Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa
File:                     e4984303-cfdd-381f-b4b6-b6359fd756a7.roa (raw, json)
Hash identifier:          Clm7iZAnlEdCTW5arK3aGjcq5836r3OmuNfk4Jao/CU=
Subject key identifier:   B4:3D:92:30:DD:22:3B:AF:1D:83:21:8E:F3:06:06:F8:0F:2E:07:EA
Certificate issuer:       /CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0
Certificate serial:       010D0C9F4328584A3E45A261593CDFE5F9623500
Authority key identifier: 49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     20283
IP address blocks:        192.16.104.0/22 maxlen: 22
                          204.144.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a2:61:59:3c:df:e5:f9:62:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=410497a9-ac27-4f89-aefa-42c87c99d635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:9c:10:16:5d:01:6a:ec:6b:fa:81:2f:26:
                    38:8f:23:e8:c9:22:df:21:0e:8f:7d:73:1f:83:c4:
                    e5:03:c9:c9:44:6c:8b:53:e2:37:84:e4:4b:ed:4e:
                    dd:d2:0c:aa:00:80:b2:13:62:fa:03:81:11:49:1f:
                    fe:b2:50:7d:96:31:1a:0c:2d:b7:bb:e6:2c:76:3d:
                    fd:41:ad:f9:05:31:9f:cc:21:02:6e:7b:eb:4b:d7:
                    08:89:ff:28:27:24:66:24:ef:25:a7:31:ba:e0:c7:
                    c0:47:aa:ce:43:91:e1:3f:5d:0f:d3:5f:6a:cf:c3:
                    54:18:e8:15:b3:d7:95:87:88:23:f1:84:fe:62:ac:
                    67:4f:71:82:b9:0c:11:32:99:8b:7a:46:6d:83:7b:
                    08:52:ee:d7:84:7c:ec:29:2b:28:3a:25:87:c2:9b:
                    fc:14:79:75:48:f9:54:79:8a:f9:54:54:97:65:f5:
                    cd:91:2a:fb:74:ab:a8:57:2b:9b:a6:2e:e2:db:9f:
                    84:f5:4e:b9:1d:9f:f9:3c:d6:f6:73:cc:2c:6e:b9:
                    a6:5b:bf:34:3c:b0:b5:b7:db:49:6e:ce:98:97:97:
                    41:95:a7:e4:d8:ec:53:2d:2a:6a:11:db:c6:2c:2a:
                    f4:1e:dd:27:79:a3:73:d7:74:8e:32:5b:29:ae:63:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3D:92:30:DD:22:3B:AF:1D:83:21:8E:F3:06:06:F8:0F:2E:07:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/e4984303-cfdd-381f-b4b6-b6359fd756a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.crl

            X509v3 Authority Key Identifier:
                keyid:49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.104.0/22
                  204.144.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:e1:5c:5f:53:1c:7e:e3:5b:27:94:6d:9b:19:88:33:aa:
         25:8d:b4:8a:e2:cd:33:f9:fb:19:0e:6e:19:60:4b:ea:c3:85:
         97:61:5d:49:50:56:c3:3b:81:34:ac:9b:45:5c:11:2a:46:bc:
         a9:d9:cb:66:b9:5d:60:35:c3:57:8f:89:98:99:c7:04:7d:e8:
         0e:2e:b3:40:7b:0c:73:25:b8:9a:81:c2:19:7a:37:9a:c9:d6:
         9a:d7:81:71:ff:d0:b6:b1:f2:07:48:b1:43:e4:11:55:a2:aa:
         4b:33:6e:18:ff:3a:7f:44:6b:5c:89:75:c1:37:d9:90:1e:28:
         2d:16:7e:9c:99:74:e6:18:a5:74:16:c4:31:51:fb:b1:d4:77:
         47:98:b2:18:6a:49:f2:23:18:15:96:06:b0:c1:d1:8b:14:c3:
         52:0c:70:3e:98:9c:04:05:99:1c:c1:08:62:1c:e4:a3:4b:99:
         cd:26:d9:60:b4:69:d0:91:c8:f5:7b:df:33:cd:1c:65:15:65:
         93:7f:fc:a3:f0:17:0c:d9:89:da:2d:cf:c7:c6:d0:14:13:e3:
         81:9f:87:3a:cb:b2:47:17:c2:70:93:eb:8e:aa:9a:14:00:dc:
         06:05:22:91:cf:ff:34:18:1c:92:49:96:bb:39:51:de:11:f7:
         be:71:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:07:12 2025 by rpki-client