Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/b5d7e471-7d9f-3bf2-88bb-949ab78cec50.roa
File:                     b5d7e471-7d9f-3bf2-88bb-949ab78cec50.roa (raw, json)
Hash identifier:          tA1pIuBaTjNaKE0QWNLsxNvcbmjOnMqAydXCFeP6K6U=
Subject key identifier:   80:52:86:05:66:16:8E:E3:D6:24:1A:27:3D:76:F5:2A:6A:8C:60:25
Certificate issuer:       /CN=8b7c3819-41ee-4cfb-b484-d4f3f475a19b
Certificate serial:       010D0C9F4328584A374AD2B74F4FAEC0EC48E200
Authority key identifier: 6A:78:CC:5F:32:F9:9C:E9:37:D5:0F:A8:FA:96:DE:8D:BA:70:2C:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/b5d7e471-7d9f-3bf2-88bb-949ab78cec50.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        204.15.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d2:b7:4f:4f:ae:c0:ec:48:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7c3819-41ee-4cfb-b484-d4f3f475a19b
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=57181022-f1ea-453c-b6db-0f497aed3c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:df:a3:a9:b1:0a:1f:a6:f8:0f:9c:7b:a1:d9:
                    8d:00:07:fd:fd:7f:86:c6:13:2f:ac:05:f5:33:6f:
                    9c:1b:82:55:47:74:6a:a8:cf:83:e8:b4:35:c1:21:
                    08:e3:15:51:21:2a:47:54:cc:f7:71:8e:6b:85:69:
                    77:18:f2:c9:ab:ce:f8:8a:27:64:94:9f:53:06:d7:
                    0a:e5:99:98:71:5c:fd:a3:57:fd:4a:60:c0:41:68:
                    ac:c8:a7:e2:23:36:f4:9b:8c:83:07:b1:90:14:2b:
                    60:12:df:37:87:e2:d8:07:78:60:72:93:ed:f5:ed:
                    ff:45:e6:59:f0:61:89:73:21:27:1d:79:82:c4:4c:
                    f0:d8:6c:14:a5:76:57:c1:b5:ac:fd:b8:a1:da:bf:
                    98:94:74:c7:ef:25:f7:f6:cb:41:cd:04:f3:94:b7:
                    96:40:95:ae:17:b1:53:a9:64:c6:fe:9f:db:4d:00:
                    90:8a:36:ed:8a:a4:5e:0b:7e:e4:55:9f:68:ac:6d:
                    f1:c4:d0:7b:43:f8:c1:39:00:29:89:a3:43:80:39:
                    42:93:cf:55:74:9c:a5:f1:2e:58:20:cd:db:d4:0b:
                    f2:f2:ba:e8:66:b3:cf:42:a5:e5:bd:76:80:50:12:
                    95:49:db:52:28:87:13:a8:42:8c:7e:4e:c9:bd:43:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:52:86:05:66:16:8E:E3:D6:24:1A:27:3D:76:F5:2A:6A:8C:60:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/b5d7e471-7d9f-3bf2-88bb-949ab78cec50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:78:CC:5F:32:F9:9C:E9:37:D5:0F:A8:FA:96:DE:8D:BA:70:2C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:da:b2:2d:44:70:81:8e:fa:2e:01:ee:c4:82:61:f5:c0:
         b2:6a:5f:ca:d9:14:45:87:36:2b:83:e2:69:5c:57:96:b9:d2:
         8d:97:b7:ce:33:30:d2:14:9b:6e:1a:b6:c6:b7:0d:5e:3c:d0:
         0f:47:8c:50:dd:06:ea:67:3e:bc:e2:dc:c6:b2:79:94:b3:5b:
         75:c6:ac:f5:8b:9d:17:3e:21:e6:ad:ad:83:01:2b:80:99:bf:
         8a:4a:52:7e:52:f4:48:14:aa:4d:d6:10:91:bd:9c:2e:d0:0c:
         04:a2:02:0a:25:3d:69:da:dd:b7:d7:fd:8e:04:a6:f9:7c:02:
         8e:64:b2:6d:7b:3b:6e:4a:69:3a:f5:cf:65:19:e8:8d:23:6c:
         9d:e2:d8:87:e1:0e:f7:60:26:67:cf:f6:2f:07:0b:b3:71:0e:
         a5:e6:d9:d8:3d:e5:4d:08:a1:6b:91:60:3e:b0:ff:a3:4a:b2:
         89:09:37:11:e9:2e:5f:1c:11:e9:0a:9f:f8:fe:67:32:cc:22:
         bb:73:b7:59:b1:a1:73:06:b9:11:f0:fc:0b:46:15:38:1b:fa:
         57:da:8e:b9:e6:be:e5:94:7b:04:fa:96:9f:d3:6f:d3:14:cb:
         84:12:6c:e1:85:59:f8:f5:97:9b:3a:bb:0f:e1:6a:1f:00:d6:
         19:80:08:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:05 2025 by rpki-client