Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa
File:                     030641f0-0c4d-36be-9742-c8311f8aac47.roa (raw, json)
Hash identifier:          7wwfvr8q1PxX8SA3ED3Y37mkFOeWcvd4Zh9t2jOA2zA=
Subject key identifier:   E1:86:53:3B:58:20:F9:F9:B0:4B:47:13:36:9F:F2:9E:56:5D:44:A5
Certificate issuer:       /CN=ede01171-c7fd-4563-acce-6f9c23457a8f
Certificate serial:       010D0C9F43285849CE9A3A4EFD7E4F4E03430C80
Authority key identifier: 73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     397394
IP address blocks:        204.194.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:3a:4e:fd:7e:4f:4e:03:43:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede01171-c7fd-4563-acce-6f9c23457a8f
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=7f6cd191-4baa-45b8-8337-d5432d17fcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:86:34:f3:06:cc:54:0b:65:f2:fc:52:4b:
                    eb:38:34:f9:0c:ba:bc:0e:5a:09:89:52:00:f9:65:
                    f7:2e:91:90:47:73:c7:62:0a:1b:ea:dd:4b:58:75:
                    ea:a7:b0:8e:3e:70:81:a5:dc:e2:c1:f6:74:6a:67:
                    cf:97:be:29:02:d7:2e:0f:2f:c6:6d:a5:e0:3c:5a:
                    66:e2:4c:31:3b:a0:87:e6:7c:fe:60:9d:26:56:62:
                    f5:dd:88:0c:fc:6b:ac:c0:1b:a2:02:b3:bb:34:11:
                    7e:d1:b1:21:d3:d5:c5:53:45:43:e7:52:b1:c9:47:
                    31:e6:88:9d:a0:20:cb:64:14:64:c5:e8:bf:0f:a9:
                    ed:d7:a5:64:97:9b:c4:78:92:2a:24:b3:63:cc:03:
                    10:da:34:91:4d:2b:2e:0f:e2:13:d1:af:5a:7f:c9:
                    f2:75:52:ec:ef:cb:46:b7:24:f0:94:40:8b:07:44:
                    46:62:7d:58:00:f5:d4:80:59:3e:d8:6e:f1:de:00:
                    0a:22:ad:87:6b:6d:67:4e:c6:28:a5:cb:6c:db:d2:
                    46:38:ac:df:78:e9:06:42:3c:31:28:b8:f7:2f:ea:
                    ce:d0:24:f5:52:c5:a0:13:7e:87:b8:04:4f:a4:bd:
                    b8:8f:c5:8d:98:bd:d6:03:e1:58:60:0b:fe:37:64:
                    81:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:86:53:3B:58:20:F9:F9:B0:4B:47:13:36:9F:F2:9E:56:5D:44:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.crl

            X509v3 Authority Key Identifier:
                keyid:73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:4d:3e:54:83:48:c6:3f:4f:44:b9:01:1a:9c:58:6e:39:a2:
         28:d4:f2:63:4f:8c:1f:74:8e:2c:52:89:dc:15:87:9e:6f:c9:
         a7:6d:ba:40:f3:3e:74:df:98:22:08:c8:bf:2a:d7:40:d5:ac:
         c7:5b:f1:ca:3b:2f:38:64:bd:02:b3:21:12:94:03:ab:99:88:
         12:a5:1d:2e:10:b9:f0:15:da:a8:2a:2c:01:d3:1c:3e:e3:da:
         68:79:38:4b:d4:01:4e:8b:61:26:79:d1:17:a4:a5:2c:9e:83:
         92:fa:8a:64:95:2a:e3:49:1b:ea:db:4d:59:22:d1:6a:bd:59:
         3b:a9:77:9f:b6:63:78:83:a0:5b:8a:b1:61:0e:62:9d:94:14:
         47:95:44:2e:da:e0:ba:d2:f0:68:78:53:98:8b:fe:32:89:8f:
         d8:ca:8e:3b:ca:c2:76:3b:19:4f:a9:04:85:2d:cd:5f:3e:8a:
         01:48:b8:19:b4:8d:b4:be:dc:d6:22:c2:f2:88:56:11:4c:2f:
         7c:b7:4a:b6:97:17:e4:a0:be:f0:8b:e8:e6:d2:00:ff:04:2e:
         ce:88:13:d2:60:77:42:fd:8f:c9:f7:c3:a7:6b:9a:81:4c:c6:
         53:d6:6a:8b:9e:53:ec:c3:b6:fc:37:b0:a9:d5:d3:cd:a7:f6:
         a0:0b:55:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:02:03 2025 by rpki-client