Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/5f2b0662-d08f-3487-9208-023f24fe6e83.roa
File:                     5f2b0662-d08f-3487-9208-023f24fe6e83.roa (raw, json)
Hash identifier:          iohPLxW2yehLWa9WGURlCvUwCcyceOOm4Q3VVosCnL8=
Subject key identifier:   D0:0A:E7:06:7A:07:CF:CE:10:34:E6:B5:98:46:70:81:47:71:72:BC
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584A9A80F15A0FF221CF7B8A057C
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/5f2b0662-d08f-3487-9208-023f24fe6e83.roa
Signing time:             Tue 22 Jul 2025 13:55:03 +0000
ROA not before:           Tue 22 Jul 2025 13:55:03 +0000
ROA not after:            Mon 20 Oct 2025 13:55:03 +0000
asID:                     401307
IP address blocks:        204.25.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:80:f1:5a:0f:f2:21:cf:7b:8a:05:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Jul 22 13:55:03 2025 GMT
            Not After : Oct 20 13:55:03 2025 GMT
        Subject: CN=75bd280e-f9b0-4b25-88b1-e4247378fb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:25:0e:d0:e2:17:12:9c:78:50:dd:36:dc:
                    f4:09:c5:c5:bb:83:f1:91:3c:8d:d8:bb:aa:92:ab:
                    dd:39:3c:a2:d9:35:a2:71:0d:e8:5b:e3:07:fc:9d:
                    ae:97:df:61:71:4d:aa:4d:8b:31:e8:32:ed:28:28:
                    0d:80:20:e7:ba:5b:6c:8f:a8:9e:b6:f0:1b:6a:38:
                    92:4b:ae:81:5f:62:56:d3:a7:6c:c1:06:38:b7:78:
                    a9:0b:b0:44:9c:fd:e9:80:d2:1a:72:e7:b8:38:ca:
                    e1:dc:85:5f:b4:cd:c3:e6:0c:4c:84:43:97:87:f6:
                    12:33:f1:19:58:55:c3:5d:cb:e1:a3:bc:74:21:81:
                    a0:8b:02:52:72:23:48:d3:63:c6:76:5a:2d:e8:94:
                    a2:69:37:35:49:5a:a2:01:27:6e:ad:87:4b:8d:58:
                    9e:f7:e2:e7:6a:61:2f:5a:70:fe:f4:3f:13:ed:f4:
                    e8:95:9c:88:0a:a4:ab:9f:c6:5f:e5:24:c6:80:fb:
                    c9:12:39:7c:75:c1:41:1b:ce:92:7a:7d:9d:dd:4b:
                    50:ea:eb:5b:b4:25:5b:c5:d4:dd:8f:5b:8c:bd:8f:
                    bb:f2:14:b4:fd:29:a3:11:b0:c4:64:23:3e:5b:f0:
                    2f:6a:35:67:d2:08:b3:13:89:44:f3:8d:ad:45:db:
                    9b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0A:E7:06:7A:07:CF:CE:10:34:E6:B5:98:46:70:81:47:71:72:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/5f2b0662-d08f-3487-9208-023f24fe6e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:46:ee:ee:46:50:a5:87:92:f1:52:ee:7f:4e:a3:60:e5:5b:
         70:30:6c:bb:15:52:f5:ad:70:51:61:fc:48:5d:f1:b3:0a:81:
         ce:50:1e:f4:7b:31:a3:18:42:61:3f:38:a5:f6:bb:2a:b7:f3:
         21:5a:4c:ae:72:15:89:f1:80:26:3d:bf:87:5c:f4:1a:b5:69:
         79:f4:ca:81:86:9c:62:ba:31:ac:3b:36:60:d0:59:ea:e6:2e:
         2d:a0:c5:a1:8b:2d:98:43:e1:71:40:b1:1b:97:9d:8d:05:cd:
         3f:00:f6:eb:06:de:ad:9c:67:52:a9:a8:4b:e5:f9:d9:90:bb:
         bd:da:08:9b:28:37:24:25:36:74:6f:5f:8b:dc:51:4d:ad:37:
         9b:2e:e5:20:85:36:6b:0d:d8:51:db:90:fa:c1:26:4f:ef:c2:
         15:72:82:25:1c:10:97:f6:87:4b:e1:cd:2f:3d:25:99:8f:c4:
         7d:61:62:60:e3:96:95:23:99:a1:7f:a8:62:e5:ad:97:30:39:
         de:e5:3e:38:9a:1f:10:f3:33:0b:26:97:d1:2c:08:0b:c4:38:
         50:e2:76:2b:bb:65:29:27:c5:a5:d8:1b:65:c4:60:91:4f:50:
         af:e3:c8:a4:7b:c5:90:95:04:30:4b:21:91:0b:c6:a2:b4:da:
         13:a0:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:50:55 2025 by rpki-client