59:29:98:e3:ea:30:9f:e6:10:
                    5f:6f:18:b1:06:db:48:65:7e:ec:df:24:ed:9f:7f:
                    68:b2:0d:da:94:85:1c:0d:16:e5:84:2c:53:5b:75:
                    4f:a3:e3:0e:ee:36:a8:a3:94:45:74:2d:59:b8:66:
                    3c:ff:b4:a9:87:c0:11:b0:72:db:c6:17:f9:d7:dd:
                    05:d5:4f:d5:c4:72:75:04:28:bc:b5:e5:43:86:c1:
                    cd:82:56:87:19:47:9e:c0:02:91:ff:c1:c3:40:75:
                    e1:60:35:2c:75:32:e3:a3:8f:a2:e2:57:59:2d:6a:
                    cf:5c:b4:59:50:fd:40:f5:c9:14:c2:c7:d9:14:d1:
                    4a:e5:ff:17:16:cb:d1:46:84:2e:77:30:c2:62:53:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DF:62:25:35:34:65:32:FB:A8:B9:33:97:EF:54:85:63:82:97:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e894568-7389-307c-b373-31f7ef2ccd63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:44:6d:61:d6:c9:11:3b:09:cd:43:76:ff:2e:77:dd:05:e8:
         a2:94:fa:1d:8d:1d:41:2a:56:d1:d7:2b:70:cd:c0:8e:0d:6a:
         ed:be:cd:c0:31:79:8b:ca:78:e6:44:ec:39:2e:ed:72:2f:80:
         6a:be:94:46:00:ed:92:10:0c:38:b1:e9:4e:08:f6:3b:56:ef:
         f6:02:92:0c:79:e0:6f:12:f7:3e:7c:37:8c:32:ee:72:7e:00:
         11:de:93:dc:ac:19:37:f0:1e:cf:0d:83:dd:ee:4c:83:78:66:
         eb:f9:fa:57:08:97:81:b2:97:e6:0a:db:57:72:88:16:84:53:
         c9:62:17:08:c4:9f:01:cd:7a:f8:70:15:43:1d:d0:35:61:5f:
         63:58:00:e2:cf:ca:46:e2:82:6f:89:8b:f5:2d:a1:37:85:10:
         79:a7:78:2a:e8:5e:a9:da:b9:38:fe:74:20:e2:eb:38:cb:e9:
         af:a3:a0:bf:af:09:0d:69:3e:b6:5e:4b:df:8b:82:c2:6e:80:
         c5:af:84:ac:66:6e:e4:51:a3:a4:ac:21:15:fc:29:8a:ff:bb:
         e6:0d:86:a4:a0:73:b4:db:93:da:67:bb:be:60:9b:b4:78:88:
         48:cb:7c:dd:b5:d8:bc:fe:54:19:2a:1c:32:d3:b2:06:f3:a2:
         7c:0b:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:05:09 2025 by rpki-client