Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d7e65ff4-dba8-3cd2-bece-e844c7ffc4cb.roa
File:                     d7e65ff4-dba8-3cd2-bece-e844c7ffc4cb.roa (raw, json)
Hash identifier:          rrTfSKFJpdiS1QnYJy9+QWQglfOXSWrsYdg/GFjazaM=
Subject key identifier:   B4:D8:13:1C:E6:73:26:CD:56:6F:8C:C5:10:D6:21:C2:DF:B5:43:11
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285849806F0C3CD5944B3493DD5CC0
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d7e65ff4-dba8-3cd2-bece-e844c7ffc4cb.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     19165
IP address blocks:        204.28.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:0c:3c:d5:94:4b:34:93:dd:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=b082de7c-b3fa-4b02-9fbf-4d7eadfe6f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:32:e9:7f:e1:55:2d:6f:c1:fd:f1:85:44:dc:
                    8a:0b:5a:8a:7c:93:1e:6b:e5:ee:49:a7:6a:28:c8:
                    71:d9:46:4a:69:54:12:06:c0:73:59:ac:4f:46:d0:
                    b6:9a:9b:57:6e:e0:fe:b1:7d:9c:09:f7:9f:e6:8e:
                    7d:05:5b:37:6c:fd:8c:85:9e:d9:81:b2:bc:6a:d4:
                    1d:c2:08:ba:96:c9:d7:4a:36:fe:be:a8:3f:55:e5:
                    60:91:6b:a5:53:c0:2b:9f:42:8a:0d:58:ef:30:52:
                    7d:fa:bc:aa:ab:3d:57:7b:9f:37:c1:fa:77:fe:3c:
                    7c:71:e0:a2:19:d0:bb:a5:ba:51:bc:df:60:b6:69:
                    e9:1e:b9:93:08:69:97:c3:c9:4e:91:15:93:8d:28:
                    d8:7f:e7:3e:64:b2:34:dd:47:69:9f:dd:fe:f3:23:
                    e0:b7:2a:a3:aa:74:57:fc:0f:db:28:94:8f:fa:9a:
                    9b:ee:93:c3:99:bf:e7:1b:dd:b2:fa:ba:03:cf:4e:
                    2d:a3:3e:d6:8f:65:11:53:77:95:f0:9e:db:2e:9e:
                    55:af:ec:5f:84:2a:0f:ac:b5:89:34:01:95:f0:37:
                    bf:41:d6:e7:1b:46:9b:bd:09:40:92:f1:c4:50:a1:
                    0d:d4:61:bc:54:6e:81:b9:88:6a:49:4e:07:42:39:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D8:13:1C:E6:73:26:CD:56:6F:8C:C5:10:D6:21:C2:DF:B5:43:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d7e65ff4-dba8-3cd2-bece-e844c7ffc4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.28.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:7c:43:a8:f3:5c:4b:54:3d:7b:b3:36:f5:41:bf:e9:1f:28:
         c0:2e:d8:9c:09:6e:0a:6d:ac:ad:dd:c2:2c:5f:cc:3d:11:1e:
         11:88:77:c8:e7:a1:83:d8:35:89:3f:33:2e:ca:0a:4e:e2:67:
         46:51:80:f5:c4:a4:b7:82:4e:82:81:29:2d:55:84:29:09:88:
         32:fd:38:a7:88:21:60:41:07:c2:42:e6:cd:44:0e:69:33:ac:
         20:74:2b:c2:cd:3a:c9:18:6a:2c:ed:bc:17:14:05:bc:0a:97:
         dd:71:0f:0a:0c:92:9e:0f:18:b8:db:6a:72:3b:2f:75:e9:f0:
         1a:70:4f:0a:48:d9:59:8d:97:1c:dc:d4:b3:f4:3f:9c:96:21:
         72:37:d5:ea:62:89:66:e1:94:d7:ba:af:3f:53:dd:2a:d9:0f:
         40:ef:14:e8:af:1a:fb:ff:0a:9b:c7:9f:28:31:a0:d0:05:f0:
         1e:c8:b8:0f:55:bd:ef:1e:a8:d3:5b:ed:99:8b:e9:40:d8:a0:
         4d:af:8c:2b:59:21:cf:5f:4b:19:23:12:f0:8e:86:08:50:c0:
         07:5f:bf:96:cb:e5:8d:15:19:52:8d:6d:2b:7f:ec:8d:79:c0:
         41:14:2c:63:c7:f8:dd:6e:f9:26:6c:a5:d3:f1:bc:7f:61:51:
         0d:92:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:26:37 2025 by rpki-client