Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa
File:                     0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa (raw, json)
Hash identifier:          VgDKeS1fBROu9/fdqWTDlIHNmtz9sfVTD4MQC5dmzjc=
Subject key identifier:   5A:F7:90:71:7B:76:51:7B:63:27:C5:5D:69:97:97:4E:A0:AB:7B:98
Certificate issuer:       /CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
Certificate serial:       010D0C9F432858495EEEEF71D2326FFC5EB41840
Authority key identifier: 63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     400562
IP address blocks:        204.152.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:ef:71:d2:32:6f:fc:5e:b4:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=7c4a0bf0-01ed-4922-b26e-9e246ef186af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:2b:ec:0d:73:33:29:67:c9:dd:0b:d0:2c:
                    30:0a:62:33:ea:8a:d9:40:fe:88:fe:1f:03:4b:15:
                    9e:24:2e:f0:11:56:90:9d:b0:0e:f1:b1:2d:f1:7f:
                    50:7f:a0:a9:cf:6b:61:6d:b6:87:c8:c0:4e:26:14:
                    b3:39:8d:02:02:6e:af:fb:65:b2:99:3c:74:69:80:
                    81:7e:a0:8a:7d:39:48:12:f7:5e:3e:bf:3d:5f:67:
                    56:74:d6:cb:93:51:74:c0:71:88:51:5e:10:f5:b0:
                    51:af:48:86:89:87:b3:30:ec:e9:23:e2:46:53:1e:
                    c2:aa:d4:fd:2c:46:05:1c:a3:c6:6b:14:f5:2d:a0:
                    ec:ed:09:7b:be:1b:c5:f6:01:74:35:a8:4a:4c:da:
                    e9:29:16:e2:b0:67:b9:ee:2e:ec:c6:d1:c2:34:e1:
                    f7:37:0a:2d:43:2c:02:a2:28:4f:ad:95:5a:df:fe:
                    02:be:2c:2f:a4:af:bb:f2:19:67:be:ca:39:33:c7:
                    88:be:4e:99:1b:c6:91:24:c2:82:a3:a5:4c:00:59:
                    72:d0:55:a1:47:c8:f6:26:d5:c6:5d:a0:45:69:04:
                    ad:c2:a3:a7:8a:0b:81:4d:71:37:f9:eb:1c:dc:07:
                    16:ef:9a:61:cf:26:47:98:5f:ea:5c:dc:0a:f9:75:
                    40:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F7:90:71:7B:76:51:7B:63:27:C5:5D:69:97:97:4E:A0:AB:7B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.crl

            X509v3 Authority Key Identifier:
                keyid:63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:c4:73:fe:b5:a4:2c:74:a2:08:69:54:5f:69:5f:68:f4:
         36:6e:19:54:32:45:3e:10:63:ee:c6:96:ac:da:9b:b5:8b:00:
         1e:02:02:4d:1f:5d:04:84:62:16:f2:a4:2c:99:c4:a4:f6:31:
         a6:65:6d:af:e0:7a:19:4c:a3:44:19:f4:d1:f6:4c:a5:d5:8c:
         d6:9e:38:37:1c:13:51:c0:14:80:fb:e4:5d:a1:c5:ff:2e:23:
         e4:eb:46:87:73:0f:f3:61:1f:4e:46:ed:07:9e:ab:9e:92:b1:
         f9:39:f1:40:31:a9:a1:48:e0:62:ef:58:47:53:0c:aa:62:fa:
         2a:d1:73:84:bf:ff:46:f2:b7:ed:5d:a0:ea:4e:1e:44:0b:81:
         2d:e0:53:03:4c:59:78:60:f7:df:98:a8:72:e1:53:b0:d2:4f:
         04:5f:bd:11:6f:2c:ef:93:68:9c:92:46:44:5b:fc:46:3c:26:
         fc:b5:77:70:7a:e6:de:c6:64:57:de:09:e7:8e:b2:58:d3:24:
         0c:2d:ba:91:fe:ae:b8:55:d8:1b:cf:29:c0:e1:1d:93:e7:91:
         16:46:e7:e3:4c:39:81:fb:93:9e:63:69:e6:27:08:38:65:f5:
         08:76:ec:a8:1e:4f:c6:72:4c:af:b6:98:e2:c8:01:e7:de:7d:
         fb:f6:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:24 2025 by rpki-client