Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/fa0d3697-364c-3350-9d30-9feddf64d888.roa
File:                     fa0d3697-364c-3350-9d30-9feddf64d888.roa (raw, json)
Hash identifier:          RG+msFx2CNFgvI+AB5g4g3SJKFX6kRmUl0NB1DRRJ2w=
Subject key identifier:   52:67:B0:E6:BE:FE:22:C5:37:0B:AE:32:8F:83:B0:A8:E3:D1:7D:1A
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F4328584A3A157B4762660771C9D2B280
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/fa0d3697-364c-3350-9d30-9feddf64d888.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     6461
IP address blocks:        204.227.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7b:47:62:66:07:71:c9:d2:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=6d1b0497-8e03-40cd-9fb7-bb13d4b44b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:18:0f:67:4e:65:06:bb:40:34:fa:be:76:
                    60:1a:eb:5b:85:ff:22:38:0d:dc:b9:6a:ef:92:51:
                    8b:49:ef:be:5e:3b:16:20:05:22:41:24:53:9d:2b:
                    98:3a:3e:01:1f:f6:73:fe:8c:81:fd:be:80:f0:9d:
                    91:71:1c:ff:fd:a3:e9:a5:be:d7:be:70:6c:e2:19:
                    91:62:9a:01:14:54:a6:27:5b:18:0c:2e:bd:56:ab:
                    2c:a5:69:6f:73:40:8e:04:ff:7e:18:17:73:c4:73:
                    1f:5f:b7:7d:70:a1:b0:f0:97:aa:ad:21:df:e6:a1:
                    8e:0d:1d:fa:f2:d7:d2:e6:68:13:f9:ee:d3:f3:52:
                    ce:a8:a4:3c:b2:eb:34:de:68:aa:fd:15:0a:77:7e:
                    fa:86:06:4b:d2:ea:4d:dc:00:23:d9:56:18:ab:4e:
                    e7:0c:17:57:6d:04:bb:e9:13:7f:00:66:0b:ac:b0:
                    0f:17:27:66:1d:f7:c0:34:c7:18:28:04:ec:91:af:
                    be:6d:1f:28:43:15:b3:cd:7e:e8:79:fc:2c:53:f1:
                    3b:07:54:38:bb:ba:57:bb:47:94:96:53:86:fe:43:
                    09:51:e7:68:3e:b6:b9:6a:70:7d:ca:cd:d8:91:2b:
                    0e:ea:c7:d5:8d:a5:b6:ae:53:9c:ac:90:e1:82:b7:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:67:B0:E6:BE:FE:22:C5:37:0B:AE:32:8F:83:B0:A8:E3:D1:7D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/fa0d3697-364c-3350-9d30-9feddf64d888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.227.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:df:5f:34:5b:a1:03:3b:f5:09:8c:12:73:ff:9d:f7:98:71:
         12:af:e7:0b:d5:aa:16:8b:a0:3e:7c:10:33:a2:88:29:bc:31:
         24:fa:bf:64:b7:29:af:42:03:2f:a2:ca:f8:ed:42:fe:ab:3d:
         c5:b5:6f:86:71:b3:ce:ac:40:c4:29:99:6a:01:95:a5:cd:70:
         51:44:90:97:0d:95:46:b7:b3:c0:b2:36:cc:cb:69:de:f7:92:
         11:10:e6:01:82:44:17:1e:50:3f:90:d5:f4:fb:e4:60:1a:53:
         18:e6:1b:93:c1:0c:74:c7:69:e2:22:92:8e:4b:ff:a0:6c:ac:
         51:e2:95:13:15:12:b0:08:af:a1:b0:5e:79:79:b7:23:19:d5:
         ac:c9:9d:d5:bc:23:dd:4a:5d:c4:99:46:9b:9b:80:85:da:d0:
         aa:77:7d:3a:32:5d:d0:c7:bf:55:49:ca:79:db:85:50:fe:6a:
         cf:83:68:d8:a5:be:4b:bd:b5:9c:f7:a5:35:dd:40:50:29:18:
         20:4c:77:9d:7e:73:fe:5a:ec:19:1c:26:fa:37:05:6f:73:17:
         3b:1c:12:b4:3c:6d:85:bb:85:bd:5f:bc:48:f2:5f:20:6a:e1:
         10:45:f2:cd:05:ee:78:1a:5d:f4:9c:45:00:5d:3c:bf:43:1f:
         5f:6a:2b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:30:51 2025 by rpki-client