Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/65187024-0050-3611-9fcf-cfbc1faf15a1.roa
File:                     65187024-0050-3611-9fcf-cfbc1faf15a1.roa (raw, json)
Hash identifier:          0ZmGoNvbCUr1HT/4MvRX3TWcfK042MQskUgyUcfswho=
Subject key identifier:   C2:7A:3C:D5:A6:C0:70:77:4E:C5:B5:65:A9:FB:5B:23:81:E0:7D:E7
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584A89A612A48987F59A7BFDB800
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/65187024-0050-3611-9fcf-cfbc1faf15a1.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     393474
IP address blocks:        204.25.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:12:a4:89:87:f5:9a:7b:fd:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=d6091930-32a3-487e-8f76-1d17cb6fe145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:d6:15:b4:6a:a1:93:05:71:29:57:83:3e:
                    fe:44:ba:da:12:06:41:71:13:b0:d9:95:7b:3f:68:
                    f2:01:59:f5:d4:b5:fe:16:21:d9:6e:c3:39:c5:82:
                    dd:cd:d4:81:80:35:b1:9d:6f:2d:b3:94:de:71:ec:
                    1a:0b:eb:28:4f:fe:24:e3:14:7c:9d:30:f3:6c:6e:
                    98:41:ad:c1:8e:e2:6f:a0:d9:1b:12:07:7d:3b:7f:
                    e5:15:a5:d6:59:0e:4c:af:5d:b3:9a:17:55:5d:f8:
                    6c:c4:b6:db:bc:ec:a9:61:f4:1d:e7:77:1c:8e:1f:
                    02:44:c5:11:12:6f:d9:8b:87:3d:db:bc:57:72:a3:
                    ce:70:58:39:d4:c4:12:92:57:25:c1:70:7d:9a:5f:
                    8a:8f:f5:29:ca:b1:7b:b5:05:11:58:29:4d:b9:bb:
                    4e:f0:3c:f9:97:9d:34:64:2e:72:f3:56:46:6b:ba:
                    d9:d9:c1:1f:24:76:74:da:16:ac:c4:6f:2d:63:7b:
                    e9:d4:24:db:1b:a7:d0:77:45:39:2d:9b:40:49:ca:
                    71:02:60:76:0a:06:58:b5:19:c1:7f:5a:de:fa:82:
                    e1:6b:84:72:3e:3d:31:f2:10:44:4d:81:82:16:a5:
                    0b:91:17:00:a6:ee:4e:d1:a5:f5:94:43:cd:d5:5b:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7A:3C:D5:A6:C0:70:77:4E:C5:B5:65:A9:FB:5B:23:81:E0:7D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/65187024-0050-3611-9fcf-cfbc1faf15a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:74:d8:3a:bf:df:23:0d:52:97:14:53:ce:bc:58:43:b4:0a:
         06:9f:9b:7f:83:bc:bf:67:01:67:01:d7:07:47:e8:17:ac:f3:
         52:89:34:ca:df:bd:d0:8a:d2:f3:44:c4:a1:9f:7a:d9:6c:41:
         ca:af:93:4d:9a:05:04:23:3d:53:f0:1c:6f:14:16:e4:9e:18:
         be:6f:22:fc:14:3e:73:60:83:8f:05:31:b6:5e:37:eb:12:73:
         c2:83:7d:ff:08:c7:bd:28:5b:4f:01:3f:50:0e:fc:17:86:64:
         9e:70:f7:e4:16:a9:45:03:db:69:01:68:23:86:10:1c:87:0f:
         b9:42:2a:35:c3:16:1c:3d:69:1c:7a:bd:d8:e6:05:b4:b1:a1:
         fa:f0:61:0b:00:6d:86:40:ae:0c:bc:d8:55:62:32:13:2e:ee:
         e8:d1:1b:64:c8:89:b3:db:e9:fd:1f:9e:7f:35:0d:30:1c:80:
         53:e7:27:a7:5f:23:db:bf:45:f6:07:3b:a9:89:90:cb:2a:d6:
         ea:66:c5:9f:be:b5:e8:01:fd:bd:f9:a9:52:8e:81:3d:d8:62:
         7e:40:dc:7b:79:5a:a8:26:b4:8e:79:3d:2b:0d:ef:ed:3b:bc:
         7b:f0:59:29:4c:1f:fa:6e:b2:c1:ea:0b:b6:2e:b1:19:60:be:
         ac:6d:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:32 2025 by rpki-client