Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa
File:                     84b980dc-1b89-371a-8343-16c5dac99a40.roa (raw, json)
Hash identifier:          wf4yRTejFwHRHttDO0Lawj0JKEdDhPUWYHw2QnMn/NA=
Subject key identifier:   18:FD:5B:51:A8:77:F5:46:21:6A:22:FA:D5:1E:1E:5C:99:D9:83:F0
Certificate issuer:       /CN=688a78fa-2d94-478e-900a-a1fec661b769
Certificate serial:       010D0C9F43285849DF5A68ADA69813A3EABA90A8
Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     58580
IP address blocks:        168.245.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:68:ad:a6:98:13:a3:ea:ba:90:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=a197ffff-fcc0-4a16-9b22-b84e2d541a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:da:65:82:ff:be:12:6f:e0:35:d7:b7:2d:21:
                    fd:9f:4a:e4:f4:63:43:68:2b:56:b3:26:0d:8e:04:
                    8d:e6:cb:1a:8a:bd:4f:74:25:38:08:5e:1c:98:9a:
                    6f:23:6f:15:c8:97:8d:52:4e:31:d8:00:a0:3d:ff:
                    a5:80:ec:7a:72:3e:92:6c:35:89:d1:02:86:a6:84:
                    25:e3:9d:b5:ef:a3:17:74:eb:42:72:b5:5d:77:65:
                    4d:8a:64:d7:99:5e:e1:9b:52:ad:aa:83:03:4e:99:
                    30:41:ec:16:c4:4e:32:b8:cc:5c:e1:82:b9:1a:df:
                    6c:52:51:26:49:79:9f:2a:c1:92:d6:6b:ae:db:93:
                    46:a7:f6:3c:6d:77:14:c2:0e:82:53:79:4c:0a:a3:
                    a3:29:93:d8:1c:fb:51:1e:24:a5:fc:f9:25:e9:75:
                    4e:01:83:4b:45:f4:48:e3:4c:11:58:13:eb:4f:95:
                    b9:26:34:41:01:1a:a1:59:90:0f:3a:0f:ca:4e:b2:
                    a0:3a:d5:25:0d:04:96:d6:06:4c:95:85:aa:8e:53:
                    62:85:5f:f8:5b:c2:d9:a2:5b:2e:5b:e2:70:a5:14:
                    a5:7c:a5:e8:c3:f2:1e:89:25:11:41:2c:0a:a1:e4:
                    07:09:de:5d:55:c5:28:74:4e:e7:0f:24:b4:13:9d:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FD:5B:51:A8:77:F5:46:21:6A:22:FA:D5:1E:1E:5C:99:D9:83:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl

            X509v3 Authority Key Identifier:
                keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:e2:a5:5c:c9:fd:b9:df:90:64:c7:4d:e3:20:db:d9:44:
         f9:34:dd:a9:a4:73:3e:6c:bd:39:09:37:fa:f2:7c:f1:7d:32:
         37:83:96:95:79:b6:b0:44:e0:16:5a:af:f1:15:83:48:2f:ed:
         0b:4a:73:c4:91:d2:03:92:d4:cd:4e:47:36:4c:94:cb:ae:1a:
         8b:96:3b:64:88:10:c1:e1:45:df:c7:84:af:46:e1:c2:4b:54:
         dd:70:cc:d8:96:81:dd:30:05:ba:ee:42:be:1d:dc:38:63:74:
         9c:fc:8f:b9:a7:c6:0f:06:2e:ca:ba:9c:f6:0c:4c:16:e7:ef:
         39:76:0a:de:fe:b0:04:6f:f3:b0:1f:21:45:09:ef:24:3c:2f:
         8f:2a:c1:7a:4c:b2:35:81:5f:f6:06:42:73:c4:cc:5b:d4:f1:
         76:cc:41:c3:79:5e:26:0b:11:4f:4c:40:69:ae:f3:17:6a:db:
         1c:52:57:77:fe:91:5e:e2:24:20:59:ab:e4:8d:b4:24:0f:fe:
         f0:13:0f:75:69:a4:e7:8e:f8:8c:47:ea:e2:e6:0b:ef:f2:62:
         79:52:e0:e5:ed:ef:a3:1c:cb:41:32:0e:e9:a8:bb:0d:3f:31:
         22:98:b9:b3:7d:51:51:ee:8e:5f:fd:67:6b:e7:6d:4a:11:da:
         f6:64:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:23:39 2025 by rpki-client