Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa
File:                     bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa (raw, json)
Hash identifier:          37LBxAQJjxuN7cEiSW2078wvuQhIx//34tus06Yig2s=
Subject key identifier:   56:42:B9:95:A9:B7:F6:42:FE:91:18:6E:78:B1:48:2A:E6:4E:32:65
Certificate issuer:       /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial:       010D0C9F4328584A4275827CCF62D322CC489A38
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        204.15.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:82:7c:cf:62:d3:22:cc:48:9a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=d7f75b93-dd96-4822-9359-bde473862257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:c9:fc:2a:8f:13:3c:8f:73:90:0c:9d:5a:
                    f1:c5:89:e6:be:d9:64:c7:80:70:94:30:d5:da:ef:
                    fb:11:91:cb:29:55:69:68:56:03:f9:8e:3a:e0:27:
                    86:f3:3a:a1:18:82:86:f2:3e:aa:d6:f4:5f:f4:bb:
                    d1:a5:6f:66:d4:92:fa:1a:d6:f0:4c:7b:34:74:bd:
                    0e:1c:7a:f3:98:bf:e0:aa:ab:1b:38:a2:4e:fa:03:
                    fe:8d:96:1f:6c:60:5f:30:b7:ef:04:2f:73:6b:70:
                    8c:2a:f8:29:27:5d:1c:60:a4:6f:9a:4a:92:f3:1c:
                    30:bd:8d:5e:07:86:74:65:85:4b:80:b1:be:8b:72:
                    03:20:00:80:71:85:43:50:03:bb:8d:64:3b:56:db:
                    5a:5f:7a:33:d8:86:6d:e4:a4:9d:c2:85:49:58:f8:
                    8b:fc:a4:d7:d6:d4:6e:69:29:c0:33:dc:e4:bc:e3:
                    23:af:9b:df:47:ca:4d:6b:3c:10:6e:ac:47:da:26:
                    50:eb:66:9c:32:7c:09:30:ed:11:6b:e1:52:75:2e:
                    ce:f6:0d:62:54:68:c7:40:2d:c8:de:a0:40:07:a6:
                    e4:d5:dc:bd:22:df:db:4e:95:f4:42:c5:89:b0:a0:
                    86:af:16:b9:30:56:3b:51:34:0b:6d:5c:b9:6c:68:
                    2a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:42:B9:95:A9:B7:F6:42:FE:91:18:6E:78:B1:48:2A:E6:4E:32:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl

            X509v3 Authority Key Identifier:
                keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:c4:08:db:07:00:7c:5a:b1:b8:57:3b:ae:21:6a:6e:cb:
         62:54:a0:46:fd:99:01:60:70:fb:45:ff:57:e8:0d:c4:73:88:
         e9:38:ac:ab:15:18:c4:ba:b3:bb:3b:cf:24:06:10:75:e9:9a:
         7a:34:76:3e:3d:c7:0a:8f:03:b2:ca:e3:9f:1c:cc:c6:ad:a9:
         d3:4e:c1:39:e2:db:91:0d:41:3b:39:64:29:af:21:1b:55:14:
         54:6b:ff:03:2e:b8:40:f6:4b:f3:43:e0:08:8f:c1:ac:6a:5d:
         ee:e7:79:cc:f4:ff:5d:c9:a6:0f:59:6b:63:64:cc:5b:83:82:
         d9:0b:df:31:96:ce:db:23:df:5a:f7:1b:db:46:8b:a0:e3:4a:
         69:f9:02:72:55:d6:0f:b1:67:b9:bd:d4:04:91:02:c1:83:23:
         ee:3c:31:93:cc:26:41:7d:38:c0:9c:17:7e:bd:20:5f:60:d3:
         cc:db:b8:b5:da:2e:7d:cc:66:66:91:7b:35:59:e1:1e:54:fc:
         12:e7:02:16:ee:10:7f:08:68:c4:28:1b:33:a3:41:48:8e:e5:
         69:a3:1d:55:98:ec:fc:48:a9:97:0a:61:30:c0:e9:0e:96:7e:
         a3:3b:91:49:d9:ec:d3:04:ba:76:eb:9f:1d:97:50:7f:b0:26:
         7e:50:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:30:41 2025 by rpki-client