Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/c25f1929-747c-3492-a9a5-26748fc5258f.roa
File:                     c25f1929-747c-3492-a9a5-26748fc5258f.roa (raw, json)
Hash identifier:          WzVf3nPOZB+B1Xi/XLYyh2jGit2kQTFzE5WElXV/clM=
Subject key identifier:   06:D2:18:BC:F3:3A:EA:89:71:E8:84:DD:D1:04:F2:3D:49:21:1A:91
Certificate issuer:       /CN=adbe894e-fc78-4889-85f3-6253e78715e5
Certificate serial:       010D0C9F43285849AA4F67E18AB9457E42778340
Authority key identifier: B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/c25f1929-747c-3492-a9a5-26748fc5258f.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     62744
IP address blocks:        204.8.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:67:e1:8a:b9:45:7e:42:77:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbe894e-fc78-4889-85f3-6253e78715e5
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=4b2f47d8-0221-44e4-ba2f-304d54169eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:56:0f:0b:1d:97:ef:c1:33:e4:4e:7e:68:8e:
                    ce:04:4f:5c:ae:ec:ec:5a:9d:0f:b8:c1:47:62:b1:
                    db:bc:c6:e3:7b:96:01:b3:83:70:77:3e:9b:1a:b1:
                    ec:8a:d9:a0:5f:1c:c1:8e:b7:aa:59:23:38:50:08:
                    97:8b:e2:94:df:04:5a:27:47:5e:a5:42:67:f6:30:
                    e2:09:b4:e1:6b:d8:fc:3f:16:55:d9:23:c4:e4:0a:
                    90:83:10:bc:0d:1a:48:e5:9a:9f:09:2e:8d:00:f7:
                    83:2b:ab:1f:8c:34:da:4f:70:3a:3b:80:80:b9:b2:
                    35:01:a5:fb:ef:22:8c:36:ea:43:0e:17:06:48:85:
                    52:0f:45:99:85:f7:b9:dd:d5:ad:13:81:c6:7e:54:
                    ab:b2:47:35:33:32:74:2a:d3:53:28:ba:04:a3:e2:
                    27:e7:02:94:dd:d8:d5:c0:a0:ed:8c:81:55:9c:5d:
                    87:ab:26:b5:21:ac:85:52:ad:71:54:42:48:92:cf:
                    e2:29:ad:8f:f4:a0:2d:d2:11:af:30:16:4e:7a:37:
                    35:3d:75:1d:ca:31:fe:ce:91:84:5a:72:e1:2e:69:
                    db:17:5c:19:14:41:b0:98:48:6f:9a:45:dc:df:05:
                    eb:5b:7c:f0:c6:86:a8:24:49:b2:8c:66:cd:f0:29:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D2:18:BC:F3:3A:EA:89:71:E8:84:DD:D1:04:F2:3D:49:21:1A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/c25f1929-747c-3492-a9a5-26748fc5258f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:69:6e:67:c6:98:cb:15:04:d6:cc:b2:0d:ac:6d:a4:0c:64:
         44:a1:b3:0f:bf:1a:5d:ff:34:e6:ea:ab:bd:03:b7:fa:83:7b:
         79:32:5a:44:e0:0a:d6:a8:2e:18:63:c3:f1:7a:2f:b0:45:69:
         03:ef:7a:2c:0f:09:8d:11:c2:ca:01:76:8b:f5:58:60:e2:46:
         cf:88:d7:a8:67:d9:a2:31:bd:8f:93:00:55:64:50:b2:8f:21:
         94:f7:0b:99:c9:ae:e7:15:98:a1:84:2b:a1:8a:68:62:2b:ac:
         9a:7b:6c:df:10:e6:90:8b:84:83:dc:e2:ae:6c:63:ed:91:d1:
         8b:e9:84:78:23:fb:eb:b3:86:43:a8:b5:53:9a:62:c1:e1:c0:
         d0:51:dd:80:4a:8c:8a:11:05:07:fd:43:44:ad:c3:57:03:07:
         9c:87:eb:a0:4e:a2:9a:39:ba:99:49:d6:ad:f0:b7:08:c5:8a:
         48:a7:cd:bb:d6:c4:15:46:30:ba:8c:41:ff:fd:dc:90:ab:52:
         5a:9f:c1:f3:43:6d:b1:0e:79:fc:37:72:ed:a9:10:92:58:3e:
         77:e6:87:39:fc:b8:ec:cf:a6:70:e3:a3:f2:b0:cd:ee:4c:b6:
         f2:51:af:29:e3:db:fd:35:18:bc:2b:da:e4:c5:00:68:b1:3c:
         e0:c8:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:29:53 2025 by rpki-client