Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/45883aa6-1837-3ac3-8882-bf4a10cfd03d.roa
File:                     45883aa6-1837-3ac3-8882-bf4a10cfd03d.roa (raw, json)
Hash identifier:          A68+sU4VaN0qIuKJWvjHXWr+eGy1s6/AZsQTt2dZgHQ=
Subject key identifier:   FD:B5:AB:8B:A5:63:A5:D2:F0:35:A8:0E:E1:E5:3D:7C:D3:10:C5:BE
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A16DBF1408C2E1DC391E00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/45883aa6-1837-3ac3-8882-bf4a10cfd03d.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     6559
IP address blocks:        204.84.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6d:bf:14:08:c2:e1:dc:39:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=9dab81cd-9b15-493d-bf1c-7ad23291128f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:7e:7e:05:50:88:4f:a2:58:17:34:72:1d:
                    1b:5a:f9:86:82:ad:24:57:c8:04:93:06:fb:5d:38:
                    ff:ff:00:b1:01:5a:c1:e2:59:f7:03:40:1c:d0:48:
                    76:42:68:6d:13:63:ba:58:f4:cb:67:9a:be:d9:4f:
                    f0:92:4a:4b:ed:ed:63:04:69:84:27:bf:48:f7:8d:
                    b0:2b:fc:37:7d:53:2e:33:f8:a4:d2:40:2b:85:74:
                    13:76:3b:fa:ff:0f:00:43:3c:43:8f:cc:32:d6:52:
                    f2:ed:8d:06:1c:48:b1:6c:b4:e5:1c:3a:54:ae:0d:
                    1b:cf:70:32:41:ab:20:ab:5e:be:52:17:45:9b:b3:
                    a5:db:45:54:96:f5:11:76:29:26:35:ad:f5:38:5a:
                    c4:7a:57:4c:6b:f1:31:f6:7f:d0:e4:34:f7:81:83:
                    92:a0:9a:63:00:b1:46:b2:e0:80:7c:c6:6c:da:81:
                    f3:86:b0:1c:ed:c1:27:ef:b1:ab:e3:ec:35:b6:72:
                    16:69:18:77:46:52:72:6f:cf:a6:e6:ae:73:43:d4:
                    c6:86:49:25:e6:2a:4a:37:04:84:0e:c9:34:87:23:
                    b6:33:35:7c:01:53:be:01:cb:7c:0e:50:39:71:6c:
                    82:a1:d0:2b:b2:98:a4:16:dd:30:5c:57:d5:e5:f4:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B5:AB:8B:A5:63:A5:D2:F0:35:A8:0E:E1:E5:3D:7C:D3:10:C5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/45883aa6-1837-3ac3-8882-bf4a10cfd03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:07:ef:25:d4:7c:a1:bf:bf:af:eb:de:8f:84:d7:c7:cf:62:
         f4:33:15:60:0f:11:b6:57:d1:5b:c5:79:e1:8f:30:6b:d4:92:
         9e:f2:2f:4e:3f:f2:e6:2b:2e:17:f0:6f:bf:5b:29:14:8d:25:
         b0:47:ce:a0:69:eb:4d:bc:ff:ad:9a:ec:eb:2f:ac:88:9a:eb:
         fe:49:a9:9a:09:bb:b7:98:dd:cc:06:b4:7b:8e:c7:b9:d6:d0:
         05:f5:82:a1:5d:12:4a:d9:73:b8:e8:49:1b:f3:85:76:a3:ae:
         60:db:64:d0:b3:cd:fa:64:ec:f3:e6:8e:e6:5e:64:3c:32:8f:
         12:ed:f6:a0:49:e1:4f:e3:ad:75:b7:28:40:8d:76:56:6e:96:
         2e:0a:87:8c:9b:07:cd:e5:d7:b7:58:99:ae:16:a4:31:90:51:
         bf:fd:ec:d8:21:69:96:72:c2:75:83:48:a3:96:39:f7:47:77:
         ab:f1:3a:3a:23:ed:6e:08:48:7c:66:8a:48:68:58:3b:92:07:
         bd:92:66:31:8a:cd:0b:d3:cc:64:9d:94:b6:5b:37:6f:35:c2:
         60:35:ac:6f:70:a0:dd:99:c0:e8:ba:2c:a1:40:6d:33:cf:f1:
         4e:c6:ce:49:ac:91:2e:fe:00:41:27:8c:8f:b0:9c:2d:b9:f4:
         5d:51:03:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:31:05 2025 by rpki-client