Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/909ee406-9578-315b-b7e6-279b162a81ab.roa
File:                     909ee406-9578-315b-b7e6-279b162a81ab.roa (raw, json)
Hash identifier:          RumWR+bPCRZqiR43hVmOjRlml0dpYsGHzeMBySmDC4Y=
Subject key identifier:   7B:88:92:53:35:91:47:4D:47:05:7E:20:1C:8C:DD:2F:38:78:93:99
Certificate issuer:       /CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9
Certificate serial:       010D0C9F4328584AECA797F2FCFC194C856F6780
Authority key identifier: 96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/909ee406-9578-315b-b7e6-279b162a81ab.roa
Signing time:             Thu 21 Aug 2025 00:09:13 +0000
ROA not before:           Thu 21 Aug 2025 00:09:13 +0000
ROA not after:            Wed 19 Nov 2025 01:09:13 +0000
asID:                     400072
IP address blocks:        204.10.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:a7:97:f2:fc:fc:19:4c:85:6f:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9
        Validity
            Not Before: Aug 21 00:09:13 2025 GMT
            Not After : Nov 19 01:09:13 2025 GMT
        Subject: CN=5fd8e8c0-0c0d-4991-ac3a-976309129dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:24:35:82:e3:63:1e:70:a1:59:46:98:b3:
                    2b:e0:79:10:28:17:df:38:cd:d9:07:7a:c3:67:7e:
                    fc:3c:e0:89:ae:b4:9b:2a:72:53:0e:ba:5b:63:8a:
                    7b:97:02:21:24:6d:e3:43:58:29:3c:fa:bb:73:33:
                    e6:26:63:68:31:d2:b1:47:8f:91:12:55:3c:f4:5a:
                    c6:40:d6:1f:6d:23:34:c3:a7:73:21:20:4f:fa:80:
                    f4:94:e0:8d:3e:0d:fc:f6:ed:05:fb:05:1d:57:9a:
                    83:38:dd:a8:e5:dc:b8:98:3e:7e:0c:07:e0:69:91:
                    66:32:62:bd:3e:a0:3f:4a:aa:bf:f5:5d:5d:64:1c:
                    89:7f:5d:e0:8d:4b:10:b2:fc:48:d6:df:ed:49:c5:
                    58:62:2a:b9:d8:c1:12:e3:b3:73:5e:1e:83:26:9a:
                    d9:cb:e0:5f:36:9f:4c:f5:ac:8a:e6:6d:bc:90:c9:
                    a4:a3:69:3a:e2:bc:23:56:54:ed:78:16:43:a3:ba:
                    e9:eb:38:90:2c:ba:4b:c3:7f:8a:cc:ec:05:81:d3:
                    61:fe:11:0e:65:bc:da:b8:89:9c:8e:d3:b4:1b:9f:
                    c6:81:bf:91:f0:23:b5:6a:55:cd:4d:36:06:7a:1b:
                    e0:d3:86:27:71:36:5b:33:d8:ee:b7:35:d9:a2:da:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:88:92:53:35:91:47:4D:47:05:7E:20:1C:8C:DD:2F:38:78:93:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/909ee406-9578-315b-b7e6-279b162a81ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl

            X509v3 Authority Key Identifier:
                keyid:96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:69:19:55:d0:a4:7e:77:56:45:98:a3:47:e6:3d:80:5a:0d:
         7e:eb:b7:35:5b:f8:9c:b7:37:6e:f1:fc:e4:8a:39:b9:1c:27:
         2c:64:43:24:5a:03:91:f3:2f:0a:38:ba:1b:b7:5f:48:96:2c:
         9a:1f:80:6e:2f:76:4c:d6:c3:74:8a:48:8f:4a:8f:d7:9a:09:
         41:b3:86:05:1f:4a:15:d1:f6:f4:cb:2f:bb:78:98:4f:ba:62:
         b0:d3:d4:7b:47:ee:4a:64:08:20:a3:02:12:1a:c5:4b:5b:7f:
         8a:56:3b:90:52:6c:d8:ad:4b:b8:d7:c3:8c:be:91:76:7d:1a:
         8c:c1:6f:11:ab:6f:3c:81:e4:66:f5:58:60:8e:07:c7:a8:5c:
         8e:d9:8a:4b:a8:99:3a:22:31:a4:b7:4c:28:f5:bc:2e:33:d7:
         50:d3:aa:37:ad:a9:90:38:d9:67:e0:f8:32:36:c9:a1:aa:36:
         a4:a4:13:22:68:7a:e7:48:43:9e:e2:cc:82:17:20:58:36:13:
         cf:5a:b4:e6:90:01:64:6e:aa:90:3b:57:2d:a1:ee:62:df:a4:
         12:2f:b4:d8:ae:6c:89:bc:11:74:47:c9:35:9d:f3:2f:11:f1:
         4a:03:8c:23:a9:cf:26:66:8d:2e:bc:f4:47:70:e5:6f:4f:f8:
         4c:cb:4c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:27:51 2025 by rpki-client