Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa
File:                     b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa (raw, json)
Hash identifier:          jrVdK5vuJfDRwmtotLTTKu237BJzL0A236VtBvnceJU=
Subject key identifier:   47:63:41:93:CD:8C:D9:6A:9B:A6:03:79:3E:41:28:B6:0C:A3:E1:8D
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584AADF10D5238678CA43BD42DCC
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        142.202.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0d:52:38:67:8c:a4:3b:d4:2d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=75d990da-a071-4144-b862-7e541862f2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:ed:2d:11:15:91:7b:df:f7:81:f1:b6:85:
                    41:d6:6e:1d:b3:06:53:c4:c1:25:26:33:4b:20:36:
                    45:39:92:72:2b:4b:80:20:00:b9:dd:11:f8:6b:50:
                    6a:3c:55:2e:ac:85:b3:6b:33:e8:fc:83:52:52:98:
                    77:77:1e:4d:40:f9:5b:9d:7e:6f:78:60:d9:e3:26:
                    07:a6:21:a1:b8:9c:fc:c9:3a:c7:eb:84:57:73:29:
                    d4:d2:97:36:c2:48:65:b7:7c:c3:79:18:0c:2c:e3:
                    1a:c9:ef:5d:cf:b4:6a:69:62:36:ef:02:9d:40:44:
                    32:b0:84:15:c9:70:af:6b:53:92:16:54:47:2e:32:
                    c3:81:80:83:f8:1c:54:07:cb:a7:27:c6:ee:e6:11:
                    3f:53:bd:a3:d5:a3:78:0a:16:a2:1b:1f:a1:aa:19:
                    2c:8f:aa:70:5a:46:e5:63:04:05:b6:24:14:4d:9e:
                    b0:aa:d8:d0:f0:de:25:d3:58:0f:26:e1:42:5e:f6:
                    fb:bd:ca:61:b8:74:92:1d:14:85:28:e7:fa:a2:79:
                    a7:c5:7d:76:5b:f9:18:13:f7:6c:3a:2b:c7:a9:87:
                    b9:0d:cf:72:61:f5:94:86:f0:b1:42:13:98:a4:58:
                    0a:7b:d1:37:d9:d2:fe:19:7c:66:ba:22:8f:4d:68:
                    c8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:63:41:93:CD:8C:D9:6A:9B:A6:03:79:3E:41:28:B6:0C:A3:E1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:9e:b0:cf:7c:a8:3f:0a:d8:d2:2d:19:72:10:dd:96:42:f4:
         57:80:92:66:3c:ad:dc:e8:45:09:f6:9f:4c:31:f5:d3:2c:b6:
         a2:0e:35:b0:3f:26:a0:b3:3d:f2:9e:ea:f8:da:c4:79:c3:42:
         45:e9:9c:ae:45:da:9a:39:a8:a9:27:7a:22:be:58:4d:50:8a:
         13:04:25:27:00:d5:e8:b0:b2:6d:8d:06:1c:fe:34:0b:3b:ef:
         64:40:0b:c1:fa:df:a2:74:e3:3c:d5:b4:5f:79:3c:ba:ee:8a:
         6c:b0:a9:d7:2c:6c:b1:0b:55:24:6b:6d:c1:a3:ac:c2:69:31:
         b8:44:da:c0:c7:5e:4f:f1:a2:e3:a6:85:2f:5f:df:98:ab:49:
         e7:e6:6f:26:b2:45:47:cb:23:b7:3a:9b:30:bd:a7:27:d2:a2:
         e1:b7:07:fc:b3:4a:3f:be:1b:9f:2d:1c:30:d9:1f:64:86:2d:
         c3:2c:f3:a5:0e:77:06:ad:4d:d1:26:df:dd:7a:b3:47:41:b1:
         77:21:42:d6:64:39:5b:aa:71:97:e0:34:bc:9c:12:a7:08:f9:
         e4:e2:c1:20:b7:76:4f:cf:17:52:fa:f8:26:71:2c:fe:8f:03:
         6e:9a:f0:12:9a:4d:94:5e:89:2e:77:8f:85:cb:69:df:aa:31:
         86:fa:25:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:16 2025 by rpki-client