Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/e60c34b9-98b6-3580-a50f-f981b1acc7f7.roa
File:                     e60c34b9-98b6-3580-a50f-f981b1acc7f7.roa (raw, json)
Hash identifier:          U9PvRrv0HrslnugLPV36Gt45DEjI9ckd2l82aAuluLM=
Subject key identifier:   CB:83:98:2A:BF:26:D1:15:40:DC:73:0E:45:B2:50:54:AF:1C:7F:F7
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F43285849244E6825F5677362B00E1680
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/e60c34b9-98b6-3580-a50f-f981b1acc7f7.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     2572
IP address blocks:        204.185.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:68:25:f5:67:73:62:b0:0e:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=ada85e2b-825c-40c9-b65e-7a39c3ee63cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:a4:9c:51:06:b0:d3:b9:61:d5:20:54:a3:
                    99:00:c6:40:a8:69:c1:52:66:6f:45:81:b9:b1:47:
                    62:5a:d0:fe:ad:64:cb:10:89:7d:14:a3:49:9b:52:
                    eb:19:b1:23:a0:cd:ae:3f:21:92:b1:c1:29:d9:e0:
                    ed:ee:b2:56:f9:91:5c:23:97:92:bc:ec:3b:33:59:
                    37:96:77:9d:4b:97:f8:cc:af:13:43:35:56:2a:b6:
                    21:15:b6:d8:0f:4a:10:59:5d:ec:ef:f4:69:e4:25:
                    e0:cd:c5:3d:e6:23:0d:6e:52:05:2f:49:47:d4:69:
                    c3:4b:5b:b4:43:02:df:74:01:4c:51:19:c4:9a:9b:
                    dd:da:3a:c2:38:58:10:d9:57:91:52:07:37:46:ee:
                    e4:86:83:da:ab:a9:0f:3f:a6:a0:11:2e:42:00:d9:
                    c8:d1:1a:bb:25:f9:d8:8f:ac:a6:0a:4a:0f:92:cf:
                    c1:8d:db:50:b2:d7:fd:11:34:00:32:ce:d6:de:f1:
                    0b:30:08:1e:72:9f:23:f3:74:d5:30:d1:b5:ef:25:
                    45:c2:d2:d0:dd:c1:bc:2f:33:23:44:e9:2d:f6:41:
                    a7:10:f6:5d:0c:7c:80:ae:2e:6c:6b:a6:ca:2c:ae:
                    d1:35:33:40:24:e8:52:5f:a8:7b:8c:3c:22:33:70:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:83:98:2A:BF:26:D1:15:40:DC:73:0E:45:B2:50:54:AF:1C:7F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/e60c34b9-98b6-3580-a50f-f981b1acc7f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:62:fc:a5:6a:91:aa:74:f2:a1:0b:ce:e5:64:43:54:a9:cf:
         24:78:ac:84:67:ca:20:ef:75:29:9c:6f:d4:fc:34:f2:89:e9:
         d5:fc:73:87:58:19:66:70:d6:d6:43:15:3e:f0:ed:0b:c4:76:
         df:34:2e:81:9f:7e:50:b7:b2:3e:db:6f:63:59:ee:58:19:6f:
         b1:2e:5f:c1:28:9f:ef:94:5a:79:ab:88:b7:32:09:5d:ce:d0:
         11:cc:f2:6c:d9:d9:67:05:90:a9:42:a3:59:9d:77:fc:cf:d9:
         8c:bc:4e:39:54:64:60:92:7a:02:5e:7b:53:ca:88:c6:71:4b:
         fc:f1:dc:3a:cc:a6:f2:9d:fe:0c:48:d6:f4:e1:1a:03:b2:3a:
         ce:cb:26:09:14:46:58:9c:ef:34:d5:cf:d3:5a:8b:50:28:6a:
         67:f2:aa:1d:18:07:cf:5b:ac:8e:9a:3f:45:bf:d4:db:74:a5:
         57:20:81:ac:65:9b:7c:44:56:62:40:27:ab:d1:d5:a6:2b:e9:
         78:6c:ae:f4:a4:7c:1e:f6:6e:e1:7f:5d:ed:a5:b5:04:54:48:
         98:a3:e1:2c:39:0b:8d:b5:fe:9f:09:b6:b0:a7:ad:a4:87:8a:
         8d:3f:8e:e8:5e:0e:20:0a:e2:12:46:77:23:14:00:e6:ac:f0:
         3b:a2:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:56:14 2025 by rpki-client