Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/38062512-decd-3f4b-86be-d182a4558233.roa
File:                     38062512-decd-3f4b-86be-d182a4558233.roa (raw, json)
Hash identifier:          gJXiffshMGR1oBEcLh6F+3gGre2SQ0dNYWjbdioxbK4=
Subject key identifier:   34:E1:C8:0E:89:21:19:90:F4:32:40:28:6A:C1:4B:13:29:1C:9A:29
Certificate issuer:       /CN=91294759-5da4-4acf-8f32-7c022824b443
Certificate serial:       010D0C9F4328584A4AD5975FB4950CC2DF8ECEC0
Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/38062512-decd-3f4b-86be-d182a4558233.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     10616
IP address blocks:        204.193.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:97:5f:b4:95:0c:c2:df:8e:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=828b0ac9-fcf0-4b4e-9d85-30cd0ee51ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:74:94:63:41:66:2e:62:82:7c:bd:e5:80:
                    d9:79:41:4b:d1:0e:0a:dc:d5:63:53:59:0b:8d:2f:
                    fc:90:8c:8b:51:63:0e:83:5c:7f:cc:5c:02:4d:d9:
                    eb:35:27:79:e6:da:f7:84:54:be:ed:9a:e4:94:f3:
                    b2:76:b6:f5:38:65:f2:8b:c7:87:f7:44:c9:bd:4f:
                    f1:92:d7:55:e8:cc:13:15:e2:ac:c8:c1:2b:96:6b:
                    45:15:81:be:42:71:c0:9e:04:d5:8a:48:48:fa:2b:
                    54:a4:a7:a6:50:c9:5e:00:a6:78:06:98:55:a8:d7:
                    4b:1e:7c:83:3b:de:f1:d0:01:09:d0:ab:3b:97:03:
                    85:43:a9:df:34:ad:8a:14:b7:1d:f4:87:a0:a8:79:
                    99:9b:95:70:bd:8a:c2:c4:b8:30:ee:e0:8b:39:c8:
                    52:d7:9a:d1:3f:e3:bb:51:c9:c4:e4:8c:f9:8a:8f:
                    68:08:80:3c:1d:c4:68:9f:b6:7b:05:01:3d:0e:6f:
                    28:79:74:c1:be:f4:3b:02:3e:b0:7c:d2:f2:2c:15:
                    3a:d8:df:3a:a7:8b:c6:be:16:af:8c:28:d1:ff:c0:
                    e1:a4:c0:14:de:7a:e7:00:26:b8:67:83:55:3c:e9:
                    7e:04:5c:6b:f4:fb:46:c3:18:99:7e:36:9d:d3:cc:
                    7e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E1:C8:0E:89:21:19:90:F4:32:40:28:6A:C1:4B:13:29:1C:9A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/38062512-decd-3f4b-86be-d182a4558233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl

            X509v3 Authority Key Identifier:
                keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.193.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:7c:ab:d9:98:1f:67:9e:36:5a:88:35:a1:ad:ed:c0:1e:32:
         ab:94:80:36:00:13:e8:97:d8:4b:99:60:82:20:45:31:8f:bd:
         38:8b:ce:ef:a8:40:7e:52:b7:fe:e9:41:de:d0:d6:82:1f:aa:
         56:a9:fa:3f:78:bf:2e:7c:32:34:8b:29:b6:ed:b2:ed:bd:f0:
         6a:33:d1:e7:b5:0e:1c:5f:5f:81:8a:67:f1:1f:a9:87:76:0a:
         25:7d:b9:26:6a:92:d0:a2:30:e1:16:7f:2e:54:85:e0:47:58:
         f1:2b:1b:e0:ae:d7:12:de:8f:bd:ea:ad:9a:72:06:0f:5c:0a:
         ac:b3:bd:6e:64:8c:2a:07:6e:a7:a1:24:ee:dd:f7:42:73:e0:
         56:76:94:f4:38:bd:56:e1:4e:42:b7:64:f6:8b:ea:68:90:a9:
         59:6a:66:2b:a8:a6:a0:b1:b1:ac:91:fd:78:44:2d:86:07:d1:
         cc:ef:dd:a9:46:15:45:cc:48:ee:3c:4f:6b:ca:6d:bb:27:55:
         07:96:d9:fb:0a:2c:8b:57:6b:5a:30:49:9a:7f:f1:fd:72:2a:
         72:47:fe:8a:b0:7f:1d:56:48:d9:bf:31:91:d4:5e:aa:60:6f:
         5f:de:ed:62:d0:8b:a9:3d:e0:84:ef:bc:ba:a7:39:7d:c2:1b:
         72:2c:47:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:27:33 2025 by rpki-client