Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa
File:                     684afc08-241d-3133-9300-b05e5c02b68f.roa (raw, json)
Hash identifier:          2xVtT52aHH18X7rhROWgxIeougTUliXnQcj4HZiVjNc=
Subject key identifier:   2C:D4:94:02:7B:C8:09:15:E4:8E:CC:D8:67:D9:86:CF:99:9E:83:5B
Certificate issuer:       /CN=15b30dd1-216d-4b82-87ee-44becb2d20c7
Certificate serial:       010D0C9F4328584A7085F50EF99715278DB2E400
Authority key identifier: 4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     32852
IP address blocks:        204.10.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f5:0e:f9:97:15:27:8d:b2:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b30dd1-216d-4b82-87ee-44becb2d20c7
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=990aee4c-e5bc-481a-8433-63909711bbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:22:52:d4:25:7a:89:2f:c6:99:99:16:35:
                    99:cc:9b:15:f5:4c:43:48:3b:2f:65:de:52:03:52:
                    9e:f1:12:6f:15:e5:95:89:7f:08:4e:23:38:35:61:
                    70:63:b8:4f:14:b2:2f:04:6e:17:97:db:5b:4b:33:
                    61:a4:ee:39:dc:6e:46:8e:e0:c0:c8:7d:3f:aa:e8:
                    c9:cd:32:b6:f5:a1:36:0e:fb:6b:13:58:56:0f:4b:
                    8d:7b:a4:6c:3c:e1:05:1e:08:35:10:4c:9f:2b:0b:
                    06:79:cd:c3:7d:80:73:3f:98:ab:53:c4:4b:2c:0a:
                    5d:0c:46:c5:3d:40:56:90:0e:b6:f4:2f:f4:2b:e3:
                    a1:ec:8a:95:7c:78:ba:e8:df:83:0e:01:36:4f:73:
                    aa:e2:a5:c8:01:f7:3e:f2:9a:af:d5:89:a0:60:57:
                    61:a2:f0:10:d7:6c:fe:b6:38:78:4c:56:0c:77:24:
                    67:48:cf:7f:28:61:30:0c:74:62:bc:4c:76:98:35:
                    c2:ea:e2:37:70:21:ae:8b:40:1a:1f:bb:bb:9e:48:
                    fc:d4:e2:74:f4:a2:44:33:5c:69:66:fb:77:d3:3b:
                    27:2e:e5:6b:27:68:6a:b2:9d:d1:eb:29:05:14:ba:
                    2e:95:3c:d6:6d:14:24:8b:c9:43:94:8d:05:68:cc:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D4:94:02:7B:C8:09:15:E4:8E:CC:D8:67:D9:86:CF:99:9E:83:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl

            X509v3 Authority Key Identifier:
                keyid:4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:61:a6:f4:b2:cb:8d:ec:a6:4e:d5:53:e4:40:b7:d9:91:
         f0:41:b6:89:36:29:df:5f:95:e7:09:86:98:63:db:63:45:fe:
         79:62:8e:f4:d3:bd:aa:7b:71:b6:31:9d:ac:fb:1d:19:24:93:
         6b:19:1f:3b:a7:d4:47:85:9f:18:ef:a3:2a:5b:c6:6e:3d:a3:
         83:ba:a3:6d:c4:b9:93:de:4f:33:d9:87:b2:c8:cd:50:fa:6c:
         46:96:5b:1d:82:cd:50:1e:cb:cf:0f:73:f9:48:75:01:73:c8:
         9c:e9:1b:6b:65:52:99:b8:ae:48:94:c8:1b:16:37:b6:7d:99:
         d3:d2:00:d9:53:0f:49:7a:6e:ed:35:4a:c6:f4:cc:1f:90:61:
         f3:06:90:c4:31:86:1b:dd:e0:cb:02:1c:85:60:07:4f:f6:e0:
         cc:b8:83:8c:b4:ed:07:37:9c:d9:15:14:a2:e8:74:b1:ce:4b:
         5a:8f:14:d0:e6:e7:5a:51:26:4e:0c:b6:ad:fe:84:ca:6a:b5:
         f2:ad:1e:1c:3c:4e:ac:bc:83:cb:e1:ae:3d:39:8b:da:ca:9e:
         9b:f5:7d:0c:51:b0:a8:0b:9e:56:8a:2f:05:a9:e6:1b:64:b7:
         e8:ba:56:8c:1f:98:9c:4f:78:42:f5:1d:e6:2f:e5:06:4b:16:
         fa:b0:10:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:51:18 2025 by rpki-client