Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/97551195-5a9c-3eb4-94a2-225ca7e8e84b.roa
File:                     97551195-5a9c-3eb4-94a2-225ca7e8e84b.roa (raw, json)
Hash identifier:          ha8IL17dVMB7mtS24ZQTMZ76M25G9/TssysihIPUgG0=
Subject key identifier:   46:19:31:7E:E0:13:51:1A:A5:1E:F8:31:1D:7D:13:B8:88:2F:19:97
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAFF00091D7B6FEF614B0C
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/97551195-5a9c-3eb4-94a2-225ca7e8e84b.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     54858
IP address blocks:        204.195.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ff:00:09:1d:7b:6f:ef:61:4b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=cd023c84-47c4-4cf4-a975-aa235c849d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:32:cf:4d:48:b4:c2:82:b1:88:4a:71:cd:
                    75:44:b9:42:15:03:0d:f3:16:fb:2d:e9:6c:d7:09:
                    4c:4a:5c:3a:f8:6d:f0:df:4a:b8:b7:24:a0:7e:fd:
                    49:75:53:e8:bd:ec:b7:64:0e:3e:63:e3:13:d9:11:
                    9b:78:a1:ae:12:24:2d:c3:af:5d:95:8e:ae:36:32:
                    91:1a:05:c3:31:84:6c:7c:59:53:9d:e2:d1:5d:f4:
                    49:7c:0c:2a:7d:71:96:69:89:74:23:e0:6e:f2:f0:
                    71:22:8a:0e:1a:24:2c:e3:7b:5e:d0:13:58:db:0d:
                    24:a7:f1:a9:99:41:11:6b:df:96:b8:8a:5c:0f:81:
                    ff:8b:c2:16:5c:a3:11:9f:48:32:61:58:eb:76:61:
                    95:57:60:59:cb:8c:0b:6e:fa:46:c9:90:68:42:b6:
                    4f:56:c7:15:82:b8:c2:cd:b0:c0:91:7a:38:f2:f4:
                    3f:b6:af:9c:a6:b2:a6:e2:df:8e:b2:9c:c5:b9:a2:
                    be:17:07:18:76:15:ab:1d:7d:58:d7:c3:c8:88:ac:
                    4c:fb:8a:fd:40:fa:47:af:4c:b3:07:45:67:80:2f:
                    a8:01:d5:98:30:59:73:8a:14:4a:63:12:cc:e9:d9:
                    99:2d:cb:8a:db:02:9f:61:35:9c:f3:f8:50:99:49:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:19:31:7E:E0:13:51:1A:A5:1E:F8:31:1D:7D:13:B8:88:2F:19:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/97551195-5a9c-3eb4-94a2-225ca7e8e84b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d9:49:a4:9c:2e:1f:ad:84:2e:17:28:e9:da:35:63:6d:d8:
         d1:b3:c1:0d:78:ea:91:10:b2:c4:64:a4:e1:56:b0:66:dd:85:
         23:5e:10:04:2e:c8:ee:f7:20:d4:c3:a3:87:ba:7d:30:09:bf:
         10:6d:6a:64:b5:fe:6a:cf:36:57:9b:84:81:4d:4b:11:14:b1:
         3c:35:58:60:00:ae:04:3b:27:39:f7:74:ce:d9:7a:e3:48:ca:
         1a:40:66:8a:c8:d7:5b:93:2e:df:03:90:73:75:07:e3:d1:db:
         14:39:a2:78:e1:c6:7a:90:57:65:2a:4d:62:aa:aa:96:39:2a:
         ea:5c:b4:ab:5a:ed:97:c2:d8:47:96:1f:9a:85:64:1e:26:9d:
         98:6e:60:0b:b6:b0:a8:4f:c1:cb:58:5c:25:87:a5:da:6d:4f:
         94:f4:5a:f9:8a:06:e5:2a:a3:22:b7:ea:d1:bb:5e:76:74:f9:
         93:b9:de:41:08:d1:7d:db:ce:8d:c7:f4:3b:c9:50:09:08:86:
         d8:13:19:29:72:2e:5c:45:16:e1:1c:56:2b:b2:1f:f6:8d:5d:
         10:3c:d0:d8:ca:3d:17:4e:e8:42:a6:b1:57:e8:b0:93:db:60:
         7f:b7:57:16:e3:7e:11:ea:91:43:39:05:6c:4f:d3:b4:97:96:
         59:a2:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:10:21 2025 by rpki-client