Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa
File:                     a810c427-52bf-3069-889e-49d7c3d307dd.roa (raw, json)
Hash identifier:          oD7WViQ8HV5ZxNGF+wiSEWcHwNDAH0YPr0tVTFBYo1M=
Subject key identifier:   7B:0A:A7:8E:2B:25:97:54:38:4E:4C:B5:AD:9D:0C:F7:B3:05:19:94
Certificate issuer:       /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Certificate serial:       010D0C9F4328584A6DBB494885E714193CF73780
Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     8075
IP address blocks:        204.209.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:49:48:85:e7:14:19:3c:f7:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=2f2c1db7-2dca-40a2-a60b-cd075344f165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:a3:fe:cc:71:48:d4:9c:d7:93:07:61:a1:
                    aa:42:96:68:a4:3e:c6:69:b7:74:01:c8:fa:de:64:
                    df:e0:4e:35:4f:ed:11:bc:9d:7d:c2:b6:3b:54:71:
                    5c:9c:a2:e3:48:ab:99:19:66:e0:49:35:bb:19:17:
                    90:ee:a5:41:b5:ba:8e:ac:39:d5:a2:b2:c6:fb:3a:
                    49:17:82:c8:d0:37:49:3a:12:e3:73:0d:a7:6c:c9:
                    da:fb:bb:67:2b:6e:1e:9b:a1:2a:f6:96:58:40:16:
                    ae:84:ec:a3:05:f5:25:5d:30:5f:ae:d0:16:77:75:
                    6c:ee:fe:fc:aa:51:89:5e:94:bd:81:e9:6b:fe:6a:
                    2d:32:a2:60:d8:3a:22:aa:10:49:37:4d:a4:1b:1f:
                    e7:ea:98:f8:b7:17:e2:e1:48:f7:ee:13:e3:d5:53:
                    5c:26:1a:e6:77:29:08:c8:da:34:71:40:95:2f:ce:
                    30:a3:05:3c:86:24:e0:7f:b4:ad:f9:73:d6:7f:b7:
                    72:12:c9:aa:8a:78:c6:3d:01:73:0e:93:13:7b:6c:
                    d4:7e:e2:a6:63:09:fb:e3:ba:23:75:3a:f2:64:40:
                    c3:16:db:c4:d0:d1:a5:75:59:34:44:f8:75:fa:4d:
                    fa:70:4b:71:9d:4f:8b:bf:34:1d:f0:5c:ef:36:98:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:A7:8E:2B:25:97:54:38:4E:4C:B5:AD:9D:0C:F7:B3:05:19:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl

            X509v3 Authority Key Identifier:
                keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:9d:62:8d:bb:ad:54:ea:91:a6:35:c8:72:e0:63:44:85:
         74:33:11:59:67:b9:18:61:a8:5b:e3:4c:93:6b:62:60:9e:67:
         8a:ba:c7:d6:ed:9d:3e:f3:55:27:d6:fe:42:a9:9f:a3:a2:46:
         87:1a:3a:86:e5:79:e1:ed:12:e7:ef:8d:db:de:cf:1d:e1:68:
         10:d6:33:79:4b:f4:3a:e6:e5:de:2a:c5:f4:70:e6:3c:dc:fe:
         38:3d:5a:7a:0a:b5:49:8c:8c:0c:cb:c6:2b:c1:fb:11:67:aa:
         b2:9b:63:cd:d5:a8:2b:06:44:26:37:06:8c:96:2a:66:e7:1b:
         01:32:a5:a1:74:de:f1:3b:f1:f9:b5:31:64:b0:d8:31:bf:86:
         99:34:e6:f2:a9:32:0a:02:57:79:4c:c0:16:4d:1b:4c:70:ed:
         5d:2a:82:f7:99:59:9e:56:7f:e7:cf:8e:9d:26:85:fb:d1:84:
         38:4c:e9:ab:80:ad:d9:db:37:70:ed:14:5b:76:d5:8a:b9:fb:
         05:71:b5:1c:b6:f5:7b:6a:af:3b:94:c8:2f:f5:0b:69:27:ff:
         92:f3:64:e8:a3:8f:7a:5c:f7:a1:73:24:30:e3:0b:22:34:ff:
         4c:8d:c2:9d:c9:78:1c:2c:02:38:5a:c1:0e:75:a2:27:b7:7b:
         f0:ea:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:40:42 2025 by rpki-client