Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa
File:                     74643a59-339d-31eb-989b-007a513d5754.roa (raw, json)
Hash identifier:          g/6G8KnjltsCn3zvczv2520Km+yCyj9SpFVYqAtnTUM=
Subject key identifier:   13:35:54:9E:0F:2C:B9:74:E7:97:18:97:25:BA:0B:20:5F:42:28:16
Certificate issuer:       /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial:       010D0C9F4328584A3B7B043BE825C36BDFA0B980
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     14618
IP address blocks:        204.79.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:04:3b:e8:25:c3:6b:df:a0:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=89ede83e-2228-40f3-8d7b-b5d5f9b3632a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:9c:33:a7:e0:7d:bd:51:f5:5a:ea:b9:f5:
                    d8:a2:7b:82:14:f8:90:0e:1a:c4:6c:d9:ce:5d:14:
                    7f:1b:94:f6:0b:da:71:8a:6d:43:ba:05:9d:19:75:
                    21:ee:1e:16:fb:c4:33:c7:6e:d9:15:c1:4f:30:17:
                    cf:cc:92:74:08:be:73:46:5d:1b:33:f3:77:20:63:
                    6e:83:f4:83:41:c9:5d:7a:46:14:6e:d6:c8:eb:86:
                    8e:d0:60:24:43:a6:98:f9:35:5b:ad:d0:fa:88:97:
                    09:a1:22:3f:f7:56:42:6a:db:8b:fa:b9:e7:17:88:
                    27:22:d8:13:ff:b8:23:14:79:a0:88:61:a0:f5:bb:
                    f1:d7:2f:d4:b2:38:79:04:74:e3:a4:ca:40:97:64:
                    ea:bd:93:9c:c6:43:84:fc:4c:72:bd:c7:2e:30:0d:
                    ab:f0:8f:50:cc:6f:fc:c3:df:7a:74:86:41:98:46:
                    6b:13:9a:af:24:ca:53:a1:5f:a1:81:af:76:fb:56:
                    4a:30:0b:e1:ac:5e:8c:87:63:51:5b:ac:ec:cb:a2:
                    71:bf:0b:25:ad:99:14:0f:dd:60:8c:8e:61:25:5f:
                    2e:c4:f3:7f:dc:3c:b6:e2:d4:b2:b8:96:63:51:34:
                    2a:55:e5:4d:1a:c5:ec:92:0d:5a:46:b0:3a:b2:47:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:35:54:9E:0F:2C:B9:74:E7:97:18:97:25:BA:0B:20:5F:42:28:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/74643a59-339d-31eb-989b-007a513d5754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl

            X509v3 Authority Key Identifier:
                keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:eb:07:44:39:07:de:03:de:29:02:aa:b4:76:28:39:62:21:
         c0:fc:a0:c8:23:68:19:51:86:da:c2:8e:fd:6c:12:6b:59:ea:
         d0:45:cb:1d:fa:39:3c:11:bb:09:4f:92:a2:5e:8d:a4:f7:1f:
         05:64:15:5d:c0:a3:02:bd:41:81:b4:05:08:27:1b:39:a2:e8:
         8b:74:ff:ca:3b:c9:c2:25:85:eb:c7:65:7a:d3:49:ec:99:6e:
         92:27:2e:11:ad:1b:39:54:8a:72:92:21:19:94:06:1c:56:2e:
         e3:4d:bb:12:c3:f2:56:09:ff:a7:ea:18:af:fe:a4:f4:1d:08:
         f1:63:38:b7:95:33:5a:fb:90:66:d4:04:da:b0:b5:c3:0b:12:
         0e:5f:de:a8:cd:ba:d9:ec:eb:d2:a8:38:52:5b:09:a8:a3:a4:
         e5:21:f3:6b:6e:7d:8d:6a:06:c7:f9:a7:45:0a:3e:66:f2:4c:
         a1:58:4f:de:31:c7:b8:7d:26:9e:15:f0:7c:f9:3d:b6:4b:bd:
         56:9a:75:fe:39:b9:57:5f:ba:65:2f:16:1f:74:31:18:f3:1a:
         ba:80:77:47:2e:d4:b9:74:5a:19:d6:ac:f6:1b:0b:9e:2a:87:
         fa:0c:7a:b6:55:01:69:2c:c5:ca:78:53:fe:c5:ca:df:46:c8:
         b1:11:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:17:26 2025 by rpki-client