Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/ec3fed5d-f9e7-3a2c-9f4b-b27b16e6e4af.roa
File:                     ec3fed5d-f9e7-3a2c-9f4b-b27b16e6e4af.roa (raw, json)
Hash identifier:          PXYX3egjaKtrZZSKDlY7u772m9BznbNX2ujhDqFWEhw=
Subject key identifier:   E7:06:3F:1A:81:73:B8:7E:95:69:5A:8A:9B:65:73:81:1A:45:F0:A5
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584AB650E4065A4017837249F400
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/ec3fed5d-f9e7-3a2c-9f4b-b27b16e6e4af.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     12129
IP address blocks:        205.251.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e4:06:5a:40:17:83:72:49:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=e28a08a6-754c-4edb-b96a-99ea9c54ad19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:73:4f:f0:c6:ef:80:1c:ff:a7:2b:f3:ce:44:
                    db:89:3a:13:1c:70:1d:31:30:a2:a1:98:b8:8d:5a:
                    a5:d3:34:a9:e8:19:cb:bf:21:e2:60:db:ae:66:b4:
                    ae:ee:07:51:ce:cb:93:9a:e6:b2:bb:22:82:4e:fd:
                    68:e1:aa:94:ec:f3:45:41:57:1d:ac:1f:50:eb:94:
                    36:f0:5d:2e:b3:15:cb:92:73:72:ac:42:09:90:56:
                    ca:a0:a1:9b:f4:7e:d8:b0:ff:5d:a9:05:61:03:02:
                    74:db:e7:e0:24:cf:75:f9:7f:e5:a9:b4:58:8a:0f:
                    2d:3d:48:85:b9:6d:eb:cb:8d:d9:5a:9d:73:33:59:
                    aa:aa:95:2f:32:04:ce:1e:2e:4b:86:5b:33:8f:ea:
                    62:8b:b1:b4:1d:6b:db:ab:b1:f5:65:8d:2b:19:34:
                    87:fd:f5:23:1a:cf:db:63:67:9d:fa:2f:ad:5d:20:
                    81:d6:18:ec:86:77:e0:c7:9e:07:e4:82:a6:18:3a:
                    aa:36:1c:2e:52:29:cc:14:b3:7d:37:55:6f:31:00:
                    a1:cf:b1:ec:52:fd:ef:59:23:b5:95:47:49:46:99:
                    9e:e2:34:99:d9:b6:49:75:96:42:44:95:45:2d:44:
                    72:bd:a4:33:ef:3b:e2:55:40:e4:72:d3:83:4f:56:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:06:3F:1A:81:73:B8:7E:95:69:5A:8A:9B:65:73:81:1A:45:F0:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/ec3fed5d-f9e7-3a2c-9f4b-b27b16e6e4af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:70:2c:7d:b4:d5:e5:0d:39:91:b6:93:92:86:39:ad:3f:b5:
         67:44:0d:8a:c0:b4:4a:0c:df:af:8f:2a:43:28:64:f0:15:80:
         41:59:60:8f:4d:b0:aa:92:f5:0f:47:e9:29:49:95:90:e9:24:
         25:a5:9d:7e:0a:15:c9:de:44:27:74:d9:4d:66:84:2e:10:69:
         c6:d6:38:2d:4a:13:95:58:81:63:08:bf:68:5f:03:5b:5a:c8:
         aa:32:f2:a1:7b:6b:43:be:5f:43:42:07:07:43:a3:97:65:04:
         05:c4:94:c3:fc:57:dc:59:8e:3a:97:47:34:e8:dc:7d:dd:af:
         db:f1:c3:29:bb:ed:02:bd:84:f6:13:fc:fc:ea:eb:05:82:f6:
         c7:c3:c1:7c:e7:01:b1:a8:34:e9:2c:f4:fe:cb:9c:da:79:44:
         bd:0b:91:01:40:de:3e:75:ce:b7:93:8e:48:87:5b:ac:f8:f4:
         6a:b8:a3:db:60:78:34:af:9e:00:e8:3a:35:c6:d2:60:ce:ee:
         71:0c:74:51:2e:68:61:b7:24:ee:4b:48:58:3f:db:d2:3e:f9:
         82:9a:e1:29:5e:af:1a:d7:75:c0:c7:89:06:db:1c:91:85:de:
         69:42:11:a0:7d:c6:b5:08:2b:22:4c:26:08:f0:95:60:ea:9c:
         e0:92:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:05 2025 by rpki-client