Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/ee7692de-187f-3724-9e9b-8ab972c9ea9b.roa
File:                     ee7692de-187f-3724-9e9b-8ab972c9ea9b.roa (raw, json)
Hash identifier:          d0q4yrTpeUocKaZMQ1GnW6ZV2pq/cWX57xzsU8QVn6c=
Subject key identifier:   78:FC:05:98:CE:4E:8F:F0:07:48:2E:72:7F:A6:33:00:F2:CB:EE:63
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285849A61F3E3C8371D0190DBF2940
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/ee7692de-187f-3724-9e9b-8ab972c9ea9b.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     401307
IP address blocks:        204.25.192.0/23 maxlen: 24
                          204.25.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3e:3c:83:71:d0:19:0d:bf:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=bea7b7ff-70ef-4b3f-bbbe-1d43caae90a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:9c:5b:46:ba:48:96:ea:01:be:72:10:d9:
                    05:cb:28:32:d6:fd:7c:50:5f:6d:ba:58:9f:47:c6:
                    db:f9:88:62:7a:57:01:8e:35:53:24:67:ef:ce:32:
                    7e:9e:12:e4:1b:cd:bf:04:e3:62:0a:e4:60:f1:25:
                    79:a2:23:77:e2:2c:1b:f6:b4:c3:b7:e0:8a:ad:c2:
                    aa:f8:58:e8:46:ce:91:5d:f8:9c:17:9c:f8:1c:90:
                    c9:3e:0d:e7:6d:0a:10:a5:9f:a7:c8:35:6a:78:64:
                    6c:52:13:29:08:bc:9a:01:a8:c5:d0:3c:18:fe:29:
                    7f:8e:6d:c9:d5:af:12:93:00:cf:c0:1b:5c:71:0a:
                    c8:95:d2:e0:b9:f1:3e:23:c2:1f:61:0c:b2:6b:06:
                    99:53:0b:85:3f:a8:e8:ba:5c:87:c7:87:fd:87:10:
                    97:7e:92:f4:1e:d1:f9:e9:37:0a:08:4c:78:ef:3b:
                    26:12:df:5d:65:7f:9a:7d:6a:d3:20:23:5d:c2:fc:
                    af:a8:8b:89:23:24:30:fc:5c:1b:91:c2:c6:65:d3:
                    8b:61:7a:bd:50:76:0e:7f:57:2b:2c:88:31:2c:13:
                    ad:5a:0b:43:91:d1:88:1b:83:47:df:4d:b8:2f:02:
                    fb:50:85:86:9d:a9:10:d3:89:f4:9f:d4:5a:9c:b7:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FC:05:98:CE:4E:8F:F0:07:48:2E:72:7F:A6:33:00:F2:CB:EE:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/ee7692de-187f-3724-9e9b-8ab972c9ea9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:63:2c:18:30:6c:f2:0b:28:a1:fb:db:80:85:34:00:44:8a:
         47:e0:b0:23:b6:9a:26:10:ae:c8:d6:a9:33:d9:77:88:88:de:
         e9:ad:13:a8:a5:69:75:5b:7e:56:46:74:fc:44:00:c6:8c:a3:
         03:95:8d:7f:0e:ed:30:36:ec:12:84:2d:1b:e0:6f:69:97:9b:
         0e:b5:db:00:bb:65:b9:6c:b7:28:9d:28:68:78:40:3e:52:3a:
         68:a0:6f:bd:d7:86:34:7a:ea:68:1d:cc:80:6d:6a:4e:3e:ba:
         60:f5:89:b4:3f:3b:5b:da:27:4c:c2:d2:b5:4b:89:e6:8b:96:
         07:b4:00:6a:24:8d:c8:09:b0:30:79:a0:e5:f6:d0:b5:09:0c:
         1b:4c:6b:bb:df:88:71:65:97:15:9e:1e:fd:43:71:57:94:c7:
         c6:38:0b:89:b9:64:b1:5d:b9:08:c7:d0:f9:53:b0:47:b2:96:
         15:17:75:20:60:fa:3e:8a:0e:17:b7:a0:4a:6f:5a:8c:40:6c:
         bb:22:4d:62:6c:33:d5:48:3b:f8:c6:44:15:85:db:3b:01:d5:
         62:f5:5e:80:17:82:43:b2:d0:86:46:4b:c3:5b:63:f3:21:49:
         85:92:ab:48:f9:f8:92:a6:fc:e2:90:47:65:98:fd:62:c1:85:
         d9:3a:4b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:16:26 2025 by rpki-client