Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa
File:                     843d57d7-14a7-3349-a57b-8157cba92880.roa (raw, json)
Hash identifier:          gs3AuBFdb565+YfVLo7QoZkBEJZOfwHUIikArjmESmA=
Subject key identifier:   2C:03:18:24:D4:46:80:E7:AC:D7:9C:22:1A:66:5D:79:E3:BD:01:09
Certificate issuer:       /CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317
Certificate serial:       010D0C9F4328584A58CAFAAAAEDFA44749E14700
Authority key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     10840
IP address blocks:        204.235.48.0/21 maxlen: 21
                          204.235.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:fa:aa:ae:df:a4:47:49:e1:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=d11f6bc6-ffa2-4106-95ae-63f62d9653be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b5:81:46:99:bb:6d:88:6c:13:e6:e2:52:89:
                    b6:b5:58:07:d4:9e:48:d7:45:58:f2:a6:7f:c9:fa:
                    d7:87:b1:1b:5e:58:98:67:ec:88:4f:56:ae:67:61:
                    27:f1:ab:ef:d4:99:08:b0:6e:7d:51:0b:68:93:78:
                    f7:bb:09:37:c8:77:e4:d5:28:ca:68:b4:5b:37:6b:
                    61:6b:c8:d0:27:b6:02:a7:5a:db:11:a7:8a:c1:89:
                    7e:a6:5f:d4:ab:9a:e1:81:d2:fd:20:f8:7f:92:de:
                    02:fd:6e:30:dd:ce:4b:95:09:84:93:13:bd:99:03:
                    2d:aa:2a:a7:93:7f:62:38:4d:55:98:ee:98:e2:a7:
                    9a:ec:29:b7:72:5f:70:44:b9:ca:b9:1b:e2:ea:da:
                    21:70:8a:4a:9c:fa:09:40:a2:c6:6d:16:de:88:e7:
                    03:5a:10:54:69:34:a1:b8:5e:97:21:a0:64:bd:b8:
                    f7:b5:bc:7e:96:c2:b2:b9:50:8b:2b:94:a2:c6:36:
                    bc:55:7e:a4:ad:6a:b4:0a:a5:98:2b:53:0a:18:99:
                    3d:0f:51:0f:93:23:0c:61:30:13:ee:66:f0:fc:e1:
                    27:b4:11:6d:68:e4:e9:49:3e:e6:a2:ba:9a:3c:ff:
                    85:e9:1c:d8:ad:57:25:64:89:4e:e1:fd:20:18:c9:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:03:18:24:D4:46:80:E7:AC:D7:9C:22:1A:66:5D:79:E3:BD:01:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl

            X509v3 Authority Key Identifier:
                keyid:49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.48.0-204.235.59.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:49:57:09:9f:dc:52:d0:17:72:3e:89:49:41:a1:46:22:50:
         06:82:a1:d4:58:a5:dd:7a:fe:7f:d1:3b:b4:aa:0d:35:e4:b7:
         8d:a0:99:81:2b:5a:92:99:d1:5b:6f:7a:27:e4:05:4f:22:6a:
         c5:bd:39:af:b4:e5:a4:1d:6d:d4:2c:b2:66:26:9b:7d:cc:5c:
         03:2a:bd:16:97:62:a6:00:d9:7c:a3:e9:f8:9c:0e:f2:a8:1e:
         1a:21:63:f0:98:ca:79:04:69:a1:70:7d:e7:f7:2e:e9:fa:5e:
         4e:7a:1f:9e:44:8d:82:ac:8e:98:04:75:01:7a:ae:7f:f0:f3:
         8e:b3:1b:05:bd:ca:68:73:c8:f1:47:73:39:4d:ec:08:bc:31:
         91:90:88:af:3f:4f:5e:8c:f4:cd:d7:7d:24:ba:53:88:a5:f0:
         81:e6:85:bc:1a:6d:cf:c5:7b:90:f0:bd:89:22:b3:65:28:84:
         c8:76:b8:10:64:5f:0c:ea:64:05:4e:fb:58:2e:a5:77:bf:b3:
         92:54:d2:11:f1:08:90:a1:c3:a1:38:e8:17:4c:be:40:2f:9e:
         53:e6:28:72:d7:38:aa:77:58:0c:a8:8f:e1:de:3b:ab:4a:59:
         d0:00:3b:6d:17:ce:1e:e1:97:03:d6:8d:98:9f:41:e9:ac:01:
         02:52:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 19:45:41 2025 by rpki-client