Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554303b1-5480-3d12-8232-5e316121c2f8.roa
File:                     554303b1-5480-3d12-8232-5e316121c2f8.roa (raw, json)
Hash identifier:          jdMah6lSktaDZ+V9wMPk7kOVCO3YV3Xvn66L0MpC9sQ=
Subject key identifier:   27:46:B6:A6:0C:0F:E9:24:5E:77:06:19:05:A9:8F:52:9F:FD:72:F6
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849FCAA80F4D5027A1C3E62FDA0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554303b1-5480-3d12-8232-5e316121c2f8.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     46974
IP address blocks:        204.141.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:80:f4:d5:02:7a:1c:3e:62:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=3874159d-b136-4b58-9263-2a6f5e363297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:3a:fc:73:72:e8:a4:f5:24:f4:d2:ce:0c:
                    ec:aa:42:ee:aa:c6:0f:43:5f:53:97:e5:56:f3:ea:
                    42:29:4a:9f:c6:fe:1d:0e:f1:6f:b4:71:1e:39:78:
                    b8:f4:1f:b3:86:5e:14:01:37:0a:b2:a5:8f:2b:31:
                    82:db:bd:6e:69:14:b4:9b:89:fb:ae:75:5d:65:97:
                    c5:cb:cc:2e:59:58:0d:72:ec:0c:bd:cb:77:6d:b9:
                    35:7a:5b:30:17:f3:22:2d:c5:b7:5e:c3:9c:5e:95:
                    7b:37:4d:61:f7:eb:d7:a0:3e:fc:8b:a2:81:64:58:
                    85:c9:b4:2b:65:92:22:30:67:53:59:9e:1c:53:36:
                    65:40:67:7a:6d:71:68:c9:59:17:3a:24:3a:3d:24:
                    42:de:19:47:27:79:21:de:96:20:91:f1:50:0d:fd:
                    93:ed:d9:9c:66:b0:dd:67:9f:e8:d5:2e:6d:05:d6:
                    ec:27:c7:c7:1f:d4:33:fa:b3:1b:fc:87:ff:c2:33:
                    3c:1d:c5:f8:1a:32:34:f3:5b:cb:e8:f2:cf:fd:e8:
                    3c:02:00:dc:a9:20:03:17:92:ac:02:55:38:a3:04:
                    16:0a:0e:78:0e:94:be:74:21:ee:a1:ab:61:75:6c:
                    7f:48:11:0f:8d:a7:d6:c7:18:4c:b5:65:92:90:24:
                    17:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:B6:A6:0C:0F:E9:24:5E:77:06:19:05:A9:8F:52:9F:FD:72:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/554303b1-5480-3d12-8232-5e316121c2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:59:16:da:a3:0f:ab:e6:17:df:43:ef:9e:e2:fe:80:e6:e2:
         e8:5d:b3:ca:2b:d3:55:90:f9:9e:1c:93:ed:4f:f3:98:3e:bf:
         7a:56:2b:39:1d:ec:d1:ea:3d:2c:0b:ab:0c:97:44:f2:20:df:
         12:49:0b:d6:d6:c4:4c:9a:c9:ed:c8:5d:83:ce:f2:26:79:44:
         54:70:17:6e:7e:87:71:91:11:ea:2d:56:f6:2b:79:b5:35:b1:
         78:b8:73:c7:ff:c6:77:11:19:f8:40:9c:09:43:70:61:e5:75:
         64:36:19:b9:7b:02:4b:c0:4f:89:05:90:96:34:1d:14:6b:78:
         46:70:a4:7a:d9:30:b2:9a:ef:01:3b:ae:07:7e:d8:a6:db:74:
         2f:da:62:4d:60:a9:80:09:a5:9e:26:05:76:1d:c3:a7:bd:e6:
         26:ec:8c:30:cb:98:a4:06:2d:f1:84:83:02:a7:59:dc:3f:16:
         cc:46:45:fa:72:d0:9c:22:6c:95:78:9b:96:1c:9b:9f:53:08:
         86:ee:9c:8f:74:4d:d8:6d:a8:a1:d4:58:af:be:bb:7b:a5:54:
         73:af:b8:a2:f6:40:1c:c6:85:ca:98:43:b3:7f:3d:0e:08:1c:
         5d:56:48:f7:bb:6c:a0:e1:88:70:95:00:e0:aa:b3:50:1d:e2:
         a1:8a:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:49:43 2025 by rpki-client