Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/45593b1d-658c-30b6-ae47-89a9b84ee4a7.roa
File:                     45593b1d-658c-30b6-ae47-89a9b84ee4a7.roa (raw, json)
Hash identifier:          AtceDh3mBTCgS5nyU3+8drOpRBwSTKKj8suAJwQ3ido=
Subject key identifier:   25:4D:BF:D5:F2:04:95:7C:86:E0:CE:CB:3A:DA:63:77:31:EF:51:1B
Certificate issuer:       /CN=a6709f7f-42da-46f3-aa41-67580df7e49c
Certificate serial:       010D0C9F4328584A1730043CFCA8CF0B70154480
Authority key identifier: 54:C1:D2:42:19:11:D3:95:59:BD:1E:A1:39:09:69:3B:F9:34:4A:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/45593b1d-658c-30b6-ae47-89a9b84ee4a7.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     40280
IP address blocks:        192.94.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/a6709f7f-42da-46f3-aa41-67580df7e49c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/a6709f7f-42da-46f3-aa41-67580df7e49c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:04:3c:fc:a8:cf:0b:70:15:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6709f7f-42da-46f3-aa41-67580df7e49c
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=eb5ef57b-8807-4e26-9199-8f95a166c744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:56:9b:7d:64:7b:89:0b:f5:34:ea:58:29:
                    1c:cc:c5:09:71:ea:25:a7:9b:e4:6c:78:90:75:0a:
                    a4:e1:62:0d:20:28:6e:88:c7:c4:d3:a5:5f:80:da:
                    f7:17:51:0e:8e:00:87:e4:18:43:c2:68:62:20:b4:
                    6b:28:09:fb:f5:22:51:72:18:c6:da:34:66:e3:58:
                    d4:ca:4a:3d:33:74:68:d4:22:fc:3f:ab:48:cd:2f:
                    56:51:63:9b:fc:0d:5f:73:56:06:99:6e:13:bd:8d:
                    2c:03:30:4b:b9:28:5b:00:7e:7d:ea:ed:9e:1f:91:
                    86:7c:6d:67:9b:36:60:9f:2e:23:3d:d4:f0:40:59:
                    7e:b0:69:5e:6f:e6:e3:1f:6d:dc:4a:ca:5f:de:79:
                    12:99:f1:9e:df:4d:33:7a:41:17:1a:d1:c7:f9:23:
                    57:42:b7:79:e8:dd:7c:1f:06:30:cf:d6:f3:08:51:
                    53:c7:bc:28:cf:98:8c:33:17:15:99:2f:8f:eb:6c:
                    96:67:ad:65:cc:bd:e5:66:de:0d:db:21:9a:e9:b1:
                    0b:6e:44:8c:c6:f4:9f:32:c1:ef:60:f8:39:07:60:
                    09:60:4e:cc:ae:23:4f:10:d5:4d:1d:2e:94:68:61:
                    c0:fe:7a:60:0c:19:9e:6b:38:2f:22:eb:21:fe:ca:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4D:BF:D5:F2:04:95:7C:86:E0:CE:CB:3A:DA:63:77:31:EF:51:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/45593b1d-658c-30b6-ae47-89a9b84ee4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/a6709f7f-42da-46f3-aa41-67580df7e49c.crl

            X509v3 Authority Key Identifier:
                keyid:54:C1:D2:42:19:11:D3:95:59:BD:1E:A1:39:09:69:3B:F9:34:4A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c1:b2:56:5e:b2:56:d1:78:ab:ba:22:10:33:bc:2c:56:b0:
         77:47:7c:ff:97:94:83:bd:7a:ff:af:9a:90:83:b2:bc:a2:39:
         9f:cf:78:a6:4b:62:b3:b6:21:bc:10:6f:32:41:b8:8b:75:be:
         99:1a:6e:03:4d:8d:2d:57:6f:c2:d0:8f:0f:e0:eb:87:d1:c3:
         e9:cb:17:02:32:17:03:56:6e:c9:7c:40:4c:0f:9e:b1:bf:6f:
         1e:93:77:bf:93:bc:2e:ea:36:77:68:25:99:5c:77:28:c9:91:
         3f:e3:7b:2c:13:b8:28:86:36:09:cd:d5:ae:33:74:a7:b8:f2:
         53:48:dc:d0:d0:83:55:21:17:e4:f0:7d:8d:79:8e:6b:f6:47:
         4b:f4:53:11:78:11:0e:fb:92:91:f5:37:8e:e4:cc:5d:a1:42:
         ca:2c:74:ec:1e:e9:d6:a5:08:84:1d:18:f7:09:54:b9:d5:ce:
         f6:57:06:c2:1e:89:aa:5c:30:8b:9d:13:51:4b:be:b3:8e:c8:
         f5:ca:0b:40:c6:ca:b1:a0:df:96:41:e0:5d:c2:ae:ea:05:41:
         f5:47:32:ff:83:4f:db:3e:41:6d:45:a7:9c:a3:7e:0e:b0:e4:
         28:bf:ea:db:68:72:2b:b0:0f:81:e8:0a:7d:e8:af:42:5c:7c:
         c7:ea:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:04:15 2025 by rpki-client