Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa
File:                     a6654227-7e4a-384e-aaf7-165cd7a07f42.roa (raw, json)
Hash identifier:          tXMie6evzA38oSvuWkkcOZ/8mrdmnzsvXQmBEBuopt4=
Subject key identifier:   89:D8:56:9C:EB:16:2A:A7:04:B8:DC:2F:1B:77:6F:2E:39:48:43:37
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F43285848EF616C48B00123309155C700
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     8014
IP address blocks:        204.236.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:6c:48:b0:01:23:30:91:55:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=347d7342-bc2b-4641-8927-d6f2c53b60e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:28:72:63:61:0e:85:02:e6:d8:3d:c4:ae:
                    95:0c:10:c1:da:72:b3:f0:3a:04:53:24:7d:a9:d8:
                    fa:0a:6e:b5:64:6f:67:05:3f:47:4b:55:f1:86:a3:
                    33:70:6e:5c:7e:0d:7e:3e:6a:3d:c9:5f:84:f2:57:
                    98:d7:ad:c4:6d:5c:59:91:c7:9d:44:be:81:9c:65:
                    10:29:b2:90:e7:86:ad:04:d7:6c:bd:31:19:c0:d2:
                    ce:b5:a0:d8:93:17:34:cb:89:93:69:5c:a0:fa:fc:
                    6c:df:e9:ad:75:e3:36:e1:b7:3f:ee:49:9f:5c:82:
                    54:93:34:69:b2:b6:9b:5f:2c:72:fa:28:cc:5e:1c:
                    ca:61:29:79:78:6d:9c:20:68:33:a3:27:9f:df:0d:
                    1e:9a:3b:02:10:81:b7:a3:df:8f:b3:fd:83:05:5a:
                    78:64:1f:e1:69:af:b1:9b:0d:bc:5a:e0:f9:0e:10:
                    f6:ec:92:4f:7d:ea:c4:ce:80:ec:66:b9:1f:61:c3:
                    ef:30:bc:30:8d:54:1d:08:32:48:d8:4f:46:bb:95:
                    9e:ad:6b:c0:ed:e6:84:93:8d:b2:fb:58:a3:a1:18:
                    78:75:eb:74:86:e2:ae:2a:a0:70:66:fd:7b:0a:33:
                    d4:f4:66:93:2e:48:d6:6a:c4:cb:f6:65:b9:77:34:
                    97:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D8:56:9C:EB:16:2A:A7:04:B8:DC:2F:1B:77:6F:2E:39:48:43:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:7e:77:24:ea:a3:5d:66:6b:85:3a:bf:95:7b:2e:04:44:50:
         af:c1:07:f9:9d:ef:54:c5:c6:45:c5:6e:08:68:94:38:f2:b7:
         a0:7a:b1:19:78:5e:5c:1c:74:d0:95:5b:be:9f:8c:73:67:40:
         67:48:1e:da:ad:43:16:8d:00:47:2f:16:48:90:f3:77:a9:7a:
         c7:c4:27:2d:58:48:3d:b3:0b:88:dc:59:4c:ef:34:5f:bb:2e:
         16:23:21:cd:7a:a8:86:2d:95:5e:c3:75:0f:f2:2c:01:d0:76:
         e8:15:34:06:5c:a3:a5:f6:ac:12:d3:ad:0a:e6:c7:69:c5:47:
         37:11:5b:ea:78:20:2b:35:d1:a0:de:50:25:fb:8a:39:f4:d8:
         cb:10:0d:3b:76:c3:d4:49:68:3a:61:ce:da:c9:d1:05:0d:73:
         19:1b:9b:0f:f8:41:e8:be:7e:df:c0:3f:a3:d3:39:0f:a2:3d:
         c5:e6:3c:3c:16:34:0e:99:c6:56:c4:39:9f:ba:2e:f7:9d:0c:
         f6:12:66:7e:63:6c:7c:e5:a1:bd:ca:4f:da:64:e7:ef:2e:51:
         2f:9f:70:5f:3e:6c:8b:6e:4b:58:51:b3:ff:85:e6:3f:ed:e2:
         4f:a1:a4:fd:90:45:a5:55:ef:b8:ee:5d:19:72:e9:3e:bf:bd:
         7a:e1:0e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:54:01 2025 by rpki-client