Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dbfcf-8478-3db4-933b-155bb68dc149.roa
File:                     563dbfcf-8478-3db4-933b-155bb68dc149.roa (raw, json)
Hash identifier:          0/uqPrlDonmK8Vs/A0ZQ2JdZ1t9CWtH/b2RoHVd88E8=
Subject key identifier:   97:BD:68:08:67:F4:08:9A:6A:0D:C0:52:22:DA:93:22:98:3C:BC:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AAEC7942B7B99637A7D6C7500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dbfcf-8478-3db4-933b-155bb68dc149.roa
Signing time:             Tue 29 Jul 2025 20:13:32 +0000
ROA not before:           Tue 29 Jul 2025 20:13:32 +0000
ROA not after:            Mon 27 Oct 2025 20:13:32 +0000
asID:                     0
IP address blocks:        204.91.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:c7:94:2b:7b:99:63:7a:7d:6c:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 20:13:32 2025 GMT
            Not After : Oct 27 20:13:32 2025 GMT
        Subject: CN=0be5332f-377d-47b9-b29c-e9feb6d85bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:21:07:94:fe:7c:13:24:f4:fd:3b:39:0d:
                    48:bd:18:09:41:da:6a:55:9f:f6:fe:6c:c3:a8:98:
                    87:ab:9e:41:5e:b1:5f:c4:b2:fd:52:88:97:36:0f:
                    b4:bb:6b:6a:cc:3f:44:41:27:4a:c3:8f:7b:f9:13:
                    86:08:21:87:83:36:54:eb:03:5a:84:eb:9f:d4:3a:
                    85:7f:2d:b3:8a:5a:87:21:b1:bb:1b:cf:4b:46:a4:
                    53:94:3c:7b:3a:91:7f:ae:de:fb:3e:ef:5a:d4:0e:
                    68:a4:84:d5:b8:c3:66:db:74:47:fc:74:dc:ef:48:
                    6b:ad:73:ce:50:f7:27:80:86:b9:51:22:2d:69:1c:
                    af:a7:ae:2e:8f:2b:6a:14:02:c2:7d:f1:79:98:ca:
                    8b:98:9c:98:2b:ec:87:60:4b:be:df:7c:d1:53:78:
                    f6:57:a8:cd:fa:a9:4e:7a:d3:80:85:78:b4:7e:9d:
                    f2:e1:43:21:84:65:10:f8:7b:e9:56:cb:af:13:fe:
                    83:ab:bf:2f:ba:83:35:46:c2:b4:9f:9f:7f:de:54:
                    25:d6:3d:c8:0c:39:02:d7:51:78:e5:47:9e:89:5b:
                    7c:ea:db:dc:e0:0e:7a:b9:bf:cc:6e:b9:4e:d1:5e:
                    35:d7:0f:a5:8e:b7:fe:cc:a6:b3:d2:e0:46:a8:ed:
                    bf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BD:68:08:67:F4:08:9A:6A:0D:C0:52:22:DA:93:22:98:3C:BC:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dbfcf-8478-3db4-933b-155bb68dc149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.91.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:21:41:8b:50:50:12:94:fa:8c:a5:c1:e5:c7:26:21:c9:49:
         33:5c:9a:a2:1a:6c:df:e3:4b:6e:64:83:2d:b2:12:a4:96:08:
         fe:46:d3:d7:e8:36:08:52:73:84:fd:94:45:55:2f:92:45:37:
         8c:7e:61:f7:1c:67:f6:82:5e:04:cc:01:2a:9d:18:99:52:7f:
         75:d8:d3:d5:dc:50:5c:b5:6f:89:26:91:cb:f3:f7:78:5d:c7:
         04:cf:1e:4f:24:7a:eb:de:cb:64:71:30:b2:47:36:e9:cd:d7:
         0b:0a:59:d7:53:4b:82:69:06:53:73:78:74:ab:9e:8b:d8:6c:
         04:c4:69:ab:5b:ce:da:73:56:8f:ba:33:8a:69:f8:dc:f6:c7:
         da:d3:a7:47:d0:69:d6:72:a0:da:3a:9b:c9:b5:17:7c:09:28:
         9f:c6:7e:15:be:07:b0:7d:ed:e3:42:20:c4:2c:17:d0:fc:2b:
         65:9c:2f:1d:21:09:56:a0:18:0b:5b:e7:9f:dd:9e:84:cc:ec:
         4b:d1:d1:ea:07:21:e8:9f:a3:9d:fd:21:61:53:e2:45:c3:57:
         9e:bc:68:65:5b:7e:e2:b2:c3:29:3a:e6:1f:e2:8b:af:19:49:
         93:43:79:a9:5e:90:66:0e:b7:24:94:20:f6:72:cb:ed:0f:13:
         db:cd:83:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:37:51 2025 by rpki-client