Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/83b8e033-666c-33d3-ba7b-5c8e6a034c3d.roa
File:                     83b8e033-666c-33d3-ba7b-5c8e6a034c3d.roa (raw, json)
Hash identifier:          JAuYN0/pP0j4hlTmRkFxozf023GgVlm4MtfAEgZGRGU=
Subject key identifier:   3B:D8:BD:F8:43:82:31:31:B1:5E:EC:CF:7C:45:52:21:BB:ED:8F:3D
Certificate issuer:       /CN=cda047c8-1dc9-4cca-b1de-b651af254414
Certificate serial:       010D0C9F4328584A4DA052F93D12F74F7DE876F0
Authority key identifier: C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/83b8e033-666c-33d3-ba7b-5c8e6a034c3d.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     51396
IP address blocks:        204.76.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:52:f9:3d:12:f7:4f:7d:e8:76:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda047c8-1dc9-4cca-b1de-b651af254414
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=ceeed4eb-8064-48c3-ae30-6909e69218d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:68:85:d8:aa:a7:d7:32:30:08:25:a2:cb:
                    4a:22:4a:6b:e7:d1:7f:51:17:c8:c5:cc:9a:fc:50:
                    60:0e:46:f4:e9:86:c8:7d:3e:c1:2f:7f:b8:45:30:
                    5d:b3:82:42:fe:70:be:5c:c2:70:94:ed:11:9a:d8:
                    23:3d:d0:ca:e6:61:c8:68:bf:4b:5e:65:b4:89:d4:
                    74:cb:6c:9f:74:ad:68:5f:8b:ad:d1:64:20:bd:44:
                    27:37:a5:0b:c7:3c:e5:37:fd:75:d6:01:1b:52:29:
                    38:ba:f9:03:bb:8a:d9:db:96:67:0a:0a:50:58:dd:
                    9c:e3:35:cb:76:d2:24:01:ba:a9:ff:87:2d:04:fb:
                    9f:d2:a4:49:f8:ae:01:3d:19:ef:98:5a:ac:53:12:
                    20:c8:c2:2c:24:d9:d3:55:8a:99:0e:d9:e0:4b:fd:
                    4a:bf:d8:65:c3:72:2c:c2:06:06:75:6c:77:0d:3e:
                    2e:43:4f:67:ca:91:63:e3:25:d2:a5:a7:72:c2:10:
                    1c:3e:ab:83:a1:fe:c8:0d:63:af:11:03:14:cf:68:
                    9b:c8:1b:70:c2:e3:b1:71:31:ea:19:dd:a2:15:73:
                    9a:3d:8f:a0:da:33:bd:25:f3:47:be:25:72:63:24:
                    cf:20:e8:13:56:d3:a9:22:7b:1b:f7:a1:bd:af:b5:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D8:BD:F8:43:82:31:31:B1:5E:EC:CF:7C:45:52:21:BB:ED:8F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/83b8e033-666c-33d3-ba7b-5c8e6a034c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.76.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:91:3b:22:4b:8c:0c:ac:b7:7c:f6:2e:6b:82:7e:e1:0f:fe:
         45:2d:00:f4:95:56:f7:4d:b0:ea:fc:5b:db:96:b1:fd:04:c6:
         92:00:20:cd:66:15:7c:d5:16:ea:11:de:31:0e:20:e3:de:41:
         f5:7f:22:7d:25:48:9b:bc:c4:8b:0e:ec:0d:fe:9e:7f:fe:f0:
         31:a7:24:34:4c:74:41:e4:3d:1c:31:d8:55:70:2c:14:58:93:
         a0:2a:a1:44:b4:ef:38:73:98:02:ea:00:b7:83:4c:aa:7e:04:
         92:e9:c1:24:fa:4f:8a:b2:95:7d:2d:42:d2:64:00:f8:9c:b3:
         47:66:35:f7:d0:5e:46:39:e5:31:e5:b6:17:33:a2:cb:67:7b:
         3a:23:bd:b1:b2:64:27:cf:2c:d4:45:60:d6:ce:7b:fc:40:99:
         04:8c:0b:db:58:0f:22:fe:6c:08:a1:dc:6b:47:34:56:69:63:
         2f:1a:d1:2f:94:5a:40:0f:97:30:81:ad:b1:0c:08:42:af:ea:
         6b:b0:15:35:77:aa:c0:a5:ac:84:c4:6d:ee:54:dd:02:88:47:
         69:5d:dc:63:0f:b1:c6:62:bd:51:ab:af:94:cd:9e:ac:67:d9:
         f5:1f:fe:59:c9:39:a1:1a:f5:ed:ac:7b:b0:9f:9d:30:73:49:
         22:40:9f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:19:38 2025 by rpki-client