Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa
File:                     6f477233-abe1-3ee6-ba8a-3e08779866d7.roa (raw, json)
Hash identifier:          zSd4EbvKQF9hRt434iyenppNcruiNiTTk3BO42vsoJA=
Subject key identifier:   45:7D:F9:40:D5:1E:8D:3F:EF:4A:35:CA:52:B7:E6:58:15:8A:AF:57
Certificate issuer:       /CN=e3370a8c-7e39-490d-985a-a478ce54459f
Certificate serial:       010D0C9F43285849F9DFDE4271091B6BE938B180
Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     4393
IP address blocks:        204.52.234.0/23 maxlen: 24
                          209.251.198.0/24 maxlen: 24
                          209.251.200.0/24 maxlen: 24
                          209.251.208.0/23 maxlen: 23
                          209.251.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:de:42:71:09:1b:6b:e9:38:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=5f9e97a0-6c88-4a87-8474-370d93b181bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:8a:e3:1a:21:ca:41:f1:a0:6f:d4:d6:33:
                    00:72:9e:1c:3a:12:1a:5a:42:21:c4:74:34:fa:4f:
                    27:bf:ac:8d:e9:20:be:d7:8a:f1:34:0c:27:c1:02:
                    e1:5d:fc:6c:a9:2e:f6:39:32:2a:5d:c2:07:d7:f8:
                    25:d1:20:64:dc:8a:f8:db:96:58:11:67:f9:21:51:
                    11:ae:c8:f7:37:e1:1c:93:73:16:f8:a2:b9:66:21:
                    3c:f8:f7:48:85:2f:57:b1:e2:76:d0:81:50:1f:f5:
                    63:49:8f:0b:f0:f1:3a:5a:8d:14:73:cc:e5:28:1f:
                    ec:a3:cb:26:7b:63:75:44:52:c7:20:53:8b:5d:57:
                    b6:7c:f8:e4:a1:ed:f3:ca:19:39:71:0f:b7:1e:2a:
                    08:b7:ef:5f:42:26:18:3a:98:8b:0a:7c:de:e6:27:
                    16:2c:30:35:ec:66:13:d0:b5:d1:88:f5:6a:3a:d9:
                    66:e3:14:36:87:73:df:9c:4d:2f:d8:46:e1:ab:cc:
                    dc:d4:f0:8d:b6:6a:33:58:9b:7f:cc:5f:73:61:45:
                    1f:0e:59:7d:e5:1f:3e:02:80:15:5e:ef:e2:1b:1e:
                    db:41:5d:ee:09:00:38:b4:9f:47:5d:cb:85:a0:1e:
                    5c:b9:bc:dd:9a:14:f8:d5:ff:dd:04:d9:d7:22:b3:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7D:F9:40:D5:1E:8D:3F:EF:4A:35:CA:52:B7:E6:58:15:8A:AF:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl

            X509v3 Authority Key Identifier:
                keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.52.234.0/23
                  209.251.198.0/24
                  209.251.200.0/24
                  209.251.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:58:7c:ed:a7:cc:43:2d:e9:6b:d2:6b:f0:5a:c0:81:8e:b1:
         74:2b:90:9c:dd:ab:28:55:2d:56:52:63:2a:1f:75:ef:ad:7e:
         5f:3f:e1:3d:4c:8d:a6:e1:ae:fb:57:e6:71:15:82:26:6f:df:
         9e:e9:bf:54:c2:5a:26:28:6d:4c:81:15:2f:cf:47:00:4c:37:
         0f:4d:69:a4:65:67:54:c0:a5:9b:93:bd:56:80:88:47:9a:7b:
         43:19:00:2f:8e:c4:91:5a:f7:78:bc:18:b5:a4:16:fc:07:11:
         d6:1c:66:20:15:94:24:30:9a:f9:38:77:c6:2c:34:a2:98:82:
         f1:fd:ed:2f:4e:78:41:07:57:78:2c:00:69:4a:2a:89:d3:a2:
         ad:d4:6a:eb:18:6f:b6:68:16:85:50:a9:f6:ae:4d:80:79:62:
         dd:7b:2a:18:4f:2f:fd:ad:4b:e1:02:69:ec:0a:91:69:82:74:
         21:9c:96:71:6e:64:2a:0a:eb:80:c1:72:02:c0:73:72:a5:00:
         7c:99:a3:78:41:ba:5b:07:0a:d2:6e:8d:a2:4d:ea:71:b5:36:
         7d:42:a1:71:29:ff:67:17:b3:30:81:6a:52:27:cb:3f:f8:c6:
         eb:c3:68:83:75:37:a4:aa:95:80:e4:60:4a:fd:f6:d9:88:04:
         8c:c3:58:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:20:09 2025 by rpki-client