Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa
File:                     2630e1ca-a903-395a-8244-fa8c41db42b9.roa (raw, json)
Hash identifier:          yRwwwhYO94xaG7fw97eJSItg7i5TkNPUua+3x0AqQEo=
Subject key identifier:   28:D2:D6:0E:26:9A:09:A9:37:D6:B3:95:CB:55:8E:FB:10:12:6C:41
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849F87A8BDC91D346C9552356D0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     20940
IP address blocks:        204.2.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:8b:dc:91:d3:46:c9:55:23:56:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=95ebf7d3-1831-4e30-a9ea-b863b33ebe31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:10:56:d9:f3:b3:35:b4:f4:00:3c:29:a0:
                    04:60:c9:40:eb:ce:37:ac:f3:da:54:11:e7:65:14:
                    07:e4:72:31:2c:db:e1:d7:7c:46:65:55:4d:fb:cd:
                    9c:5c:49:95:57:67:cc:c7:fd:42:a6:4c:4a:53:3e:
                    3a:10:f8:c9:b1:35:ab:a3:8a:26:9d:72:df:d5:71:
                    d1:c0:c4:76:e9:dc:43:68:db:97:3f:15:01:8b:9f:
                    c5:fa:b7:05:9d:cd:40:3d:bf:f8:17:d0:5a:96:54:
                    ac:0e:0b:8c:44:fb:c0:90:70:be:ea:ad:fd:b2:ec:
                    97:59:5d:ff:bf:23:f0:69:56:93:f1:13:9f:84:93:
                    14:0f:f1:00:72:64:41:9a:49:c1:8b:7a:c6:dc:82:
                    a3:8b:65:c4:2d:93:0e:92:9f:45:f3:db:40:85:c0:
                    dc:54:f9:1c:51:02:81:e3:38:83:b7:c4:0d:98:9d:
                    9f:ce:76:26:9d:92:c3:f3:47:64:56:9f:1b:20:be:
                    31:6d:0b:c8:a6:17:b8:02:f9:c6:01:c6:0d:50:e0:
                    9b:6d:d7:e7:35:70:bd:4b:84:b0:e0:ce:bf:ef:d8:
                    26:ea:b5:c1:35:76:5c:05:7c:87:77:58:de:5e:33:
                    80:f0:da:f9:03:89:79:14:f6:26:98:58:6e:8b:cb:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D2:D6:0E:26:9A:09:A9:37:D6:B3:95:CB:55:8E:FB:10:12:6C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2630e1ca-a903-395a-8244-fa8c41db42b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:2a:94:d7:fa:5d:48:b2:22:55:fa:6c:eb:25:e0:77:7e:75:
         1c:e6:90:0d:ef:6d:dc:6f:5c:bf:e0:a1:57:eb:b2:6c:e7:f2:
         5d:c0:ec:a9:bc:ee:ff:a9:40:b1:bf:05:aa:1c:81:f3:82:5d:
         0d:3d:d4:8e:0d:5b:e1:e7:8b:9f:98:2d:92:11:9d:b2:be:51:
         a8:b2:ad:53:fa:75:05:bd:1c:88:40:cd:44:ee:14:39:55:24:
         d8:af:8c:6d:a7:43:2a:9e:ad:75:72:ab:62:2a:64:44:2f:74:
         93:66:85:d8:1e:f3:d7:6a:b4:d1:da:1a:f7:48:95:49:bd:d4:
         ab:91:c7:01:96:37:61:0f:3e:c3:5f:e3:de:ee:c3:a2:81:60:
         47:19:fe:85:e8:ca:71:89:a5:53:a9:27:9d:af:6c:d9:8a:77:
         79:7b:86:9a:9a:10:65:4c:59:2c:3e:00:34:1f:56:1d:c0:32:
         91:8c:a1:28:46:7a:ae:25:94:f9:47:2d:17:ea:7d:ac:aa:52:
         68:c4:ea:8c:7b:1e:92:07:27:bc:b9:63:ed:84:30:d7:3b:fa:
         a7:50:b2:93:51:58:c9:2b:7b:4c:97:42:74:c3:9b:2b:51:c9:
         26:3f:89:f9:9c:69:6a:73:75:0d:77:00:9d:ee:28:91:30:e2:
         7b:48:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:33 2025 by rpki-client