Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/67cd6099-53c3-392f-82e2-ea8f384913d7.roa
File:                     67cd6099-53c3-392f-82e2-ea8f384913d7.roa (raw, json)
Hash identifier:          alc3D2SVH2x5lkYqcc7tgbwxNnarytNgATL9FH2+NFU=
Subject key identifier:   E1:23:75:CA:0A:05:29:F0:DF:63:D1:D7:7E:87:B5:94:C0:4C:82:03
Certificate issuer:       /CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
Certificate serial:       010D0C9F4328584A3E45B0A830EB8913C0496180
Authority key identifier: 63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/67cd6099-53c3-392f-82e2-ea8f384913d7.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16557
IP address blocks:        204.152.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b0:a8:30:eb:89:13:c0:49:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=5cf7711a-a257-4188-b778-b59b9988c67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:0e:c8:a3:a2:99:77:a2:31:a8:3a:f3:b2:
                    f3:57:d6:c6:3e:80:b9:b6:64:b9:0c:fe:9a:ca:19:
                    d4:04:77:40:36:ae:ec:f5:87:35:ec:be:37:0b:c5:
                    26:cb:46:66:f5:20:6b:84:36:ef:1c:c9:2e:e4:a3:
                    ba:7a:95:7d:5c:62:04:0e:13:33:14:5d:3e:84:e5:
                    51:b1:f9:45:be:c3:c2:ff:24:e2:32:66:7d:75:c5:
                    2a:a1:ee:31:25:e2:01:61:6b:0c:be:58:65:48:69:
                    cc:75:2a:78:de:a5:d6:7d:87:a5:37:db:b5:89:2b:
                    9b:73:cf:5f:5a:6f:b2:dc:75:8d:59:f2:70:43:81:
                    8d:1e:02:03:7c:15:bb:f1:5b:dc:62:23:81:10:f1:
                    15:a4:7d:71:ed:89:ed:27:c4:c9:ae:4e:dc:6e:83:
                    14:62:97:0a:6c:f5:3d:06:c2:5e:6b:b4:a4:24:fb:
                    e6:ad:ec:42:28:ac:b2:a9:4c:f2:54:21:13:55:14:
                    02:48:ec:b3:03:d4:d4:3a:dd:a0:aa:00:80:ca:88:
                    54:67:7e:f2:9d:1e:06:9f:94:a9:34:70:76:93:6b:
                    8a:bd:a0:d3:a4:c4:75:35:17:7f:a3:ae:38:f0:61:
                    54:9b:1d:e3:47:e3:0c:05:77:b9:63:2c:18:55:20:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:23:75:CA:0A:05:29:F0:DF:63:D1:D7:7E:87:B5:94:C0:4C:82:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/67cd6099-53c3-392f-82e2-ea8f384913d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.crl

            X509v3 Authority Key Identifier:
                keyid:63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e5:ef:9d:d1:8f:65:dd:ff:96:9c:47:28:f5:f0:c7:f9:23:
         dc:88:92:be:fd:52:62:00:fc:6d:18:bf:80:7b:37:c9:52:30:
         04:c4:97:ac:99:c5:ef:91:7f:eb:a8:2e:76:df:3a:ca:f1:01:
         06:d4:2e:c4:7f:81:ee:02:17:b7:8f:49:34:de:30:03:33:b5:
         4e:c6:97:2b:e8:7c:fa:c7:ab:70:7b:f5:4f:6c:dc:b2:c3:ef:
         47:57:67:84:66:fb:3d:77:90:7d:0a:08:61:56:9f:34:91:bd:
         1e:57:28:28:c8:ec:46:d8:3f:ba:68:85:7a:e0:a7:7c:f9:16:
         3f:7d:45:60:59:09:ec:f9:ef:3d:87:09:f3:f1:6c:c7:5a:22:
         cf:97:e1:38:94:34:3c:c0:33:48:0c:16:90:bf:54:ef:08:66:
         f3:af:27:53:00:e3:bf:ae:e9:5e:a2:0f:3e:13:e4:74:25:cc:
         17:b8:ff:f6:00:38:26:a6:73:b2:bc:1c:a8:d2:c7:49:f9:78:
         6f:cd:a3:8e:a4:6a:4c:5e:97:ef:1c:c3:c7:0c:82:27:79:a2:
         80:03:a5:47:ae:8a:dc:4d:72:db:49:9b:d4:f3:c5:5f:18:85:
         27:ab:8d:07:d2:2f:4a:74:f6:0d:dd:d3:bf:1a:d0:60:7a:bc:
         90:82:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:37:52 2025 by rpki-client