Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3fb8cd0-06c8-3f7f-a083-9240bba0b9b0.roa
File:                     a3fb8cd0-06c8-3f7f-a083-9240bba0b9b0.roa (raw, json)
Hash identifier:          9M6NlbbP/5V3ERexpARAunWVHhkQX5oqgjEMf8C5ie0=
Subject key identifier:   CC:C2:75:87:8F:1B:26:36:DC:0C:31:52:88:23:A5:DF:40:59:7E:F9
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A36400146B529391420924F00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3fb8cd0-06c8-3f7f-a083-9240bba0b9b0.roa
Signing time:             Mon 16 Jun 2025 16:03:23 +0000
ROA not before:           Mon 16 Jun 2025 16:03:23 +0000
ROA not after:            Sun 14 Sep 2025 16:03:23 +0000
asID:                     20197
IP address blocks:        204.84.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:40:01:46:b5:29:39:14:20:92:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:23 2025 GMT
            Not After : Sep 14 16:03:23 2025 GMT
        Subject: CN=5f02cdf0-72f1-4e02-82fb-c5b955f77b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:c2:5f:2c:72:39:ac:b5:0b:e2:a0:b2:15:
                    9b:7e:ae:a2:14:4b:40:2f:d8:6b:f8:87:25:c7:ce:
                    b9:48:2d:8c:fb:f0:07:17:42:87:9d:42:2a:e8:62:
                    4f:0f:d9:13:cb:e8:ac:a0:7a:b7:fb:21:1e:ee:d0:
                    f7:63:0a:ae:7f:30:0a:86:87:fa:0b:85:ea:35:ac:
                    2a:19:33:45:71:01:81:28:04:81:c4:37:86:39:ac:
                    8a:50:70:fc:a8:b9:c2:db:ab:10:67:68:14:75:b8:
                    37:7b:95:55:b5:b2:80:da:47:73:27:f3:8d:24:df:
                    5b:a6:67:c4:8d:43:b2:0d:d0:ab:c3:61:b0:17:cd:
                    a9:57:5a:6f:ec:47:3a:e5:d4:57:db:e1:4b:d1:d5:
                    a1:9d:78:af:0b:fa:a6:8d:84:92:bc:10:ed:51:e9:
                    f4:2e:02:22:1b:a2:52:2b:95:51:2c:9c:ad:60:8a:
                    d1:e7:1d:c1:c5:a3:11:26:67:fa:48:b5:bb:40:72:
                    51:81:04:49:99:17:96:8d:9d:36:cf:43:44:2a:de:
                    7c:af:87:5c:4e:7e:b9:c0:f4:f8:f5:cf:fa:19:33:
                    bd:e2:3a:d9:70:ac:b0:1e:a0:cc:ae:a2:52:50:77:
                    f2:50:e3:29:a7:35:d3:6a:2d:54:8b:a8:f0:0a:11:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C2:75:87:8F:1B:26:36:DC:0C:31:52:88:23:A5:DF:40:59:7E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3fb8cd0-06c8-3f7f-a083-9240bba0b9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:7a:46:3a:32:fd:e9:63:da:91:c4:5e:78:cc:c1:f3:cd:
         3d:1a:e0:28:50:a1:b9:97:59:7d:3c:26:a8:40:f9:7f:54:98:
         2b:56:a2:d4:6f:87:58:6d:a5:20:f2:c9:5c:81:a6:77:e0:b7:
         93:4f:2c:50:01:11:63:68:95:82:6a:3f:1b:e6:bc:65:cd:c6:
         63:ff:a9:a7:91:bf:42:c2:6f:b9:f3:22:bb:94:0a:8d:08:cf:
         b3:f0:2d:3d:06:41:d8:c8:36:97:48:7a:a8:34:fa:e6:3b:89:
         a8:48:96:23:6c:c1:88:18:b3:2a:f5:8f:23:b1:7f:f9:86:51:
         b2:5c:b9:1f:50:53:8b:91:b4:ee:79:56:ad:d6:f1:28:d8:5c:
         59:2a:8e:8b:58:b7:1b:f2:68:cc:2a:aa:2b:79:8e:27:19:90:
         c1:ca:14:13:7f:7a:92:61:cb:fb:76:ba:17:fc:3a:7f:2c:b2:
         9c:6a:15:0c:c6:c0:b7:5c:b4:e3:a0:b3:11:af:bd:79:11:ec:
         d5:2c:ea:f2:2e:8b:54:55:01:31:00:76:ce:91:d2:a5:f2:ef:
         d3:c6:b3:58:eb:e4:f1:3a:be:ec:68:bb:ef:97:c5:a6:79:84:
         3d:9d:9f:76:c6:35:79:94:26:1f:b4:4a:18:df:8f:61:c2:1e:
         05:0f:68:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:55:09 2025 by rpki-client