Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa
File:                     11274dc3-d729-310f-a5b6-e526a7179fc6.roa (raw, json)
Hash identifier:          CBvkyhvobxURZS9r/Pu/3Bi21P7o9+13hbxq1WEY4iQ=
Subject key identifier:   FB:89:D8:00:4B:41:7A:51:25:D3:49:6A:E6:80:A6:EA:FC:65:C6:2D
Certificate issuer:       /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
Certificate serial:       010D0C9F4328584A88409B519191DFB6418DB580
Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     22218
IP address blocks:        204.8.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:9b:51:91:91:df:b6:41:8d:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=c3783bf2-c9ca-4f8f-91d9-0a2f15d5286d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:40:9d:50:56:9a:90:c2:1d:be:63:97:d4:b8:
                    82:5b:8c:e6:63:a6:15:66:94:b1:91:31:9f:7f:01:
                    92:8c:ea:ca:8e:da:a2:e1:fb:0e:b3:cc:d9:8c:1c:
                    79:f2:c7:67:bd:02:2f:64:39:d6:88:b3:8b:77:a8:
                    7a:54:b6:8c:35:69:72:05:63:6b:ca:21:25:81:07:
                    77:80:c5:10:f7:e2:5f:0e:43:95:4f:d2:2c:97:76:
                    b3:77:28:7c:eb:ec:cb:40:66:a7:62:23:1a:46:a2:
                    c6:6a:09:af:2b:b7:3a:73:d0:4d:16:1e:cc:82:f9:
                    a3:9d:8f:db:f4:36:31:c8:73:7a:1d:9a:31:7c:70:
                    30:ed:66:f9:7d:cc:8e:00:0f:db:14:e0:44:85:de:
                    36:45:ae:31:6e:35:a8:a0:c0:4d:80:ce:c6:65:29:
                    13:13:de:58:46:73:9f:b4:5a:78:0b:5f:12:3c:86:
                    90:8a:b2:97:59:47:7e:7f:b3:2e:89:47:9f:2c:d1:
                    9d:ea:67:6b:d8:e5:84:29:55:9e:c4:10:58:e1:a4:
                    67:1e:08:7e:4b:79:fc:c5:3f:f7:b1:43:4b:9f:5c:
                    22:ba:2c:40:36:9f:d1:45:ab:77:b0:a4:6f:a7:df:
                    44:6c:35:3f:6a:b1:d9:6c:a3:8e:0e:13:88:92:5f:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:89:D8:00:4B:41:7A:51:25:D3:49:6A:E6:80:A6:EA:FC:65:C6:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl

            X509v3 Authority Key Identifier:
                keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:73:d5:68:bb:ef:7b:26:59:eb:ce:f3:c2:92:b2:77:d9:00:
         d4:22:73:10:11:65:26:76:5a:7f:72:7b:d6:93:34:c2:0f:49:
         70:6e:9a:19:4e:9d:3b:6a:40:4b:df:73:7a:c5:11:cd:e0:5f:
         b9:6b:8c:2c:a2:fc:4d:06:0b:04:31:f4:c7:cd:68:22:e6:76:
         d6:12:a2:dc:cc:2e:e1:9c:9e:05:88:10:5f:5f:fa:dc:64:51:
         43:a6:fb:63:2f:18:86:20:c0:e8:23:76:3d:3d:30:ab:15:e9:
         86:f7:10:d5:4e:1b:94:ad:1d:8e:7c:5c:2e:31:70:60:2a:bf:
         1d:e7:d5:db:76:2d:4e:39:22:91:fc:3d:81:76:bb:9f:8d:ac:
         a9:16:57:04:9c:a4:36:8a:b5:fc:39:77:4e:3f:7e:57:87:cf:
         3e:19:90:bf:52:c6:6c:1b:f7:61:94:13:1b:f8:67:87:57:06:
         9d:71:8f:96:49:b1:86:22:24:da:7a:85:df:b4:29:cd:13:81:
         96:e9:a6:3c:db:0a:72:84:60:8e:95:35:1d:a7:0b:d8:33:29:
         9c:91:ae:ca:e2:46:5f:31:8a:79:7e:74:71:fc:ff:66:d3:80:
         3c:ae:53:42:5f:c8:8a:25:0e:62:fc:b5:e5:70:ab:3f:7d:36:
         2f:26:91:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:13:44 2025 by rpki-client