Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa
File:                     b22085cf-e389-3e14-9173-666e83976274.roa (raw, json)
Hash identifier:          vAkaCsU5iyIKh+m7GW4sKNB6nAYSyoNFl8Qwv/5FkRo=
Subject key identifier:   9D:D6:3A:08:17:32:1B:C2:7F:43:F1:DE:F8:FB:D7:04:F8:24:59:2D
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F4328584AAB264F530E1790DD7A70C800
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     62700
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4f:53:0e:17:90:dd:7a:70:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=cb8f6d19-94a5-433e-81e7-20a9cd57372f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:3f:34:56:61:90:ff:54:49:61:5a:97:c2:
                    2e:da:fb:4d:44:45:4b:58:61:84:81:73:e9:b9:f5:
                    8a:cf:b2:a6:03:34:8b:ca:38:d5:05:72:87:38:61:
                    5c:02:af:e1:a3:3c:79:12:d2:bc:e5:01:55:d1:a6:
                    6e:28:1e:34:7b:af:9c:33:4f:83:e1:07:e5:4f:99:
                    1a:c2:e9:0a:d3:10:fb:0b:30:24:29:2a:4d:ab:64:
                    77:55:33:5d:cf:32:20:73:ec:68:c9:d2:b6:d8:93:
                    7a:b0:6f:ac:fe:18:52:e3:f1:9e:29:df:29:0d:69:
                    03:d2:0a:63:0b:cd:55:f2:2e:71:ac:ab:24:41:df:
                    0e:b4:63:b8:45:3d:4e:37:72:bc:f2:a4:b4:b0:5d:
                    7c:20:99:4e:95:93:a0:fe:4f:3e:e1:cc:86:35:1b:
                    c3:30:f1:80:69:fa:75:f5:0b:3a:b4:4e:46:de:43:
                    a8:58:c2:11:86:c8:3f:df:f8:14:a2:39:6b:5f:ca:
                    a6:7a:57:98:32:7b:3a:d6:34:3c:c4:ec:0c:2f:f1:
                    0a:b2:88:1e:2b:e8:6f:1a:03:8d:32:36:ed:9c:93:
                    f9:2f:2c:1c:c0:3e:24:df:de:67:65:24:e7:4f:f4:
                    fa:b1:b3:ad:48:0f:7e:c0:7a:08:74:9d:4b:37:e3:
                    04:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D6:3A:08:17:32:1B:C2:7F:43:F1:DE:F8:FB:D7:04:F8:24:59:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:08:bd:45:d5:68:e9:0f:51:80:bd:48:89:c0:d1:3d:af:24:
         b6:14:8e:32:2c:80:48:65:65:6d:e0:75:b8:94:18:ac:eb:53:
         68:18:8e:17:ed:33:8f:f4:b2:22:4d:27:42:66:37:ca:36:f8:
         b1:26:9a:93:e9:5e:81:10:cb:f3:dc:ff:e9:d7:9c:c1:2b:ff:
         c6:7b:dc:ec:af:19:e6:ec:a6:fd:1c:fb:46:a6:5d:10:77:e5:
         a8:be:a5:c7:fc:15:d5:06:6d:40:1a:90:9e:42:31:2c:d2:a8:
         81:e2:46:b6:30:6a:6a:fd:d7:90:c4:b7:df:9d:08:5f:18:58:
         07:5c:1e:fc:c2:a8:e6:d4:3a:f1:75:89:1d:c8:f5:57:77:a3:
         a4:08:f6:99:ee:d5:f3:4d:fb:4d:c9:e7:a9:f5:83:db:b5:d2:
         cc:7e:db:00:d2:ab:41:31:0b:43:f1:72:6c:5b:ef:5e:46:b8:
         af:e6:77:eb:c9:56:b3:46:5f:5f:dc:5e:a6:0c:7f:6e:62:b7:
         12:7f:07:72:ff:c4:a1:da:12:33:0c:f5:88:45:23:b0:84:56:
         22:f8:46:44:81:34:02:cb:ea:15:7d:62:4b:d9:7e:cb:91:31:
         f3:45:49:94:12:8f:59:bb:c6:1a:3d:88:93:57:aa:5f:bf:17:
         82:20:04:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:52 2025 by rpki-client