Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/61161be4-4822-3ad6-8b9a-f381c93e316a.roa
File:                     61161be4-4822-3ad6-8b9a-f381c93e316a.roa (raw, json)
Hash identifier:          P1dUF7ud7tcXfwWlVKDLgzPgMurNhJE+sciq+7VoDJw=
Subject key identifier:   2D:CA:40:A2:89:4C:54:6C:65:BB:DA:0D:81:C1:98:65:77:43:2C:43
Certificate issuer:       /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
Certificate serial:       010D0C9F4328584A3E45A42236E6131DB781DF00
Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/61161be4-4822-3ad6-8b9a-f381c93e316a.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16276
IP address blocks:        15.204.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a4:22:36:e6:13:1d:b7:81:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=97ffef60-beb1-4d57-b61f-a15ea7a09e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:4b:5f:b8:74:d3:6e:08:5c:64:e3:7c:ab:
                    0b:84:41:81:b2:e0:0e:95:0c:7f:63:74:8b:25:db:
                    34:8f:1c:73:d8:c9:d1:74:cc:a5:2f:48:9b:bb:b5:
                    76:3e:22:49:dd:aa:4a:60:a7:19:77:ce:61:84:1f:
                    a0:42:6d:0e:20:f2:c4:b4:e0:ca:06:67:da:09:5e:
                    85:c1:2b:40:6b:e2:cf:65:d5:44:aa:27:e8:f9:c0:
                    43:d2:53:e7:ec:27:a6:d8:db:f7:22:b2:86:a1:a5:
                    04:26:c8:6f:a2:0b:56:06:66:2e:ad:e0:3f:ab:36:
                    83:69:20:19:ed:90:9e:9c:28:6c:7d:16:2e:4a:98:
                    09:11:fb:f9:21:97:91:28:f1:67:ec:89:ac:71:9e:
                    0d:6f:15:d2:39:a2:b1:a3:4a:d7:94:2d:f4:c8:a8:
                    3d:61:e2:b3:93:11:47:51:b7:99:c0:44:3d:7e:45:
                    ed:ce:02:a0:bf:70:e9:5c:b9:bf:d6:b2:44:dd:f1:
                    29:97:dc:82:ca:bd:71:80:4a:af:60:aa:9c:e0:01:
                    cc:7a:e4:5c:5a:c8:8d:b5:ea:0a:e0:07:69:5f:95:
                    80:f6:eb:f5:ab:8b:7b:b7:c1:20:98:01:51:a3:29:
                    fa:0d:ab:fb:99:2c:ba:16:14:a9:8d:c3:3d:05:ac:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CA:40:A2:89:4C:54:6C:65:BB:DA:0D:81:C1:98:65:77:43:2C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/61161be4-4822-3ad6-8b9a-f381c93e316a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl

            X509v3 Authority Key Identifier:
                keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.204.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:dc:31:c0:98:42:19:47:47:44:05:1a:5d:68:c9:60:5c:
         11:10:c2:68:bb:ac:cc:a9:93:22:cc:db:de:5b:15:5e:72:1b:
         78:7a:32:26:3d:0f:d8:91:0c:dd:aa:37:cb:e2:9f:4a:94:14:
         de:42:86:df:03:00:10:8a:58:20:22:22:d1:27:60:c6:9e:5b:
         a8:df:ff:2c:28:cf:f0:78:ad:5b:76:e5:e6:02:09:fe:f9:ec:
         ab:c4:35:6f:89:36:b8:f1:0d:6e:b7:a8:12:57:0d:e0:b1:3d:
         ce:3e:41:a2:1c:5a:5b:46:9f:71:1b:ef:5a:e9:00:3a:24:80:
         17:41:2a:59:29:53:43:50:c1:64:f5:a5:8a:95:d6:e7:43:8e:
         48:1f:2b:2e:b0:13:e9:36:56:38:1e:b7:15:72:68:51:50:74:
         ae:01:f1:aa:d3:a4:bc:65:d7:11:fb:42:98:06:28:3c:00:c8:
         b5:7b:0b:f7:2c:d8:1e:47:1c:be:16:21:3c:c1:86:ce:81:1c:
         06:fb:89:5e:fa:56:e7:72:2f:30:89:87:06:a2:46:92:21:d9:
         4e:e3:b1:32:a8:54:70:c8:49:82:25:41:24:86:3d:13:6f:09:
         80:3c:d2:86:60:29:5d:5a:30:81:bc:b4:a0:35:f9:a1:cf:59:
         4d:f3:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 11:05:27 2025 by rpki-client