Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/25641917-7067-3b19-8b48-e46d3b875d9c.roa
File:                     25641917-7067-3b19-8b48-e46d3b875d9c.roa (raw, json)
Hash identifier:          EpKfE22rBNfFVv9i7XyHwPheBCyq21nngTV6WQ1wzQ0=
Subject key identifier:   78:88:5C:A8:AC:B4:8C:22:0D:A4:C2:59:A8:7B:85:48:C5:80:F0:E9
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F432858493C091E9492EBD93B929B1170
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/25641917-7067-3b19-8b48-e46d3b875d9c.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     399844
IP address blocks:        204.83.1.0/24 maxlen: 24
                          204.83.3.0/24 maxlen: 24
                          204.83.6.0/24 maxlen: 24
                          204.83.37.0/24 maxlen: 24
                          204.83.81.0/24 maxlen: 24
                          204.83.100.0/24 maxlen: 24
                          204.83.150.0/24 maxlen: 24
                          204.83.152.0/24 maxlen: 24
                          204.83.176.0/24 maxlen: 24
                          204.83.189.0/24 maxlen: 24
                          204.83.211.0/24 maxlen: 24
                          204.83.240.0/24 maxlen: 24
                          204.83.241.0/24 maxlen: 24
                          207.195.13.0/24 maxlen: 24
                          207.195.14.0/24 maxlen: 24
                          207.195.44.0/24 maxlen: 24
                          207.195.51.0/24 maxlen: 24
                          207.195.79.0/24 maxlen: 24
                          207.195.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:1e:94:92:eb:d9:3b:92:9b:11:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=620ecfc4-af63-4f6c-add5-3026c2ea0d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:d2:bf:54:22:81:bb:4f:6e:81:5d:54:d5:
                    ef:ae:2e:bc:6a:38:86:59:a3:d7:d7:71:04:1e:44:
                    70:f7:a2:c9:7a:01:0d:a3:c1:bc:5b:76:cd:39:ca:
                    e8:da:16:3e:a8:ba:d4:30:46:2a:20:8f:d2:b6:70:
                    a8:75:6f:9a:66:ea:9f:b8:26:28:b4:cb:c5:cf:8c:
                    36:ce:fc:ca:3d:40:fe:19:db:17:d6:25:b1:d9:d2:
                    f5:64:dd:47:40:fb:36:7e:a2:61:9b:08:cc:9f:e9:
                    56:e9:28:9b:c2:4e:9a:ab:f6:d5:e4:58:e4:9d:fa:
                    9f:c0:57:30:da:aa:3e:23:48:bd:c2:69:49:f0:70:
                    80:92:08:98:e4:d6:8b:28:c6:c0:ac:cc:ce:7d:52:
                    17:97:af:f2:6c:ae:9e:62:41:bd:22:59:76:37:22:
                    46:cb:dc:b6:4f:f7:fd:2f:53:ee:f4:a6:6f:8d:dc:
                    9b:0c:10:3c:52:54:6b:c5:50:96:4f:ec:7f:df:87:
                    c5:50:1d:fe:73:0d:30:f4:ba:1a:47:27:69:d9:a4:
                    7b:d7:c4:58:1c:06:c4:79:82:8b:d1:6e:57:b8:91:
                    0e:61:34:00:aa:62:03:95:e6:73:18:ad:be:d8:14:
                    e4:ba:41:04:d1:e6:37:ab:06:54:12:d2:e3:5e:9c:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:88:5C:A8:AC:B4:8C:22:0D:A4:C2:59:A8:7B:85:48:C5:80:F0:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/25641917-7067-3b19-8b48-e46d3b875d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.1.0/24
                  204.83.3.0/24
                  204.83.6.0/24
                  204.83.37.0/24
                  204.83.81.0/24
                  204.83.100.0/24
                  204.83.150.0/24
                  204.83.152.0/24
                  204.83.176.0/24
                  204.83.189.0/24
                  204.83.211.0/24
                  204.83.240.0/23
                  207.195.13.0-207.195.14.255
                  207.195.44.0/24
                  207.195.51.0/24
                  207.195.79.0-207.195.80.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:39:8d:6d:9a:a9:7a:8e:2c:86:ca:c1:02:72:88:20:1d:06:
         b9:2f:05:81:c5:2d:3e:7e:85:69:54:1d:bd:ae:6e:0c:07:4b:
         e6:69:02:61:c3:40:86:fd:7e:dd:7b:e6:d2:04:9a:ac:5b:91:
         a4:eb:9d:40:dd:ea:c3:ff:df:eb:85:0e:63:91:85:a2:0e:0f:
         6b:4e:e6:41:5b:da:63:06:08:90:48:71:95:02:3c:c5:58:53:
         90:59:1d:6a:5e:09:8d:3d:c5:29:db:e8:82:3e:e9:00:e9:d3:
         b2:4e:ab:f0:7c:93:8b:4e:cf:97:de:73:ac:9d:52:a3:e2:e3:
         69:be:ef:d0:ec:2c:8d:bf:a0:eb:18:d9:b9:ec:cb:7b:21:8e:
         44:16:31:d2:9d:58:07:3a:a0:0c:6f:40:22:60:3b:24:6a:0f:
         b7:2a:6d:a0:78:2c:54:45:bc:b1:12:ae:03:59:f8:6b:e2:73:
         a0:35:57:af:25:e4:9e:72:4f:25:14:c1:45:1b:c6:79:cb:16:
         c3:71:98:a3:2f:ea:cd:02:b6:62:69:32:b7:3d:97:07:30:38:
         29:b4:b3:2c:3e:41:76:5c:15:4b:ab:24:ca:b4:81:13:fd:ef:
         f8:eb:3f:af:8e:ea:cd:10:4d:d5:24:e7:ff:c8:5a:c4:70:e8:
         b0:c4:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:11:11 2025 by rpki-client