Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa
File:                     caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa (raw, json)
Hash identifier:          o1+bsuyv91k5cJvOM20KvCNY/DUuKWfqbGMTSJe22lw=
Subject key identifier:   E9:3F:50:91:3F:2F:41:DA:90:48:2B:8F:26:2C:4B:28:3C:98:28:80
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584B36BC4984278CD014DDD9B3C0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     26480
IP address blocks:        204.19.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:49:84:27:8c:d0:14:dd:d9:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=ea79d49e-3812-445b-8100-c476651bd77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:d8:9b:38:65:4c:30:c9:ba:02:3b:ea:ee:
                    c3:76:54:80:dc:41:07:63:3d:44:63:e4:cb:e9:3d:
                    9c:19:51:96:4d:2f:94:46:83:03:14:3a:d7:e1:1f:
                    2c:d1:3f:50:75:70:d3:ca:92:8e:3f:2d:ec:b6:aa:
                    fb:67:2b:d1:1e:54:c5:c9:d1:65:c3:13:3e:53:74:
                    13:9b:80:cd:25:84:65:58:ea:f6:18:5c:1b:b9:c1:
                    2b:cb:cd:66:0d:07:98:a7:6f:0b:e5:a1:74:24:d1:
                    e9:4c:13:fc:c6:c0:1a:15:cb:c8:58:aa:b8:19:2a:
                    d1:bb:ff:e3:7c:92:6f:89:ac:7e:8c:c6:70:ff:3e:
                    6a:88:39:5c:80:01:78:2d:8b:66:93:29:d2:1b:30:
                    b6:b1:e4:8d:85:a7:fe:49:ce:c3:a1:fc:c9:f2:af:
                    18:c8:86:bb:9d:eb:db:5f:98:dd:08:3b:89:38:3d:
                    c3:94:62:3b:c3:37:c8:3e:0d:57:48:99:f8:62:0d:
                    14:c6:41:d3:b5:84:76:64:c1:c9:e4:9d:93:36:7b:
                    ef:d9:e7:d2:54:be:f8:7b:51:36:54:2f:cc:3c:0e:
                    0a:3f:46:95:65:d0:0d:e7:7f:dd:ca:f2:99:c5:f7:
                    9a:63:aa:4d:97:be:f2:52:91:ca:4a:07:17:61:26:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3F:50:91:3F:2F:41:DA:90:48:2B:8F:26:2C:4B:28:3C:98:28:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:5a:78:09:7e:00:ca:a0:81:9a:92:d0:d0:fd:b5:d9:ba:d6:
         c8:82:2e:22:75:c0:3e:c8:9f:05:59:be:aa:1f:8f:c1:df:fe:
         44:9f:c2:c3:07:0b:96:8c:bb:97:4d:8a:1e:70:80:f4:f7:ad:
         1c:79:88:cd:ba:e8:ba:e1:7f:f9:d3:8a:9e:fe:40:a2:8f:3f:
         61:e2:eb:73:c9:81:4a:1a:d9:03:a4:79:ab:66:51:bc:17:ba:
         cb:d1:e1:4d:bb:ae:2c:55:21:68:07:9f:a1:ee:02:40:91:ba:
         04:1b:82:27:04:c2:75:d0:c4:50:e4:9a:62:82:cc:eb:de:4b:
         e4:c9:f9:90:7a:79:c4:11:49:f5:d4:65:3e:73:bf:11:8a:b2:
         d7:2d:e0:04:15:10:3b:06:03:d2:6a:5d:59:20:55:db:e4:69:
         b6:5f:08:8b:98:a3:fb:5f:5c:d9:36:69:99:d9:17:02:ff:ee:
         8e:69:fb:09:d3:dd:01:e4:ba:b1:15:5b:29:5a:43:d3:8b:cd:
         44:a0:f3:ca:98:96:65:39:8e:28:ca:58:0f:ad:31:74:1b:8d:
         63:a6:c8:18:4d:7c:72:a1:00:70:7e:97:e8:f7:8e:7f:e3:23:
         7e:c9:d2:53:44:3f:b6:43:ad:06:4f:94:ee:9d:d0:f7:cc:9e:
         89:c3:5e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:34:38 2025 by rpki-client