Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/10f30603-047c-36a3-817e-f75ae6e99f47.roa
File:                     10f30603-047c-36a3-817e-f75ae6e99f47.roa (raw, json)
Hash identifier:          33RDNC5mr6r5WI2Js1621wsbX+Qhz2NyNKr9fu64WnI=
Subject key identifier:   95:D3:78:4E:61:05:68:2A:62:21:93:2C:43:8D:AC:96:EF:F2:63:6D
Certificate issuer:       /CN=7fda64e4-af3e-498c-8889-c19ec3811b83
Certificate serial:       010D0C9F4328584B2A2C2A2657BA45010A22BC80
Authority key identifier: 37:C6:79:AD:91:57:DF:B6:DC:97:E4:5E:FD:E4:63:42:83:00:D8:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/10f30603-047c-36a3-817e-f75ae6e99f47.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     7029
IP address blocks:        204.63.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:2a:26:57:ba:45:01:0a:22:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fda64e4-af3e-498c-8889-c19ec3811b83
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=8a42e4bf-2275-4472-a74e-286ae7dd8c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:24:ad:3e:72:20:44:31:75:e0:96:64:60:
                    7a:9a:0b:7a:51:18:db:45:46:3f:9c:87:ee:ed:34:
                    d8:bd:34:a6:83:65:26:46:0d:25:50:a2:58:2c:08:
                    c8:26:d5:20:b4:bd:73:a3:c5:9b:cd:6a:da:1a:da:
                    11:7d:c0:20:af:0c:7c:c6:d4:9a:09:95:2b:d9:5f:
                    e0:bc:f9:af:97:f4:f2:84:5d:44:83:a3:af:6a:74:
                    ac:fb:7e:80:67:2c:b9:aa:34:58:d0:c7:1a:2a:50:
                    33:92:7b:ae:4b:f4:b0:93:e3:48:f9:3e:79:09:c5:
                    24:3d:80:8f:ce:78:de:38:f9:38:d7:65:ca:7a:d8:
                    a3:01:a4:58:3b:a7:da:1b:a9:53:d3:2e:0a:3c:21:
                    90:8d:8a:37:ce:28:ca:3e:ce:9d:7a:d6:d9:06:ce:
                    cd:89:bf:f7:89:4d:71:37:7e:e4:b7:5a:b4:c1:88:
                    cb:b7:be:84:53:65:02:bf:60:ac:c9:71:61:87:47:
                    42:03:8a:c9:00:ca:6d:cf:49:63:a3:f0:30:f7:29:
                    47:00:55:cd:75:b3:f8:d8:d5:64:4a:ad:56:f9:69:
                    e6:1d:b1:b0:c4:ff:90:5d:23:20:7c:e9:b8:b6:2b:
                    37:25:31:7c:24:22:76:e5:94:6f:c1:f9:10:89:d7:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:78:4E:61:05:68:2A:62:21:93:2C:43:8D:AC:96:EF:F2:63:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/10f30603-047c-36a3-817e-f75ae6e99f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.crl

            X509v3 Authority Key Identifier:
                keyid:37:C6:79:AD:91:57:DF:B6:DC:97:E4:5E:FD:E4:63:42:83:00:D8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e4:f2:5e:8d:f0:11:16:14:ff:fb:99:f8:7f:d4:90:a4:d5:
         f7:36:65:8c:c8:3f:a8:7d:8c:a9:83:4f:74:44:2e:8e:4c:f7:
         d6:9c:3a:16:68:a7:a6:ba:eb:2a:32:80:af:b2:e4:44:c5:fa:
         74:75:d5:87:92:b1:96:54:21:c3:bb:23:ea:de:bb:9f:6f:59:
         69:f7:ed:9d:38:00:f6:97:96:02:18:02:02:12:61:c9:bd:60:
         25:ce:12:37:08:8c:b4:88:19:05:3b:62:61:b6:5d:7a:9c:66:
         52:40:96:c7:ee:9e:ef:70:a0:f4:d5:13:3d:39:2b:b5:33:1b:
         20:91:01:e0:3e:2c:b6:ab:81:98:ba:3b:76:b4:ce:eb:be:cf:
         6f:92:d0:d7:29:3a:8d:05:66:90:df:a2:ae:c2:83:82:9d:3d:
         d4:3d:e3:16:cc:e3:1f:78:99:11:fe:04:55:0c:df:11:ef:68:
         95:d9:83:0d:e1:7c:e8:f7:b6:42:ab:c8:b5:f5:d2:38:88:26:
         6d:5e:0c:c5:22:8c:e5:fd:d4:6b:5d:4d:e1:77:d2:5b:9e:d1:
         88:0e:09:57:7a:f3:41:f5:a7:53:e4:a1:b0:8f:60:6b:f4:13:
         8b:8d:08:8e:5e:f9:de:00:22:61:e8:66:65:24:65:85:e6:ae:
         7d:ad:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:04:34 2025 by rpki-client