Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa
File:                     c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa (raw, json)
Hash identifier:          rm+HtqwTnE0hvshwkB/GiN98FpuIsGES6kR5uD/rPwU=
Subject key identifier:   52:7D:4A:31:65:9A:85:9E:5A:1F:0E:61:DE:76:1D:7E:CA:97:CC:EA
Certificate issuer:       /CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1
Certificate serial:       010D0C9F4328584A3A1581F75905F441BA6C5100
Authority key identifier: 80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     7029
IP address blocks:        205.236.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:81:f7:59:05:f4:41:ba:6c:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=f1ff4026-29aa-4aa4-8994-473527862b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:42:35:fa:9d:b9:14:d9:d5:3c:01:a3:3d:
                    3d:bb:8e:07:a1:c7:43:36:d0:3c:0e:ad:11:3c:55:
                    92:86:4c:74:5c:4b:80:ac:56:51:54:65:59:c0:d2:
                    a8:72:b5:6b:f2:7d:31:8e:16:9b:3b:04:90:9e:f4:
                    40:1d:b1:d5:e0:f0:16:b7:64:be:1c:0f:6c:18:0f:
                    9e:f9:59:ef:a8:21:a2:87:fb:53:b4:ae:95:04:41:
                    55:27:61:e2:2b:44:32:35:7d:e1:a6:c7:5b:28:13:
                    94:d7:14:c1:9f:95:46:20:73:49:cb:2d:e5:82:5e:
                    01:57:f5:07:9a:eb:eb:87:19:84:62:9f:b0:b9:7f:
                    ee:71:30:95:0a:14:89:f6:a1:6e:b7:bd:24:2d:e5:
                    ac:8a:a8:76:1a:99:14:e4:ba:d6:1e:cb:fa:8e:c3:
                    4e:b8:33:cc:7e:54:18:c9:b9:09:7b:78:a0:77:53:
                    1c:c9:25:fc:4f:da:05:90:ba:4d:77:f6:e3:ec:03:
                    ec:d0:cc:3d:33:c0:a4:3d:bd:b7:bd:1c:89:00:c0:
                    49:a7:83:8d:56:44:e3:73:2d:ab:cd:c4:f4:e1:7c:
                    ea:75:2d:01:f3:5b:a6:89:22:8c:77:24:b6:37:7d:
                    2a:0c:e5:01:23:37:a8:93:90:43:c3:32:bf:2f:da:
                    94:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7D:4A:31:65:9A:85:9E:5A:1F:0E:61:DE:76:1D:7E:CA:97:CC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c97a0ad1-de37-3bf5-8959-a5d761fd468a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl

            X509v3 Authority Key Identifier:
                keyid:80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:dc:97:13:7a:5a:e3:f2:09:c7:b2:1f:59:7d:0d:8d:ba:f4:
         6f:6f:b4:d6:02:88:fe:3b:70:8f:3b:3d:3c:4f:ce:93:fb:1e:
         16:98:77:09:85:23:37:ff:d6:fb:5d:36:a2:1d:5f:75:c5:a8:
         f7:a9:24:18:7e:b3:13:3b:16:e4:aa:92:50:90:e1:6d:97:33:
         c4:75:ad:92:e7:05:41:95:47:31:9c:e3:26:fe:69:97:41:a1:
         5a:83:25:d4:c9:93:02:7f:c7:3c:1a:5e:f0:8c:25:63:34:a0:
         c1:bc:c3:fa:42:fe:32:eb:6c:35:3f:f1:fd:69:2a:52:24:c1:
         2e:06:06:b4:03:14:ec:e0:00:78:cb:20:8a:28:92:67:05:4a:
         ce:21:ee:df:b1:cc:69:08:e7:fb:af:84:57:d7:01:b6:9a:74:
         0a:72:1d:92:4e:fe:93:87:00:11:48:0b:25:aa:8c:6f:84:69:
         16:6c:33:8e:2f:8a:8e:52:cc:d5:fd:27:94:e6:96:1b:95:e0:
         5f:c0:e0:c6:d7:28:78:6b:c3:cf:35:d6:8e:4b:dc:18:0e:fd:
         69:13:b1:3e:3b:e1:98:98:34:13:71:f2:83:3d:b9:f5:30:e4:
         32:3f:c2:54:d9:39:2f:66:57:6d:18:e8:0c:92:b1:5a:0c:df:
         8d:31:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:44:14 2025 by rpki-client