Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/0422ce09-e192-36ef-995a-0fb6ffb452b6.roa
File:                     0422ce09-e192-36ef-995a-0fb6ffb452b6.roa (raw, json)
Hash identifier:          o5OP7nKJ9wCjXMr6XR5/R68IKFD16gVttHo0BRCeENA=
Subject key identifier:   B6:5A:7A:07:D3:8B:61:7C:19:28:D7:27:9A:03:8A:0A:63:26:6C:A3
Certificate issuer:       /CN=a3ce9b72-308c-4401-abcd-f0002bb1a70a
Certificate serial:       010D0C9F43285849CE9A6460609C0CEB6741C200
Authority key identifier: BE:12:C6:8A:8D:98:2B:3C:C0:19:ED:CD:27:FC:A1:D3:94:3A:1C:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/0422ce09-e192-36ef-995a-0fb6ffb452b6.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     8075
IP address blocks:        204.155.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/a3ce9b72-308c-4401-abcd-f0002bb1a70a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/a3ce9b72-308c-4401-abcd-f0002bb1a70a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:64:60:60:9c:0c:eb:67:41:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3ce9b72-308c-4401-abcd-f0002bb1a70a
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=ee05edf1-a408-40a0-9aab-a6ef3fac222c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2f:50:2b:86:bc:d9:9d:0a:4f:e9:6c:e2:45:
                    d8:c6:21:6c:b6:98:20:8c:59:2c:03:3a:e6:ce:de:
                    dc:47:cd:19:07:2c:85:36:4f:a0:43:5a:4b:d3:dd:
                    dd:34:ec:c1:b6:90:41:88:23:90:b1:2d:00:b5:ec:
                    45:e5:5e:d7:6d:dc:db:39:79:a9:7b:a5:7c:66:ea:
                    46:77:a9:3d:08:42:b7:30:fe:78:8b:68:87:f3:21:
                    2c:87:8e:af:6e:92:67:f9:8d:d6:b7:91:a2:c9:d0:
                    50:4c:67:1d:00:5f:13:29:76:72:2d:88:45:90:61:
                    b8:e6:ce:ee:eb:1f:77:ff:d2:09:3a:85:e1:07:f4:
                    c0:d5:f6:77:43:62:98:9e:d8:cd:de:79:62:4f:72:
                    07:2b:81:bc:36:69:27:f8:f8:59:28:75:36:5c:7d:
                    e8:3e:e9:3b:99:4b:9b:2a:63:71:35:06:7b:96:9f:
                    99:1b:09:d6:2c:f0:08:94:a1:a2:f8:4d:1f:87:af:
                    5e:00:a9:11:5e:39:7f:8d:0e:40:52:24:46:ce:a3:
                    7d:6b:90:cb:25:a3:6f:fd:96:32:6c:19:a1:7c:6b:
                    75:48:45:e1:84:69:5d:9d:c4:c5:5d:b6:f9:a1:6b:
                    00:19:d8:eb:b9:3c:8f:d2:e3:1c:50:b6:e8:38:11:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5A:7A:07:D3:8B:61:7C:19:28:D7:27:9A:03:8A:0A:63:26:6C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/0422ce09-e192-36ef-995a-0fb6ffb452b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a/a3ce9b72-308c-4401-abcd-f0002bb1a70a.crl

            X509v3 Authority Key Identifier:
                keyid:BE:12:C6:8A:8D:98:2B:3C:C0:19:ED:CD:27:FC:A1:D3:94:3A:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a3ce9b72-308c-4401-abcd-f0002bb1a70a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:a6:e0:a8:eb:94:6a:0c:9c:f7:0f:10:b4:3d:b1:30:ed:
         7c:ff:14:9b:df:12:0d:6c:66:21:b9:fa:ab:54:2f:72:e9:5d:
         69:59:bb:9a:75:b1:8d:d5:93:ea:34:20:69:f8:e9:05:c4:1f:
         56:a3:85:65:8c:30:89:86:96:20:a7:63:25:c8:da:75:0c:da:
         76:a6:0b:4a:2a:a3:48:d9:b9:9b:82:c6:3e:75:0c:1b:d2:58:
         23:20:3c:3c:35:96:2c:4c:7a:13:c2:5f:24:96:0c:f1:8d:c0:
         98:e4:04:d3:1e:34:fa:5c:a2:c3:8d:d8:d7:19:65:77:cf:d9:
         e3:03:85:41:eb:b7:c4:8a:f0:d9:4a:73:ac:5a:2d:3b:9a:07:
         4c:40:22:f1:cc:94:43:6b:1b:37:7e:4b:91:ec:2e:f6:e4:55:
         63:2b:8d:c9:c8:df:b6:a3:28:aa:06:4b:3e:4d:a3:48:7b:cc:
         a5:86:b7:64:29:31:c7:f1:dd:d4:6f:a2:ad:d0:c8:dd:c2:92:
         3d:b8:f5:42:be:c8:98:cc:7a:fc:53:f3:a1:30:cf:b8:cc:51:
         bc:3f:33:52:bc:17:ba:39:5c:fa:6b:b7:9f:06:8d:0d:69:81:
         45:19:2b:66:ec:fb:5f:0a:28:30:63:fe:51:ad:dd:76:35:8b:
         91:16:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:59:18 2025 by rpki-client