Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa
File:                     00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa (raw, json)
Hash identifier:          n2JUAYdPsK23+GwtH0092EskQerHcB2vUCqJo4qTDSc=
Subject key identifier:   4B:25:2E:0E:8D:1A:2F:1D:22:50:24:FD:67:0C:7B:F7:6F:1C:D3:B8
Certificate issuer:       /CN=6be678b8-74cc-4a67-8700-5a07f5c20f62
Certificate serial:       010D0C9F4328584A6DBB40E3A4C5E77783D02380
Authority key identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     17120
IP address blocks:        204.81.0.0/16 maxlen: 18
                          204.82.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:40:e3:a4:c5:e7:77:83:d0:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6be678b8-74cc-4a67-8700-5a07f5c20f62
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=de9c9af6-1e7b-4ea9-b50d-9112eea42882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:81:c8:1e:e3:d0:ed:9e:91:b9:c4:cf:0f:
                    a9:19:31:5e:85:c5:c6:68:e9:8b:e6:54:0a:c1:8e:
                    69:59:84:46:e9:d5:8d:d2:9a:52:ea:f8:7b:91:84:
                    26:eb:0f:80:2f:d5:ab:65:09:8a:a3:dc:17:a6:45:
                    60:fc:26:3f:90:72:30:10:12:07:78:c9:a4:c1:89:
                    67:5d:de:73:2f:45:75:d0:82:d9:b4:28:5a:55:05:
                    fa:7a:4c:c9:8a:de:22:9b:b6:9f:00:51:09:2a:fc:
                    47:ef:f8:6a:10:f5:f1:a3:1b:9f:3e:f6:29:4a:34:
                    6a:45:20:34:39:af:1f:b9:e6:c5:50:9b:06:99:8a:
                    fe:a5:aa:31:c3:be:82:4e:de:73:c4:1f:84:dd:b6:
                    77:18:71:76:e0:9a:cd:ce:81:ea:1b:72:7e:53:c2:
                    fc:00:8d:3e:76:4c:25:90:f4:a1:21:5d:ab:ae:79:
                    a9:5c:0a:1a:0b:d3:b5:a1:6f:db:5e:90:11:51:63:
                    0e:89:4c:04:fb:c4:b1:40:d2:92:1d:e1:44:c8:bf:
                    14:aa:c3:da:97:33:0f:36:05:9c:b0:c1:f6:6a:ca:
                    e3:1d:6c:af:51:ea:00:49:90:3f:cf:7d:ce:1e:a2:
                    17:6b:74:45:e9:81:1a:f9:33:12:62:b9:55:94:90:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:25:2E:0E:8D:1A:2F:1D:22:50:24:FD:67:0C:7B:F7:6F:1C:D3:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.crl

            X509v3 Authority Key Identifier:
                keyid:07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.81.0.0-204.82.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cc:91:67:89:9c:64:c7:3b:65:bf:14:5a:ad:fb:d8:7f:89:
         78:56:c1:5c:5e:97:13:67:d9:06:3f:be:95:b5:f7:6f:08:ac:
         b2:ce:e7:1a:17:9b:1f:f7:d4:af:88:e4:ca:3f:88:c7:65:78:
         f0:bd:a8:46:e8:3a:71:05:d9:02:7c:c5:8e:7e:9f:aa:2a:58:
         34:ce:db:a2:8a:c9:a7:45:3f:b9:3b:e4:f4:9b:ea:bf:b0:b7:
         1f:b7:28:be:7e:2d:7b:30:9d:06:e6:0a:98:be:61:aa:33:32:
         c6:af:d2:f7:8c:5b:9d:c9:8b:3d:14:95:13:27:76:61:d8:fb:
         22:50:ca:6e:f7:f9:5f:26:5a:91:e5:5f:4f:01:29:bb:61:cc:
         b8:6b:78:d9:24:6e:80:ec:ed:05:41:7f:78:f1:a9:7e:ed:f5:
         d8:09:73:6b:b1:e2:1c:ca:71:78:06:7b:96:9c:8b:37:06:e4:
         bd:73:30:0c:70:31:bb:93:f1:e9:11:f9:4a:9c:ee:8a:5a:0e:
         60:fe:d0:fc:5b:1c:25:d0:62:5d:33:70:11:ad:41:6d:27:fe:
         17:bd:80:de:dd:69:a3:b9:aa:a3:c6:9f:b3:ec:2f:af:cd:1a:
         fa:c9:e6:7f:27:f4:6d:89:c5:58:3a:53:04:51:7d:ca:f4:44:
         ff:aa:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:38:01 2025 by rpki-client