Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa
File:                     ca10f6ee-236c-3990-9aa6-b5221dab876b.roa (raw, json)
Hash identifier:          t1yvWrMKGcxpGaymHTNDkQrDiFzvuJaGfUCbwbkB1P0=
Subject key identifier:   A3:E9:D5:08:E0:56:D0:C7:F7:0F:60:C1:9F:E7:1F:2F:F7:2C:72:41
Certificate issuer:       /CN=37cfb708-8bc0-4a74-971e-28d677315695
Certificate serial:       010D0C9F43285849E7BA779D3DBC78F7D8795EA0
Authority key identifier: AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     395439
IP address blocks:        209.204.0.0/19 maxlen: 19
                          209.204.0.0/24 maxlen: 24
                          209.204.1.0/24 maxlen: 24
                          209.204.2.0/24 maxlen: 24
                          209.204.3.0/24 maxlen: 24
                          209.204.4.0/24 maxlen: 24
                          209.204.5.0/24 maxlen: 24
                          209.204.6.0/24 maxlen: 24
                          209.204.7.0/24 maxlen: 24
                          209.204.8.0/24 maxlen: 24
                          209.204.9.0/24 maxlen: 24
                          209.204.10.0/24 maxlen: 24
                          209.204.11.0/24 maxlen: 24
                          209.204.12.0/24 maxlen: 24
                          209.204.13.0/24 maxlen: 24
                          209.204.14.0/24 maxlen: 24
                          209.204.15.0/24 maxlen: 24
                          209.204.16.0/24 maxlen: 24
                          209.204.17.0/24 maxlen: 24
                          209.204.18.0/23 maxlen: 23
                          209.204.20.0/22 maxlen: 22
                          209.204.24.0/24 maxlen: 24
                          209.204.25.0/24 maxlen: 24
                          209.204.26.0/24 maxlen: 24
                          209.204.27.0/24 maxlen: 24
                          209.204.28.0/24 maxlen: 24
                          209.204.29.0/24 maxlen: 24
                          209.204.30.0/24 maxlen: 24
                          209.204.31.0/24 maxlen: 24
                          209.204.48.0/20 maxlen: 20
                          2605:7bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:77:9d:3d:bc:78:f7:d8:79:5e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37cfb708-8bc0-4a74-971e-28d677315695
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=a6f06db4-bc08-4424-a2a3-d3f4c082e327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:fe:74:0f:12:c5:d2:3b:59:25:ec:3d:03:
                    39:5d:82:04:8f:59:2f:fc:db:66:d8:97:37:f3:cf:
                    b6:fc:1e:b8:ba:bc:43:74:4e:b2:fa:01:2d:16:60:
                    4a:83:90:db:d9:84:62:71:91:e3:f2:0d:72:ee:94:
                    9c:6a:2e:e7:74:e9:12:38:6d:18:3e:13:6c:72:fd:
                    45:0f:be:fb:74:07:0a:13:64:51:77:05:5a:43:08:
                    ee:3a:4b:56:93:7c:dc:27:d9:4a:ea:e6:2d:de:0c:
                    5a:60:45:bf:ae:f9:0c:65:7a:ff:b7:ac:71:38:8d:
                    6c:3f:27:e8:2c:06:05:7d:cc:1b:4b:c3:5a:23:5b:
                    2c:32:b0:9c:9e:29:9f:98:a8:a6:be:16:79:a6:aa:
                    88:d6:79:02:75:77:7d:0c:30:83:89:16:f9:9f:77:
                    bb:ad:44:33:d4:c7:6f:11:45:72:ce:02:9f:c2:a6:
                    df:76:f5:3f:c0:dc:b3:e5:35:50:58:a6:f2:a1:36:
                    07:18:1e:02:03:7d:88:58:70:6c:1a:35:45:3b:cf:
                    61:dd:9b:5d:3f:87:49:f6:c6:6e:cb:ea:23:e9:76:
                    20:f2:3d:8f:32:1f:dd:02:26:89:97:d0:e4:28:fb:
                    ae:00:66:2f:f2:b9:ef:8b:ec:09:39:7e:d2:24:d2:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E9:D5:08:E0:56:D0:C7:F7:0F:60:C1:9F:E7:1F:2F:F7:2C:72:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl

            X509v3 Authority Key Identifier:
                keyid:AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.204.0.0/19
                  209.204.48.0/20
                IPv6:
                  2605:7bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:02:da:d3:b3:f1:b8:d2:64:bd:63:49:69:27:10:7b:2c:66:
         16:2b:e3:e7:da:89:21:41:ac:59:5f:01:1a:8d:be:a3:23:ff:
         e9:38:0f:ee:d8:40:76:60:f3:b2:57:90:1f:c4:9e:c6:ae:b4:
         cd:87:57:fd:ff:e2:d6:83:81:b8:ce:75:1b:48:8e:fe:e4:77:
         bc:c4:bd:44:c6:30:3d:07:c7:38:f1:63:78:f9:74:4c:79:af:
         c0:e7:3a:d9:a8:be:48:cf:d1:d3:43:58:76:b1:eb:6b:2e:2d:
         a4:3c:2e:9e:00:46:e1:78:0a:11:e8:5e:b2:44:11:3e:86:86:
         07:8a:ef:b4:95:09:fa:2b:9d:c0:a7:b9:38:e5:f3:8f:b8:7a:
         d3:5f:44:fe:97:a2:2a:bb:a0:7c:b4:32:14:14:1a:c0:0b:e8:
         a5:81:d8:38:bf:a6:9a:25:13:1a:b4:ce:2d:09:58:1f:85:ed:
         d3:e4:1c:ec:2c:a0:49:77:0c:8a:32:90:9b:c5:e4:f1:54:bb:
         bd:b4:d9:a6:64:9d:4d:89:c4:7a:87:5d:b0:48:5c:20:01:6d:
         38:0b:2d:c4:64:3f:05:35:fe:7a:ee:c6:76:c9:29:37:df:f6:
         96:0d:e4:84:29:a5:9a:e7:2e:a8:4a:7a:45:8b:41:aa:72:c2:
         61:ec:d4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:42:40 2025 by rpki-client