Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa
File:                     d7e961b2-50a1-302c-b680-21a7f62e493d.roa (raw, json)
Hash identifier:          boGz8V2kHZO0ZOHs5j2HfSIRNa6Hv1ErGvFmmRRnnqg=
Subject key identifier:   AF:08:A2:AE:1E:DD:F1:78:77:EC:DF:A1:2B:8B:11:FD:DB:02:C1:8F
Certificate issuer:       /CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
Certificate serial:       010D0C9F4328584AAB265D03B68B0DFA25B2C0D0
Authority key identifier: 46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     22711
IP address blocks:        206.83.160.0/20 maxlen: 24
                          2620:13d:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5d:03:b6:8b:0d:fa:25:b2:c0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=55390ed0-1d41-47e0-9d7c-531b3f278831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:b5:32:11:94:ac:8b:a9:98:6e:84:c4:e2:
                    f5:bf:da:35:83:ff:aa:3e:97:df:21:13:9c:1b:76:
                    1b:6c:7a:ee:68:67:ad:a4:40:d9:92:ab:33:1d:77:
                    85:7b:6f:de:6d:df:45:b7:e6:d6:97:03:ee:c1:ff:
                    d3:d8:2d:82:1d:2b:27:82:69:20:7c:6e:02:e9:f1:
                    92:73:a6:0a:5c:32:96:51:c9:0d:f2:02:b2:2f:7c:
                    bd:f3:51:5d:44:a5:ae:68:c9:89:ce:b2:c6:46:27:
                    e0:f4:ff:04:fb:31:0f:ca:d6:35:e6:63:52:9c:dd:
                    3d:ff:13:55:91:30:92:02:e0:4a:8e:cf:e6:c7:9c:
                    31:c2:57:d1:d7:70:4a:b5:80:28:b3:84:79:45:ca:
                    49:29:3f:fa:8e:ed:97:0a:fb:49:8a:55:4b:3a:2e:
                    29:43:1a:96:f7:53:7b:26:79:ed:85:85:fe:82:22:
                    14:28:59:ed:70:d6:78:e5:50:e0:ff:99:69:4a:0e:
                    1f:63:25:79:8b:92:31:c4:60:88:4b:60:aa:17:9d:
                    11:ca:7f:e2:33:0a:6e:ca:36:dc:1d:89:01:48:8a:
                    d0:14:fe:36:f6:bf:88:fc:79:4c:95:b9:12:22:9c:
                    86:4a:00:5c:31:b0:1b:9d:20:bd:ed:37:07:8c:74:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:08:A2:AE:1E:DD:F1:78:77:EC:DF:A1:2B:8B:11:FD:DB:02:C1:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.160.0/20
                IPv6:
                  2620:13d:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:24:9c:8d:34:7c:36:54:d3:7f:82:70:e0:60:8d:ed:9e:
         f7:ed:d0:bb:43:6a:79:7b:f7:e1:f0:71:8b:df:76:eb:fd:76:
         aa:f3:6e:dd:e8:d9:10:59:e4:84:20:40:01:7a:e5:61:76:b7:
         d6:72:5f:1b:37:6a:3b:db:d6:76:fe:3f:ab:9b:44:f9:8f:c9:
         ac:78:69:1f:c5:c6:89:63:66:c0:12:15:dd:26:f4:9c:9c:6d:
         ef:03:d4:21:57:36:3a:4e:28:2a:76:7f:5c:ab:4d:72:89:c1:
         fe:d4:05:20:ba:75:07:0c:17:48:2e:0a:ed:1a:30:bb:4d:7d:
         10:a4:ca:c6:44:c9:b3:f9:76:d2:6b:0e:3f:95:62:51:93:b5:
         30:a8:44:c7:2b:8c:7a:46:88:f3:e5:4f:7c:95:d1:5e:0e:24:
         27:10:51:d6:59:ff:83:3b:6a:4d:06:9f:a8:23:5d:c7:9c:54:
         11:c8:de:76:cd:8c:21:10:29:92:9f:4d:de:67:bb:03:8a:ac:
         15:17:cc:94:0a:b5:2f:1b:b1:2c:80:66:0f:3a:4d:1b:75:93:
         8d:e6:ca:b9:0a:04:3a:13:b8:e2:0c:4f:f8:03:3d:95:98:df:
         2d:af:85:33:81:75:b4:20:af:9a:7d:40:02:d8:aa:fe:6e:e3:
         32:99:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:55:51 2025 by rpki-client