Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4775de97-2012-3124-9e09-60cdd96a3a3a.roa
File:                     4775de97-2012-3124-9e09-60cdd96a3a3a.roa (raw, json)
Hash identifier:          stvP1YLytDNXUZ/Vo6zgj5T5IUTWG70dwL7BdEXWFXg=
Subject key identifier:   E7:59:4D:98:B9:7E:0A:C7:C0:80:BB:63:EF:25:BD:88:30:1E:3C:32
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EA27D81A4F45978C0280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4775de97-2012-3124-9e09-60cdd96a3a3a.roa
Signing time:             Mon 07 Apr 2025 16:33:11 +0000
ROA not before:           Mon 07 Apr 2025 16:33:11 +0000
ROA not after:            Sun 06 Jul 2025 16:33:11 +0000
asID:                     81
IP address blocks:        204.84.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ea:27:d8:1a:4f:45:97:8c:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:11 2025 GMT
            Not After : Jul  6 16:33:11 2025 GMT
        Subject: CN=694fe527-3a9a-4583-839c-5735eec3df56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0d:22:bf:7f:60:fd:60:a0:ae:8b:4b:02:d3:
                    f3:2e:fd:d8:56:1e:39:eb:47:ea:d4:19:85:f9:98:
                    37:19:14:c8:34:63:25:54:24:f8:51:5d:de:db:3b:
                    bd:e3:f4:ed:91:7c:a3:3a:ad:5a:d0:e6:03:8f:db:
                    37:e8:e9:6b:97:c1:47:33:ee:b5:ec:27:0e:48:d5:
                    1f:e1:01:9e:0a:97:36:f8:19:a1:0d:7b:28:c5:c0:
                    b3:d8:78:e4:9a:99:66:84:f2:1d:c4:58:fb:87:b9:
                    ea:ed:9b:b1:2b:db:2e:9a:1d:bf:1e:6e:73:bd:70:
                    01:e0:97:dc:9f:e5:2b:32:7a:20:c9:74:24:c2:fc:
                    3a:44:77:75:8b:ab:2b:f2:e8:ac:44:4c:c0:df:3f:
                    8a:a0:12:36:93:89:bf:22:23:41:10:c8:15:d6:6e:
                    f6:ee:5e:fc:3a:6f:04:ed:bb:a5:0c:5c:0a:9f:ae:
                    06:b9:d6:75:76:69:ff:d3:43:39:82:51:9e:03:ab:
                    a5:53:b3:5a:ee:c1:94:bf:95:c0:4d:dc:1b:6d:d2:
                    17:08:ed:7f:19:d4:5e:40:f0:46:e2:d3:1d:1d:41:
                    61:1d:83:b1:99:34:5c:cb:35:21:59:7e:16:2d:42:
                    89:f4:2a:0c:8b:7b:15:10:85:cb:be:31:59:66:6a:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:59:4D:98:B9:7E:0A:C7:C0:80:BB:63:EF:25:BD:88:30:1E:3C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4775de97-2012-3124-9e09-60cdd96a3a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:53:aa:33:d0:6b:16:c6:93:dd:41:36:99:ef:b0:15:09:7e:
         ec:6a:56:ce:1f:27:ad:3a:19:ef:7b:9c:a2:36:bd:34:e4:60:
         94:06:57:05:43:a3:03:8e:9c:b7:4f:02:1e:31:4a:c1:82:f6:
         8a:76:82:e1:89:b6:91:c4:c9:1b:f3:04:1a:09:2a:aa:79:66:
         15:77:d6:30:a2:e3:2c:48:18:5f:b3:2d:8b:97:b4:ff:16:b8:
         21:3f:cf:70:9d:9a:41:e3:86:b6:a4:19:bf:c7:ab:39:8b:2c:
         a7:1c:4a:a7:6b:f8:cb:d7:75:7a:c9:af:d5:96:ff:e0:6c:06:
         23:97:24:9b:36:f8:6d:7c:e9:6f:d8:72:70:54:19:a5:49:46:
         65:af:6c:d1:d2:36:7d:8d:2e:f3:d9:25:02:8a:16:1f:85:e7:
         b1:e5:ca:20:6b:b9:a9:83:ba:4b:f9:8b:3a:39:7e:d7:4b:be:
         d6:9c:22:8d:14:7c:d0:53:2e:55:de:65:56:bb:4e:ac:0e:b0:
         43:a1:8e:82:dd:ef:93:01:b8:25:14:1d:b7:5e:97:b7:2f:de:
         f0:85:36:f8:0a:f2:26:1c:7e:70:28:58:13:0f:99:9c:17:83:
         d2:c1:13:8f:60:5f:b9:61:fb:3b:1e:b4:da:cb:15:57:27:fc:
         f6:11:fd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:16:04 2025 by rpki-client