Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9225ea59-5e6c-3b25-9e83-5174f418d9c5.roa
File:                     9225ea59-5e6c-3b25-9e83-5174f418d9c5.roa (raw, json)
Hash identifier:          O8ZE7T95J0J1aXe2VW5g4jwTkjrSzQggWzE9uGtTzUw=
Subject key identifier:   AE:95:1F:F5:3B:18:A1:29:59:91:77:9A:D7:E2:C7:45:F7:FE:7F:3F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D75E9B070A14847A0C80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9225ea59-5e6c-3b25-9e83-5174f418d9c5.roa
Signing time:             Fri 30 May 2025 19:11:42 +0000
ROA not before:           Fri 30 May 2025 19:11:42 +0000
ROA not after:            Thu 28 Aug 2025 19:11:42 +0000
asID:                     81
IP address blocks:        204.85.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d7:5e:9b:07:0a:14:84:7a:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:42 2025 GMT
            Not After : Aug 28 19:11:42 2025 GMT
        Subject: CN=c1c94fe6-4e07-496f-8558-62ce3b14f117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:ca:0a:cb:2d:b2:a3:21:80:48:63:bf:ad:
                    bc:67:22:03:f3:3b:86:8e:61:d0:dd:92:37:c6:e2:
                    e6:c0:76:28:52:3b:a8:cf:f5:14:8d:78:7b:ee:c0:
                    c5:e5:34:a3:f8:7d:0f:5b:7d:97:c1:dc:d1:cd:f1:
                    04:8a:9d:f1:18:c8:35:fb:ba:6d:9e:44:f8:87:6f:
                    31:be:ee:25:34:63:41:2d:0f:43:96:09:61:e8:34:
                    82:39:ca:0f:31:02:98:01:00:02:92:32:11:2e:14:
                    29:67:58:58:fc:64:95:d4:86:aa:58:95:54:8b:e5:
                    8c:97:ac:e8:64:d8:fb:c4:60:73:03:02:71:12:b4:
                    ec:a3:c4:3c:0e:21:13:ef:45:f3:be:f0:a1:31:70:
                    07:66:46:4e:01:87:8e:bf:93:f5:bc:e0:79:97:9a:
                    8b:68:67:63:db:1b:63:b6:d8:ce:24:25:38:1a:59:
                    d8:a0:d5:1b:55:1f:33:2b:8b:c1:af:69:1b:b7:3e:
                    18:62:7f:b5:13:c1:da:3c:8e:96:dd:26:86:11:f3:
                    86:40:a3:25:34:5e:8d:02:1c:be:f1:81:fd:03:3e:
                    c4:ae:0d:86:77:72:be:2a:3b:69:cb:19:eb:de:74:
                    b5:6e:62:11:33:66:1b:9a:49:56:aa:05:1d:76:8a:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:95:1F:F5:3B:18:A1:29:59:91:77:9A:D7:E2:C7:45:F7:FE:7F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9225ea59-5e6c-3b25-9e83-5174f418d9c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:66:52:ee:f7:f7:05:12:dc:e2:eb:a4:91:80:a7:86:26:5d:
         aa:e7:05:65:34:94:b0:05:34:06:a7:d1:26:c8:86:cc:75:7c:
         6a:36:a7:ee:08:f7:cb:3b:63:dd:b3:60:31:bf:fb:0d:f1:6a:
         40:cd:ab:1d:a8:5f:89:67:a0:ea:bd:be:d7:67:3d:40:8d:21:
         09:1e:25:1d:08:52:7f:72:bd:6e:8b:e7:56:1c:9e:86:9d:53:
         4d:21:5d:d7:ff:96:56:4d:07:74:49:0e:37:30:6d:48:92:ef:
         9d:c7:6d:36:d6:04:e0:2e:5c:ba:c1:3d:cd:c5:38:5b:64:c2:
         97:90:40:a8:e5:b4:8f:29:38:6f:72:25:21:6e:b0:52:86:3a:
         83:a9:b9:bc:9b:98:ac:48:b0:c6:2f:54:c5:45:ce:eb:53:00:
         d8:a8:51:74:7f:7e:f5:5e:1d:b6:5c:59:ba:1a:2f:ec:cb:ed:
         06:42:e6:0a:47:a2:ff:e2:a8:68:24:76:24:3c:bd:70:b3:43:
         59:3a:33:1e:d4:49:3f:5f:c5:97:e4:14:30:16:bf:1a:6f:c6:
         59:cf:4b:c6:91:b9:c3:71:97:8a:b2:f0:4a:c2:86:3d:4d:8a:
         ca:6a:9a:82:29:06:f1:a8:b4:10:fe:5f:75:85:e6:38:c7:86:
         03:12:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:52:32 2025 by rpki-client