Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/84b03aef-7bb1-3890-995b-cc08844b0ff3.roa
File:                     84b03aef-7bb1-3890-995b-cc08844b0ff3.roa (raw, json)
Hash identifier:          cyK1SqqhXhAOJP5WLnsuL34KcWTPbvF9Rmb+iJcmteM=
Subject key identifier:   16:7B:93:8A:B4:2F:C4:8A:02:37:1F:A7:DE:73:C2:DD:D4:86:CC:B8
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584A62909F331D5D0AA3BF037B80
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/84b03aef-7bb1-3890-995b-cc08844b0ff3.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     33548
IP address blocks:        162.251.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9f:33:1d:5d:0a:a3:bf:03:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=f7c7f24e-cc1a-4434-87ba-f9f1cd4412ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:b0:03:f4:07:be:2b:8e:5e:42:07:c4:6e:
                    85:2a:3b:02:51:b8:a8:0f:3b:01:f6:15:ca:b3:07:
                    35:42:bd:65:0c:d4:fb:89:01:d2:14:35:ee:de:ba:
                    3b:11:6e:f5:06:1d:36:ca:8c:18:93:e1:b2:bd:1c:
                    8e:69:43:48:d4:98:0f:c4:00:c1:00:88:da:1c:b3:
                    b0:83:09:d4:94:6d:9b:07:67:c7:43:aa:11:f3:22:
                    54:5f:2e:63:4c:46:4a:0c:2d:13:22:47:7a:fd:6e:
                    ca:02:23:00:4f:b4:9f:9f:35:a1:d8:c3:59:9d:ef:
                    6e:79:a2:0d:93:5c:9c:dc:60:26:8c:01:59:8a:b9:
                    04:62:37:41:e8:1b:bd:1b:72:1f:79:fe:0d:a9:72:
                    f9:e8:b0:9f:b5:71:01:54:22:ce:2b:00:0b:79:4c:
                    f4:e3:09:9e:43:a5:48:77:15:84:b8:f8:a4:c4:29:
                    65:ac:fc:bb:ee:56:8e:1b:c6:3c:46:aa:be:e9:e5:
                    9b:bf:e8:bd:a1:f2:b8:6d:2a:ac:1a:7d:24:4c:25:
                    f7:3f:91:42:2d:14:4b:06:17:85:fc:1c:61:93:da:
                    c0:85:14:86:d2:b8:fb:c3:90:a0:2e:39:28:60:81:
                    a7:19:db:44:65:75:e7:ff:c5:91:d7:ba:0b:4b:7b:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7B:93:8A:B4:2F:C4:8A:02:37:1F:A7:DE:73:C2:DD:D4:86:CC:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/84b03aef-7bb1-3890-995b-cc08844b0ff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:39:35:4e:a4:44:78:ff:91:b9:e3:8f:c9:67:88:86:4a:84:
         ee:8e:fd:00:8c:e1:2b:1b:1c:b8:50:95:0c:98:fc:eb:04:db:
         54:03:23:bd:c6:8c:48:55:a9:d3:28:59:c0:c8:bb:f8:b1:15:
         08:84:d6:da:17:65:f8:c7:2f:fa:80:e1:5f:2f:47:2e:55:4e:
         a2:68:1d:eb:db:91:73:95:3d:c1:88:76:e7:0d:d9:3a:86:90:
         1a:cd:9d:41:94:aa:0a:76:0d:6c:2f:ac:1e:e9:f2:1c:ad:0c:
         17:cd:7d:17:ac:4d:86:2d:2e:99:19:83:1c:7d:bb:77:70:c5:
         e6:1d:a0:27:13:fa:93:3a:45:cf:15:48:77:32:95:97:24:37:
         77:9c:8f:f3:12:50:ca:3f:1b:8d:b3:e6:23:7a:c5:66:3b:ec:
         db:3a:3c:10:0b:86:13:97:b9:cf:8a:5f:9a:6d:7f:32:fc:43:
         e5:46:71:85:e8:c3:5e:7f:3c:6f:c8:cb:a7:92:2f:16:82:3b:
         07:36:18:95:74:40:f4:5b:dc:09:57:0b:29:6f:80:8c:ac:c5:
         55:a3:04:8b:f5:ba:6b:7c:c2:b6:04:08:c1:be:c5:4c:b1:6c:
         27:83:6d:fb:98:6b:19:33:9f:92:27:32:29:ed:af:5d:2c:a0:
         a7:44:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:56:33 2025 by rpki-client