Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/24cd430e-3e85-3927-8a56-f94c1726d16c.roa
File:                     24cd430e-3e85-3927-8a56-f94c1726d16c.roa (raw, json)
Hash identifier:          h9ZZRgT4iwRTRRlu4kt8tm4uHFnSX5AtPam8uzbNjNA=
Subject key identifier:   FB:AB:BB:6A:AD:A2:58:15:42:1E:AB:1C:B6:DC:C1:71:7C:71:7F:85
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584A4F05C2EDB6B3884CE84E8F10
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/24cd430e-3e85-3927-8a56-f94c1726d16c.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     35950
IP address blocks:        204.156.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c2:ed:b6:b3:88:4c:e8:4e:8f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=d45f6575-1a45-4aa9-981c-cccd2635fb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:e3:6b:c0:05:c5:d9:c0:2e:9e:8d:64:4f:
                    0e:31:93:5e:f5:3a:bc:a3:2d:80:e0:d2:cd:c6:43:
                    d4:29:ec:47:af:63:e7:49:e1:ff:26:50:34:9a:62:
                    9e:c6:a1:51:93:50:4a:f1:cd:ff:49:41:b8:0d:a6:
                    bf:70:7f:0c:14:e3:ca:e5:76:ec:9b:16:05:65:d1:
                    ad:d4:bb:a8:94:0c:25:e7:ae:f8:99:a5:b6:1f:3d:
                    85:07:24:a8:ce:da:d1:0e:0c:7b:cb:34:ff:34:84:
                    cf:2a:a0:cf:6b:1c:84:c0:59:fe:4e:6e:c6:15:5e:
                    a9:91:a8:59:92:e7:c5:5a:05:da:bf:99:21:b4:58:
                    b4:82:ed:ef:ee:5a:de:6d:eb:83:58:95:41:f2:dd:
                    0c:9f:56:fb:b0:72:f5:06:74:be:be:3f:5e:84:1d:
                    bb:50:9e:9a:f1:86:e0:e5:0a:3a:ed:b7:59:47:74:
                    9f:67:a6:fd:8b:5d:6d:c8:74:fc:c8:38:d5:91:d6:
                    c8:3a:04:4c:4e:02:d8:79:51:81:dd:09:20:d3:5b:
                    75:7e:10:75:49:0f:0c:ff:7d:e9:d2:f3:8e:68:be:
                    e8:f7:de:9f:f0:96:0e:68:24:d2:8c:17:35:db:68:
                    33:0d:94:0f:76:71:30:bf:d5:c4:fa:08:fb:60:65:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AB:BB:6A:AD:A2:58:15:42:1E:AB:1C:B6:DC:C1:71:7C:71:7F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/24cd430e-3e85-3927-8a56-f94c1726d16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fd:19:12:67:96:b7:5f:f9:fb:47:d8:be:c9:3b:0b:4a:21:
         0d:6c:57:d8:59:d1:70:c1:4a:d4:ee:c0:08:33:22:b1:54:57:
         c7:32:1b:cd:c3:a8:81:5c:a1:c0:05:c4:19:df:8e:b9:08:5e:
         a6:7c:5c:7c:ed:f9:64:a9:5b:38:d8:71:8a:9d:4b:9c:41:2b:
         c0:74:b8:8e:28:71:f2:11:6a:7f:78:8b:22:8f:2a:6e:93:eb:
         cd:44:57:e4:e6:cc:5d:12:cd:e1:66:22:42:50:84:6c:59:8e:
         05:5f:19:f6:6e:2d:a2:64:a3:18:33:09:fb:6f:7c:f4:d0:e6:
         f5:15:97:58:af:f9:eb:86:c9:75:00:eb:ca:55:ce:6e:d9:8c:
         bb:34:a1:94:99:15:11:ba:64:73:66:55:66:03:53:aa:43:27:
         f0:eb:2a:77:61:ab:bc:c6:76:57:dd:c9:41:fb:ee:77:2a:61:
         d7:e4:ce:dc:41:b6:b5:96:c7:dc:b1:2a:44:bd:94:e2:b5:2c:
         09:fc:08:ce:79:17:04:05:6d:c1:85:67:d2:93:87:81:02:66:
         0a:5e:ed:2e:9a:e4:e8:e8:0a:33:36:95:92:8a:ed:d7:58:32:
         03:7f:76:7f:6c:78:5a:55:f8:f9:0a:9e:2f:6f:9c:1d:3f:10:
         08:60:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:23:34 2025 by rpki-client