Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/0d873aba-206a-365f-80da-326f80c195e8.roa
File:                     0d873aba-206a-365f-80da-326f80c195e8.roa (raw, json)
Hash identifier:          mpa6U1pA3ZfPYvsAVdNlnQ0o3q/VZza3QLZ8DmyA62Y=
Subject key identifier:   14:CE:FA:6E:78:6B:E5:9B:4F:05:64:93:A3:B4:CC:71:70:62:9F:B6
Certificate issuer:       /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial:       010D0C9F4328584B233181E4D7023BA8ACD29900
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/0d873aba-206a-365f-80da-326f80c195e8.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        204.15.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:81:e4:d7:02:3b:a8:ac:d2:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=b55e3f9c-d3ba-48f1-a1a4-dfefc324baf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:33:57:2e:e1:70:d9:13:42:9f:65:e7:8f:
                    15:86:ad:a1:6a:cf:ae:09:6d:8b:23:d3:04:f7:cf:
                    3a:fa:04:03:4e:3c:84:18:92:b7:23:5c:2c:d9:49:
                    06:c8:5b:aa:3a:ab:91:3d:91:09:88:a5:58:85:47:
                    5b:2a:2b:65:0d:3c:8f:4e:da:37:da:8e:58:81:61:
                    20:5c:71:88:ee:0c:1a:90:ad:ba:fd:9e:a0:da:e9:
                    72:77:da:9f:ea:7f:4c:b4:05:6d:30:70:b3:ca:b2:
                    83:53:e9:9b:d6:3f:b2:70:d6:40:9a:4d:39:0e:c2:
                    29:c3:41:c1:b0:ef:a8:a8:31:de:fe:73:27:23:6c:
                    2b:33:d7:ae:7c:d7:56:a8:37:19:3f:f7:92:e6:94:
                    a9:d0:6b:73:68:6e:b6:b0:ec:6b:52:92:fd:f8:3b:
                    d7:03:ce:23:a3:7b:f6:15:7a:2c:b6:bb:04:02:e7:
                    32:c1:a2:f0:67:25:dd:de:c3:1c:d4:52:7f:83:60:
                    ed:3c:87:54:3f:a7:35:86:0d:9d:bb:2d:38:5e:ad:
                    18:60:14:dd:e0:4f:0d:fd:28:91:ae:97:85:b1:cd:
                    91:16:fb:ca:d3:11:88:7d:b8:f3:90:bb:84:c2:c4:
                    19:77:96:4a:bf:ac:b1:c7:0d:b9:7d:93:57:77:45:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:FA:6E:78:6B:E5:9B:4F:05:64:93:A3:B4:CC:71:70:62:9F:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/0d873aba-206a-365f-80da-326f80c195e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl

            X509v3 Authority Key Identifier:
                keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d9:9c:27:1a:ae:ac:b1:46:01:3d:93:de:56:b9:0c:65:07:
         4d:e3:ec:2b:53:ab:b3:b1:5c:18:30:c7:58:fb:13:ce:2d:40:
         16:50:59:3c:e9:b7:8c:55:25:b1:b6:4f:68:8e:95:53:50:35:
         97:bb:8b:80:0e:a6:c2:11:a0:c2:6c:d7:22:36:b5:cb:82:37:
         49:fb:59:1c:a9:7e:7a:91:bb:b5:4b:4f:03:5d:30:de:02:4d:
         42:44:64:2c:b3:89:b8:e0:a0:53:94:6c:cc:6c:a7:4d:6e:f2:
         ef:d0:50:91:b1:4b:9a:b9:4a:17:11:06:06:93:e8:c6:40:df:
         b7:08:59:a3:e0:85:69:ff:90:09:b9:9e:7e:17:83:8c:18:65:
         d3:34:7f:63:14:5e:73:1e:a8:8a:2b:72:c0:6d:dd:07:bc:12:
         33:ab:c1:c9:41:a2:88:75:9d:36:30:81:2f:df:b5:69:73:8d:
         ea:05:95:91:c2:85:6a:6b:b2:20:f1:30:f5:df:c5:7b:16:d9:
         16:39:2a:17:48:f1:47:1a:49:87:a1:3f:34:a4:37:35:eb:86:
         d5:1d:d7:df:39:d0:a7:97:dc:54:9d:eb:ec:e3:36:d8:e4:c7:
         90:68:5d:d3:d5:23:73:2d:82:4b:65:20:f2:0c:44:05:44:37:
         98:43:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:04 2025 by rpki-client