Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7510a13a-70eb-3389-909c-aa4e19e2962d.roa
File:                     7510a13a-70eb-3389-909c-aa4e19e2962d.roa (raw, json)
Hash identifier:          siuZrbcCcRUNVXnzBZuNGu7hhxb0rWx56my4bJTcdg8=
Subject key identifier:   1D:75:2A:CF:DC:44:9C:A6:A1:80:CB:91:03:B5:3C:30:6A:82:5E:A8
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584925B3B2A39A2F5F90A25C0500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7510a13a-70eb-3389-909c-aa4e19e2962d.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     13335
IP address blocks:        204.195.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:b2:a3:9a:2f:5f:90:a2:5c:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=155d2de5-6853-4836-b904-8fc710ed12d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:76:d7:35:17:d7:0c:f8:37:13:9c:72:2e:
                    c2:5f:f4:b3:cd:dc:7f:ab:37:f6:61:77:ae:d8:e8:
                    ea:45:24:0e:a3:e4:b7:ea:7b:b4:a9:82:57:08:e8:
                    6c:6b:3a:ed:42:79:02:31:60:d1:2e:66:4a:e1:8d:
                    df:3c:9b:a3:c1:80:6b:09:51:d7:5c:7b:81:fa:58:
                    7d:76:39:7b:83:a8:d5:86:c2:97:35:15:1c:28:0d:
                    52:21:5d:66:8c:63:4b:a3:14:7b:aa:8c:a1:83:e2:
                    c5:7a:d2:6a:58:a2:07:3f:7c:f4:3e:b5:fb:bd:07:
                    01:12:61:94:6e:89:f9:5a:c6:87:73:2c:7e:ff:8a:
                    1e:3d:e3:e1:d3:af:40:74:8c:c9:30:7b:68:a4:f1:
                    91:23:fa:0e:d0:ee:7d:a8:cc:1a:94:8e:1b:7a:63:
                    42:2e:be:df:bf:3e:5c:3a:2c:46:d0:22:66:e8:ac:
                    43:44:ee:e5:d0:d1:87:c8:dd:84:7a:f3:84:ff:20:
                    68:eb:5f:97:88:9e:c0:f7:93:3b:fe:1c:98:6c:b0:
                    53:87:8a:0f:9d:3c:52:3b:d3:d8:e1:fa:65:6d:ba:
                    ac:98:89:b3:5a:31:c9:f6:29:38:ab:c0:91:66:9b:
                    58:a8:73:02:4f:85:aa:7f:f3:27:60:dd:f7:56:3e:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:75:2A:CF:DC:44:9C:A6:A1:80:CB:91:03:B5:3C:30:6A:82:5E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7510a13a-70eb-3389-909c-aa4e19e2962d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:de:85:44:38:dc:28:98:73:72:a9:71:34:01:06:02:75:71:
         8b:61:7e:fd:b3:8e:36:fb:69:ac:91:76:85:07:88:2e:8e:ce:
         9d:8a:3b:17:8d:49:bf:12:65:15:b8:1a:10:ae:02:ab:60:d8:
         f6:bb:ee:27:18:8b:7f:00:1c:6a:cd:13:74:20:2d:cd:11:22:
         d9:24:b3:17:f5:0a:a0:66:34:f4:7c:91:63:54:1c:f5:73:82:
         bb:71:37:59:8b:cd:2c:13:44:49:0d:b4:1d:c4:b4:74:f8:b8:
         55:6f:c3:0f:19:68:8c:ec:9f:06:39:42:b1:ce:16:70:fe:f9:
         09:c9:af:be:28:c2:b8:f5:a2:6f:9e:53:0c:61:ca:5f:b9:82:
         fd:1e:e7:c6:93:3b:0f:e8:3a:78:a1:fc:9f:e5:d6:81:02:05:
         d9:7c:a1:a9:d0:9b:c2:4d:66:25:eb:db:1a:fb:83:4f:cd:c2:
         9e:b6:57:69:65:c5:4c:36:74:ef:40:52:07:b4:f6:fc:60:bb:
         a1:72:a6:7d:2d:bb:b1:18:6b:c5:ef:24:f2:5e:ba:98:81:ce:
         98:26:ce:ac:82:49:50:8d:19:e6:11:f3:21:a5:71:b0:db:04:
         b3:e3:63:2f:46:77:c7:dd:af:f0:4c:23:60:f9:0e:74:f1:cb:
         4f:23:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:10 2025 by rpki-client