Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/715c710e-d3e1-39bc-96b2-c030c9bb6f3b.roa
File:                     715c710e-d3e1-39bc-96b2-c030c9bb6f3b.roa (raw, json)
Hash identifier:          AMFN5Fn+0xX+Kb2Fn9UYdZIHjAO4Cqrqt2ZrxoOK7VM=
Subject key identifier:   67:CE:60:19:17:42:2C:A0:32:CF:9B:59:20:7B:F1:D3:12:10:0E:BA
Certificate issuer:       /CN=7fda64e4-af3e-498c-8889-c19ec3811b83
Certificate serial:       010D0C9F4328584B2A2C2A3B7BC886330508F600
Authority key identifier: 37:C6:79:AD:91:57:DF:B6:DC:97:E4:5E:FD:E4:63:42:83:00:D8:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/715c710e-d3e1-39bc-96b2-c030c9bb6f3b.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     6079
IP address blocks:        204.63.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:2a:3b:7b:c8:86:33:05:08:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fda64e4-af3e-498c-8889-c19ec3811b83
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=d6116889-a0c7-4ecd-9cf8-621bae767934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e0:33:14:0c:bb:97:6e:62:ba:40:c2:21:53:
                    78:88:fe:4a:11:a5:49:76:2d:c4:3e:2a:5d:ee:62:
                    23:39:7b:54:07:15:a6:40:12:42:62:fd:40:5c:12:
                    d0:2f:78:44:c7:aa:bd:41:9d:f3:f2:a6:3b:0c:ea:
                    25:e5:9e:3c:95:4a:23:bb:e9:1e:ce:9b:bb:85:b1:
                    e3:31:e6:bf:66:fc:d8:1d:c4:73:b3:ad:f8:8a:60:
                    5f:7d:80:cf:df:b5:83:b1:4f:16:a4:12:2e:35:51:
                    f9:df:be:eb:62:3b:1e:34:97:07:7c:86:cd:38:17:
                    42:10:b2:8a:bb:01:4d:5b:2f:01:fa:aa:ce:c9:7d:
                    27:65:44:b4:fa:c9:9c:28:15:8e:70:ba:15:06:0d:
                    d1:e6:e9:8c:f7:53:64:07:4b:82:b0:dd:9a:2d:16:
                    46:3b:65:65:3a:96:57:5e:ce:55:27:6a:e5:76:37:
                    c9:6e:6c:bd:11:c2:7e:3c:ab:68:e1:3d:03:a8:29:
                    91:20:ac:47:80:72:4f:af:6b:a7:e5:26:38:4d:b0:
                    8f:de:81:9b:1c:66:88:79:05:9e:63:e7:62:91:f8:
                    32:ed:f1:96:cb:4c:d8:6a:8e:e0:0e:52:ed:0d:50:
                    88:40:cf:79:cf:66:07:8a:44:00:d8:34:1b:86:b3:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CE:60:19:17:42:2C:A0:32:CF:9B:59:20:7B:F1:D3:12:10:0E:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/715c710e-d3e1-39bc-96b2-c030c9bb6f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83/7fda64e4-af3e-498c-8889-c19ec3811b83.crl

            X509v3 Authority Key Identifier:
                keyid:37:C6:79:AD:91:57:DF:B6:DC:97:E4:5E:FD:E4:63:42:83:00:D8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7fda64e4-af3e-498c-8889-c19ec3811b83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:06:0a:5b:04:f5:6a:af:67:5a:4c:73:5a:62:0e:f0:2a:
         b2:fb:01:67:93:a6:fb:e2:93:29:0c:a6:0f:11:b8:b2:cd:61:
         ea:09:b8:1f:d5:b4:40:85:f8:a6:4f:b9:e2:11:e7:64:42:f3:
         42:93:c8:82:07:89:72:5d:39:22:3c:41:91:29:c0:7e:59:c1:
         10:5e:55:8a:87:f9:3e:71:59:e9:17:a1:38:20:24:1f:9e:8e:
         8e:4c:5f:d2:78:ab:43:7a:2f:e5:08:5f:8a:03:e2:bf:92:c2:
         b5:34:8a:e4:fb:96:d5:9b:f2:5d:d2:38:cb:52:ee:a2:5c:20:
         0a:50:86:3b:02:0c:38:13:cd:7b:69:f0:64:0e:48:4d:46:8b:
         28:e7:31:3c:57:9d:a1:85:2a:ed:43:31:45:f8:fc:ef:a2:46:
         12:30:d3:54:50:8a:90:8c:ca:10:a0:1a:d1:1f:b8:b7:e0:be:
         16:b4:86:4e:47:ac:c8:d2:f1:8d:6b:ad:a8:8e:7e:35:9c:23:
         1a:c5:79:60:f4:13:7c:cc:2b:dc:35:6b:5a:27:b9:d4:1f:28:
         76:e1:b9:e5:b9:51:43:ed:af:e5:81:26:4b:19:46:8f:f6:86:
         dc:2e:51:1d:43:e9:ae:a0:17:99:5b:06:12:8a:b3:dd:8d:10:
         64:fb:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:56:56 2025 by rpki-client