Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa
File:                     1764c104-a616-3deb-af04-69c6cae09b7e.roa (raw, json)
Hash identifier:          8Znfu+2hS43eD4jjPpm3ShzrHr4UzB6t/wW7AAHQiZk=
Subject key identifier:   1D:D4:E9:2F:5C:1A:FE:88:8E:34:B5:8E:B8:81:06:FD:C0:DF:3F:22
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584A549B22DC38D910B79C5D0380
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     31898
IP address blocks:        153.84.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:22:dc:38:d9:10:b7:9c:5d:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=8392900d-287e-419f-b1cc-ab402ea6eeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ab:2f:65:0a:82:15:b0:1a:eb:1a:1f:c2:6e:
                    44:0b:cd:47:55:ce:65:24:f7:5a:58:d4:b3:f6:3e:
                    31:50:de:d7:83:34:e0:e5:34:9e:01:a5:cb:a9:a9:
                    96:56:53:7b:68:ab:2b:3c:87:58:c4:ea:c9:d9:f4:
                    ad:f5:ed:52:0d:cc:f5:0b:61:49:ab:f6:fd:47:10:
                    9b:a5:e8:68:bd:c0:9b:e5:87:b6:bd:83:c7:2c:6f:
                    d7:c1:16:2b:53:b8:9f:d2:4f:00:1d:44:50:d3:ac:
                    fd:99:92:12:07:65:89:7d:23:84:57:f3:46:e6:1e:
                    ba:e2:a8:99:d3:b4:d3:18:a3:a5:37:ac:c5:16:dc:
                    5d:03:36:47:e0:c3:33:b9:f8:99:f8:65:e3:b2:ea:
                    29:a1:7b:d8:a4:5f:a4:4b:e6:1e:31:f2:c3:79:4f:
                    10:09:76:16:75:63:da:08:b7:e4:6b:57:aa:ee:6a:
                    a5:a9:32:20:26:78:32:b0:87:11:3e:54:7a:7e:f9:
                    b6:9b:c8:bb:9e:76:1a:ad:fc:9c:05:1e:ca:54:6c:
                    a9:d0:1e:e9:a6:dd:6d:7b:f8:c4:f4:71:3c:27:ff:
                    e7:f3:30:6d:66:79:47:cc:c0:42:f7:71:a7:c0:92:
                    33:f3:ea:d7:a8:ec:4b:bf:88:2e:1f:54:b0:40:6d:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D4:E9:2F:5C:1A:FE:88:8E:34:B5:8E:B8:81:06:FD:C0:DF:3F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.84.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:22:fe:39:85:d1:1a:5c:c8:58:e6:c0:a8:4b:d7:06:fc:
         c1:4f:82:19:b0:95:78:68:78:53:fd:ad:46:5c:f2:44:32:23:
         bd:a4:36:91:d1:9f:a3:bd:8b:ff:9d:37:8e:a5:ab:bc:5b:a9:
         6d:08:a5:81:c9:b6:bd:2b:fe:1e:f2:66:c8:4d:45:66:a4:c5:
         14:f8:ff:17:73:5e:c3:69:75:07:e3:be:8f:a0:52:36:47:2f:
         35:18:56:60:fc:5b:18:35:c0:36:29:58:b4:e2:fb:43:92:36:
         6d:28:22:ea:61:2b:7b:89:0f:a2:82:8f:a5:ec:80:0a:a8:68:
         cd:b6:f0:ce:d9:c5:a0:82:14:9b:08:65:54:12:bd:c3:a9:fd:
         be:50:b3:11:62:a7:9f:e9:c2:b0:95:dd:08:f1:68:b6:93:b2:
         14:82:19:60:1c:5c:57:d1:b5:93:e3:66:7d:08:ef:e8:89:df:
         62:5f:47:d0:2d:e8:09:1e:f9:95:77:6e:2c:41:53:17:8f:7a:
         36:e9:c7:50:c9:9e:25:6f:01:81:e2:44:66:c0:ca:87:7b:93:
         ed:92:2c:9a:4d:28:f0:bf:65:63:12:f1:1b:01:d3:e8:f2:6b:
         74:ed:43:a9:1a:04:3e:92:33:e3:36:fa:e3:57:e9:ee:d4:da:
         a7:ac:bb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:43:33 2025 by rpki-client