Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa
File:                     d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa (raw, json)
Hash identifier:          iWoGS5xMqb3NKU3D1ESKYHkNaBYnBHvJDEdaLzOkUZ8=
Subject key identifier:   4C:29:FF:CE:E8:74:CB:1B:16:75:73:C9:D5:46:3E:B4:12:D9:81:01
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584AE4611E674304AABB71F92340
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     2572
IP address blocks:        204.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:1e:67:43:04:aa:bb:71:f9:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=4ef370f1-8e4a-4144-8c25-5921996c37c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:49:36:15:de:78:34:c0:66:76:67:2d:9a:
                    bb:86:0b:0d:8d:4f:b1:da:2e:12:3b:32:fd:fd:4b:
                    3d:0f:6c:bc:d1:15:a4:9a:41:6c:0b:90:e1:5d:01:
                    fa:92:b7:25:57:fe:97:ca:77:bb:51:ca:de:7d:8b:
                    d3:4f:08:2d:36:d5:b2:d0:2b:33:cf:9a:75:fe:4a:
                    df:55:ef:b9:60:57:3b:98:79:1a:6b:40:19:f6:07:
                    fb:99:52:ea:74:bc:b5:c2:cd:d1:04:f2:48:b0:cf:
                    6f:0e:3e:f8:ce:4d:34:76:4e:7f:71:48:93:38:bc:
                    8b:91:3c:47:15:b3:19:44:e7:83:9e:ac:4b:19:15:
                    e4:e0:81:d7:e4:1d:7a:f8:e2:06:00:61:ec:7e:b9:
                    16:13:df:b3:06:a1:ed:a2:82:b0:f4:3b:51:a4:cd:
                    3b:71:f3:de:e5:6e:11:5c:a7:cb:5d:46:e5:74:c2:
                    a5:1f:55:d4:8a:fe:af:b0:9d:15:bf:32:25:72:f5:
                    0c:7f:d8:cf:2e:26:3a:39:10:6a:b9:ae:17:59:73:
                    31:0d:92:44:98:08:85:30:5c:13:75:48:74:54:43:
                    53:fe:32:ce:d9:72:33:f8:7d:c8:c7:dd:d9:b6:cf:
                    95:71:2d:df:ac:b8:12:1b:d1:77:7c:b9:7c:37:e4:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:29:FF:CE:E8:74:CB:1B:16:75:73:C9:D5:46:3E:B4:12:D9:81:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d6:66:37:af:66:68:73:d4:44:05:d7:92:3e:a3:3f:6c:21:
         fc:07:2f:0b:d4:d5:6a:88:c7:25:01:c5:00:de:cb:af:70:2a:
         d3:52:07:d4:08:0d:ce:ab:64:8b:a5:49:f6:ce:02:e6:e4:62:
         e0:bb:80:9e:89:d0:a4:4c:63:9f:47:f6:84:85:36:1c:7d:f9:
         f1:09:3e:f3:9b:88:70:53:11:a2:c2:fa:7e:e2:42:a7:52:f5:
         b1:46:2a:87:bf:5c:3b:de:bb:78:e4:e2:59:1c:30:85:ba:e0:
         05:13:23:66:4c:79:be:eb:8c:10:d7:b6:ae:e4:1b:6f:21:05:
         0f:a0:11:0d:f9:7a:07:14:2a:09:58:7b:4f:0e:4d:4c:c1:88:
         1a:cf:40:b8:fb:e7:bf:25:bb:93:bb:f5:12:47:a1:a6:68:26:
         97:3b:73:02:05:8f:fd:d9:a6:28:4b:44:79:e4:55:40:9b:d6:
         b2:4b:b7:44:c0:fc:2f:5b:2a:3d:cd:fb:9c:41:ae:59:d4:f2:
         fc:ba:9a:0c:df:0a:b5:9c:91:b0:85:65:bc:db:91:6b:95:d2:
         f5:ac:b4:8f:c6:2b:48:a4:5f:37:01:18:fd:47:b9:23:f4:b3:
         14:51:91:d4:e2:a2:85:ae:fc:89:8c:71:45:4d:ce:50:b5:51:
         aa:ea:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:55:55 2025 by rpki-client