Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa
File:                     7cca8c9b-95b3-3789-93a9-141f27073aeb.roa (raw, json)
Hash identifier:          APCyQCuWB+Jgf2BTQ4qngjgEdc+YHR3p8olmO/85x/Y=
Subject key identifier:   E4:8E:21:9E:22:79:54:06:61:9A:F8:23:96:98:C6:14:08:A1:E7:3F
Certificate issuer:       /CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Certificate serial:       010D0C9F4328584A2C201326D54787270DAA3080
Authority key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     14618
IP address blocks:        204.8.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:13:26:d5:47:87:27:0d:aa:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=50e9e7f6-faa1-4f2e-ac79-617af665c446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:83:9e:65:19:f9:69:91:e1:45:40:52:56:
                    fc:29:b3:d0:11:5d:54:33:c9:67:af:92:21:0e:df:
                    7e:2b:a8:e4:2a:75:08:0d:81:14:e9:7b:77:5d:ad:
                    91:c8:d8:2c:f1:57:69:43:02:e2:ee:dd:ab:47:41:
                    1b:da:95:39:9d:3f:46:5b:57:27:47:83:d9:56:48:
                    f3:b0:86:08:21:07:0e:77:cc:c6:df:8b:17:c8:0f:
                    1e:04:2e:50:3a:04:95:d5:e4:be:12:44:b7:47:a0:
                    c4:fe:ef:50:38:84:35:a4:d0:e3:5f:72:e0:19:bb:
                    9f:37:a8:0f:c4:e3:75:32:ad:2b:e2:8c:61:ab:d1:
                    60:b9:2a:6b:34:60:e6:6d:10:a0:36:1f:56:b5:a1:
                    a0:d8:50:5d:8a:3c:45:3e:03:aa:f9:ec:c4:99:f4:
                    06:19:0d:1b:b4:51:f3:bd:78:25:d2:5a:6f:ae:d3:
                    11:42:20:61:9a:eb:2e:77:d9:20:24:10:58:f2:ec:
                    fd:a0:d9:42:5c:02:74:6f:35:da:72:fc:f2:78:d5:
                    0c:e8:c0:65:77:aa:00:dd:7d:8a:da:c7:25:18:c6:
                    6c:cf:f5:27:b2:39:be:dd:42:24:e1:df:26:f7:14:
                    38:b4:47:c1:08:65:38:96:72:1c:b7:8a:06:62:05:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8E:21:9E:22:79:54:06:61:9A:F8:23:96:98:C6:14:08:A1:E7:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl

            X509v3 Authority Key Identifier:
                keyid:DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:3e:c2:9a:a0:77:18:c2:0d:a6:f1:a5:e6:32:78:79:04:8f:
         92:06:19:c5:ff:d4:89:08:b0:67:f9:de:37:cf:6d:a3:64:9f:
         99:6d:a5:73:c6:c2:83:b8:33:25:3a:e1:08:92:ef:c8:37:d0:
         f7:fb:39:30:08:0c:d9:19:a5:e8:22:09:c0:ad:6c:1d:63:70:
         af:77:cf:c5:bc:8a:b5:8e:c0:14:51:05:73:ae:9f:71:eb:fa:
         9d:56:9e:3a:1a:eb:08:63:61:8d:3d:75:4c:57:fd:2d:44:80:
         3d:d1:8a:4e:df:b3:e4:2e:db:78:4a:98:19:53:c7:d7:71:2b:
         bc:bc:d1:3d:52:54:73:d5:7d:2b:0f:59:22:6e:71:57:f0:87:
         e8:cb:b6:67:ed:c9:1f:87:7a:42:b5:cf:36:d8:51:0a:18:2b:
         c0:35:fe:a0:ab:30:b4:23:ad:fb:a2:20:8d:46:41:96:b1:e5:
         00:e9:64:f8:93:92:b1:f3:95:78:ed:f4:4e:07:ed:9c:05:a7:
         8d:47:9a:7f:8b:ba:a4:2e:4a:c7:6a:42:26:7e:2f:0b:fc:6f:
         dd:80:32:e6:16:5b:b0:03:d4:54:f5:8b:ca:4c:31:2e:e2:50:
         f7:72:9b:9d:c3:3b:be:73:87:14:84:d8:89:ab:76:77:7a:af:
         19:0b:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:33:55 2025 by rpki-client