Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/84b20794-3284-3086-926d-0dd5aa911054.roa
File:                     84b20794-3284-3086-926d-0dd5aa911054.roa (raw, json)
Hash identifier:          Wcuqq/vf7LgXqFYoRuurHrQePmIarDtVLEpTyzcqp+A=
Subject key identifier:   D9:43:AD:FB:36:43:BA:25:74:E3:09:D4:2E:D7:BE:B6:8B:A6:E1:09
Certificate issuer:       /CN=ec62ef22-a391-4252-8d71-15d41c1c5aa8
Certificate serial:       010D0C9F4328584A268AB3D7346A829969ED2C80
Authority key identifier: 8A:80:1E:27:02:12:93:1C:E6:DC:FF:60:B2:DB:F9:5D:38:1F:C3:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/84b20794-3284-3086-926d-0dd5aa911054.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     3379
IP address blocks:        204.147.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b3:d7:34:6a:82:99:69:ed:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec62ef22-a391-4252-8d71-15d41c1c5aa8
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=e1e64fcb-71f0-4b04-b2c8-1e042bfedd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:64:a9:80:30:64:c1:64:a7:67:0e:d3:7b:
                    3a:7f:b8:1b:d5:c2:28:56:c0:b9:77:b9:b9:47:12:
                    aa:3d:41:b1:1e:a6:fa:34:7d:9d:0d:c8:20:af:50:
                    17:0b:d4:f8:35:e7:03:59:53:46:17:65:ca:87:23:
                    40:c1:df:1a:d3:87:b8:a2:f1:3b:99:37:d9:e2:67:
                    ec:8c:2c:b7:db:f5:1f:75:eb:ec:4c:93:09:f4:b8:
                    3f:07:ae:09:b5:68:39:8d:a2:fc:a2:26:5b:e5:52:
                    0c:d9:63:c1:88:12:94:33:49:76:51:65:84:e4:43:
                    21:58:ce:a2:5c:5e:eb:dd:08:55:11:37:42:77:1b:
                    3c:82:45:e3:bf:e9:13:9c:4d:a7:0d:a6:7f:ff:be:
                    73:72:34:e8:49:4d:bb:25:04:9c:5f:ba:01:b3:f8:
                    1e:77:99:e9:83:73:81:48:59:62:28:d5:6a:3b:4c:
                    00:a8:1e:d7:5e:20:29:dd:66:ac:54:ee:d1:fb:86:
                    4f:f9:22:b2:cf:ed:31:4c:89:c2:c2:ce:31:a8:fb:
                    5c:65:a8:0c:3b:49:64:48:5f:8c:9e:68:0f:72:e5:
                    d4:e8:24:df:4a:24:c3:17:d3:f9:ec:cc:c5:30:eb:
                    f2:bb:b1:7c:64:c3:f1:c5:44:ed:1d:af:fa:0c:4b:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:AD:FB:36:43:BA:25:74:E3:09:D4:2E:D7:BE:B6:8B:A6:E1:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/84b20794-3284-3086-926d-0dd5aa911054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.crl

            X509v3 Authority Key Identifier:
                keyid:8A:80:1E:27:02:12:93:1C:E6:DC:FF:60:B2:DB:F9:5D:38:1F:C3:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.147.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:5e:d8:f8:f3:7f:db:67:87:fd:eb:13:0c:b7:ba:9b:1c:34:
         68:7a:3d:08:67:42:49:56:0c:99:e4:46:44:8a:08:02:5c:a0:
         20:cb:1c:28:5f:ef:45:c2:72:9c:58:b7:b0:8b:39:09:32:cf:
         8f:7b:82:59:f1:22:68:3d:36:f9:d7:a8:a5:60:0f:c6:e6:c6:
         83:8c:ce:2f:7c:df:7b:0d:db:a8:d9:55:d9:b8:e2:ec:96:9a:
         a6:9e:9d:29:62:eb:ab:be:62:be:4b:07:d3:5f:84:fe:ab:15:
         d3:38:fb:89:5f:d0:f5:93:2e:a1:de:15:1a:4a:32:98:c6:d2:
         0c:ba:5a:ab:43:de:05:2e:cd:88:8b:02:00:23:88:39:4e:3b:
         9a:6d:9c:b3:c3:d0:a2:86:09:ca:df:1a:4c:9d:ba:ee:f1:36:
         2e:29:1d:b4:ef:ed:a7:45:44:63:1e:8f:1e:0e:9f:22:22:1b:
         f3:73:9b:81:08:2d:41:00:0a:1c:b7:4f:16:10:58:46:c4:97:
         bd:4b:d3:43:a8:85:d4:15:55:f7:18:9f:fa:56:da:3f:34:5b:
         b0:3a:48:3d:6c:0a:ab:40:e5:74:4a:54:aa:98:1f:4f:44:68:
         5f:5c:0c:53:d5:c1:3d:71:92:b6:b4:0a:7c:9b:00:c9:7c:7f:
         b7:be:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:23:56 2025 by rpki-client