Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa
File:                     f7b3e1e4-f7e6-365d-b936-0927d756844d.roa (raw, json)
Hash identifier:          GC8BkyKPq+xWABJA3tUgyYw/w0xLx7LTKIkepaYBUZU=
Subject key identifier:   EC:58:81:BF:0E:5B:F7:09:91:0F:5A:31:B9:D4:AE:67:A3:43:82:72
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584A6C55E25E45A0CAC48F9CC7C0
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     13768
IP address blocks:        192.154.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e2:5e:45:a0:ca:c4:8f:9c:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=929e1d45-8bfe-42e8-bbef-2bbf8e1c68b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:00:9b:a0:3b:84:48:7b:1e:7d:be:9d:5a:70:
                    79:3c:c6:1d:cf:d5:ed:cf:22:c1:e6:16:55:55:77:
                    55:c0:58:95:9a:98:b0:20:f2:52:f6:e6:91:96:3a:
                    e6:bd:80:5f:cc:b6:4c:e7:2b:57:0c:f3:32:bb:e0:
                    31:9f:24:33:3f:d5:0e:49:a7:db:ad:99:9c:4c:69:
                    11:75:a4:ff:34:7c:e4:c6:2e:d1:5d:17:b2:c2:13:
                    c7:96:f2:d0:c1:67:73:c4:00:3c:61:45:2c:46:5c:
                    57:70:27:8a:48:e6:05:f6:b8:e0:e3:21:59:dc:39:
                    02:fc:6b:46:69:ab:41:01:1c:1f:36:43:a0:38:17:
                    e2:00:d8:d0:ba:39:e2:3a:87:a8:18:0d:23:39:4c:
                    06:f8:bd:21:74:88:68:b5:3a:0c:b9:36:0d:29:a9:
                    6b:8c:a3:ef:05:1b:10:2c:39:11:a3:f7:65:f6:25:
                    8b:dc:6e:13:15:d9:f1:5b:34:87:87:0c:3f:b1:a8:
                    a6:6f:2d:dc:a2:1f:10:1b:5a:b0:20:9d:0b:0b:a1:
                    76:6e:fb:72:74:8f:04:83:47:e5:c6:6d:d3:66:e1:
                    43:cd:19:02:a7:fc:d5:55:d3:25:f5:d3:57:e3:8b:
                    2f:f9:e2:5b:2e:38:a6:3f:0d:09:c9:54:44:80:da:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:58:81:BF:0E:5B:F7:09:91:0F:5A:31:B9:D4:AE:67:A3:43:82:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0a:a1:9e:c8:d8:89:cc:a2:d6:82:08:48:c1:1d:49:3f:53:
         57:fc:26:12:1a:f2:c6:38:ed:47:d4:68:5d:24:3f:e6:8a:6e:
         54:90:fb:6e:0f:e1:cc:8e:e2:f1:bc:58:79:27:64:14:5f:59:
         c4:7a:e2:5a:29:81:17:5c:dd:1c:ae:a1:e7:64:36:a3:f0:61:
         da:35:91:85:af:88:35:fc:d2:3e:c2:b8:4b:36:df:a4:2c:c4:
         dd:db:ee:8c:92:e8:b2:7b:0e:83:33:e8:01:d1:05:b9:3d:f5:
         86:c9:1c:5a:2b:3b:36:4e:a8:f6:f8:da:70:48:db:41:d6:a4:
         53:fa:ad:07:5d:55:1c:9d:b9:f9:54:0e:02:b4:8e:e9:98:29:
         d4:a7:d1:5b:31:08:65:3b:f4:54:2d:36:90:a8:6c:ea:e5:09:
         15:bd:52:53:06:63:19:14:75:56:4c:ff:4b:b3:dd:a7:a9:a6:
         22:ea:25:a6:97:ee:39:ae:9f:af:a9:d2:13:01:d7:6e:b1:f8:
         7f:42:15:f7:12:19:a8:e6:49:6e:8b:05:b5:c5:d5:19:c7:f2:
         f5:4c:27:1c:9b:56:71:5d:c3:87:4b:8f:a6:02:9e:6d:af:20:
         3c:52:1e:30:f3:f6:88:33:73:75:74:60:01:de:2c:3f:3b:06:
         94:86:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 14:00:22 2025 by rpki-client