Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c0395c6e-6d7c-3b32-bd6d-67a5684d8957.roa
File:                     c0395c6e-6d7c-3b32-bd6d-67a5684d8957.roa (raw, json)
Hash identifier:          r4hheYBUHMaPHBWEQUCU/LuLSzS1RD2SV+cj4PMP8M4=
Subject key identifier:   6C:AA:A8:B9:C5:93:40:BC:0D:3A:4F:4E:5F:CD:15:79:2F:4F:C4:EC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D715F69BFC2E54BC8E00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c0395c6e-6d7c-3b32-bd6d-67a5684d8957.roa
Signing time:             Fri 30 May 2025 19:11:42 +0000
ROA not before:           Fri 30 May 2025 19:11:42 +0000
ROA not after:            Thu 28 Aug 2025 19:11:42 +0000
asID:                     36850
IP address blocks:        204.84.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d7:15:f6:9b:fc:2e:54:bc:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:42 2025 GMT
            Not After : Aug 28 19:11:42 2025 GMT
        Subject: CN=2d87da39-fdf5-4f19-bf80-61a6b1ed742b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:b4:e2:ba:6a:89:5c:c3:7a:2f:1b:6d:94:
                    cb:8e:b1:a7:80:21:e8:65:69:ee:eb:7b:5a:b1:43:
                    43:13:6b:2c:1d:b9:3d:ad:02:92:aa:c3:89:cc:d8:
                    ff:e3:e1:ea:3b:ba:8c:ae:4a:66:d0:90:b3:dc:40:
                    76:62:44:fe:62:c3:df:13:ef:e1:30:93:51:c6:19:
                    56:4d:2a:97:47:ea:cd:ef:27:9d:a7:58:45:6e:ce:
                    b9:ec:bc:cc:60:52:fd:e6:66:73:57:64:8b:e3:b6:
                    ec:61:9c:80:0c:73:1b:63:16:10:b8:c4:91:b6:7f:
                    d5:36:0d:cb:0d:a7:8d:77:f5:7f:b7:72:1a:56:45:
                    c8:cc:7d:d4:7a:2f:55:0a:78:05:6d:a2:4d:55:52:
                    57:1b:8d:c1:29:65:0d:4a:58:d1:73:04:b1:6e:76:
                    b1:f0:ee:c8:63:03:87:f1:81:8e:44:ef:97:bd:70:
                    98:85:3a:50:2f:c3:26:ce:f1:c5:27:44:49:88:20:
                    0f:cc:91:c2:da:58:e8:ad:57:7a:26:35:00:48:13:
                    3d:70:ec:05:6f:59:bb:46:65:23:7f:fa:76:ec:65:
                    02:fe:eb:9a:fe:0e:b4:f1:f8:21:0f:ea:ec:67:f1:
                    43:67:dd:18:47:a9:31:1e:73:eb:11:79:e4:2a:d7:
                    c5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AA:A8:B9:C5:93:40:BC:0D:3A:4F:4E:5F:CD:15:79:2F:4F:C4:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c0395c6e-6d7c-3b32-bd6d-67a5684d8957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e3:93:9c:60:75:ab:63:45:13:f6:31:9b:20:8d:32:bb:ce:
         37:09:4a:8b:6e:1e:71:13:13:41:cd:66:bb:5e:93:6d:59:f2:
         b5:73:c1:11:0c:22:56:a3:ba:ad:b0:6e:42:9f:93:e5:93:13:
         fd:2c:f3:90:43:41:78:10:05:1c:cd:05:1e:c3:b9:40:5d:b5:
         44:56:21:bb:52:b5:fd:60:b8:b6:a1:eb:6e:0b:c3:90:18:ef:
         b7:7f:8c:f8:8d:0c:68:91:1c:2e:78:45:e9:bf:b8:33:89:d2:
         f4:d8:f7:9a:a8:71:60:14:36:bb:75:3a:67:ad:19:63:13:ad:
         dc:b5:84:da:fd:0b:78:ab:18:57:9d:9b:99:98:ef:8f:b3:3b:
         8d:11:57:5c:3e:57:e6:fb:29:df:70:6f:28:09:9d:c1:c6:34:
         7b:67:5d:2e:93:b5:8c:4f:bb:45:c5:95:22:a6:f6:02:5e:25:
         0f:bc:70:ad:a5:b2:3f:9d:15:d7:c2:71:ce:63:da:cb:e5:95:
         65:d5:c7:d3:ab:6d:9b:43:3d:12:12:26:d7:ad:5e:cf:28:22:
         54:8a:35:11:53:19:23:63:87:3b:e2:d7:ec:22:e0:bf:5a:21:
         e5:3f:c5:49:af:d8:5c:32:4d:de:a3:1a:a9:b5:19:70:5c:9d:
         fd:3b:36:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:26:28 2025 by rpki-client