Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/de538645-4b29-37fa-b122-59fee8598d42.roa
File:                     de538645-4b29-37fa-b122-59fee8598d42.roa (raw, json)
Hash identifier:          C3L1wh9nL8gPTXLZJkyGvbW3Wpta0SnE4jF1NSRWQa4=
Subject key identifier:   47:56:17:35:9F:72:25:FD:74:0B:98:DB:13:5A:AD:D1:56:5F:CD:53
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F4328584A38F50F080336639AC834BED8
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/de538645-4b29-37fa-b122-59fee8598d42.roa
Signing time:             Tue 17 Jun 2025 15:19:48 +0000
ROA not before:           Tue 17 Jun 2025 15:19:48 +0000
ROA not after:            Mon 15 Sep 2025 15:19:48 +0000
asID:                     14618
IP address blocks:        204.124.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:f5:0f:08:03:36:63:9a:c8:34:be:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Jun 17 15:19:48 2025 GMT
            Not After : Sep 15 15:19:48 2025 GMT
        Subject: CN=d5ca1831-e9d5-4073-8e7b-62d1315cea70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:20:8e:7c:3e:e9:36:27:99:d9:ba:a4:01:
                    f0:c1:d0:07:72:55:34:12:7c:37:c3:10:34:85:c4:
                    d1:1a:22:f4:d5:10:1b:5e:b0:a5:27:45:53:93:9c:
                    68:a3:0b:ae:ac:eb:d9:b5:ee:39:2e:d9:40:64:f9:
                    37:18:e3:bf:e5:8c:83:73:c0:af:dd:17:fb:e6:87:
                    7b:87:c8:90:63:99:2b:b1:fa:82:ea:e5:d6:fb:20:
                    8a:c4:bb:35:bd:74:23:0b:e7:c2:9f:e9:a6:57:60:
                    c3:13:50:76:2f:d9:04:37:ad:ae:c0:64:b5:96:15:
                    39:d3:bb:51:e7:0c:c8:b2:ba:ad:f0:52:c5:cb:ae:
                    32:9e:b5:d1:a6:73:7b:61:4f:00:3b:79:9b:8d:c4:
                    f3:cd:ed:9c:9e:c5:df:1d:29:83:60:9b:e1:d4:7b:
                    1b:fe:93:82:cf:81:0c:74:ef:99:97:ef:6a:1c:3d:
                    eb:0b:51:53:b0:79:02:13:9e:66:a3:f3:95:96:1b:
                    33:a1:10:01:8c:3e:bd:36:0b:9c:aa:66:75:b2:cb:
                    f1:bd:1c:0f:13:f8:59:97:77:ef:e1:5e:ed:91:f3:
                    f2:8c:b6:8c:55:b6:58:67:1f:ff:98:ba:41:5b:c7:
                    5b:b2:ca:cb:c5:f1:74:44:cd:9d:1d:ad:91:81:0d:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:56:17:35:9F:72:25:FD:74:0B:98:DB:13:5A:AD:D1:56:5F:CD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/de538645-4b29-37fa-b122-59fee8598d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.124.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:12:06:8c:44:57:32:2e:62:42:2a:33:5c:0c:dd:0a:ef:58:
         a9:da:5d:a3:63:b2:86:eb:d7:af:33:c4:cd:6b:29:47:c6:db:
         f8:a1:64:44:36:05:44:90:e3:99:11:d1:dc:2e:74:41:d2:81:
         e2:9e:84:48:3d:12:8e:64:a8:d2:f6:04:d0:45:ca:65:8f:29:
         92:2a:90:dd:c8:a9:1d:11:b0:69:e3:f5:48:8e:89:f0:9f:a5:
         7b:e3:85:a9:b5:11:6d:40:1f:e0:9b:8f:e2:12:4b:24:22:02:
         fc:0e:93:c7:bb:96:3e:ab:44:9f:a5:12:df:e6:48:13:1c:93:
         e5:39:5d:a1:ba:80:10:0b:fb:0d:d9:a6:05:f8:86:6b:6e:99:
         fe:eb:ae:b7:32:a9:f5:1f:02:e7:a9:aa:71:31:c6:c9:f6:a4:
         d2:6d:f1:00:cf:33:13:9e:b1:42:c4:ff:24:ae:9f:b9:88:64:
         eb:1c:21:ff:9b:e8:19:50:5f:6c:ec:b1:51:98:92:29:28:b0:
         31:ac:0c:16:9e:08:7a:9b:9b:60:e5:15:14:24:56:ad:cb:be:
         0a:4b:b8:fd:58:8c:9e:52:f9:c7:2e:c0:14:25:89:60:e1:19:
         6a:67:a4:de:b0:0a:f4:bc:28:cb:69:a0:1b:0a:ab:c9:48:e4:
         fc:83:2c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:18:57 2025 by rpki-client