Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa
File:                     5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa (raw, json)
Hash identifier:          Vkv8GUwx/XFJBY8oKip9aWjXsM78mdeI61tGgtrieJY=
Subject key identifier:   A6:F3:C4:47:41:BE:E6:6F:7E:BF:26:01:21:CE:E1:74:1B:16:CD:5C
Certificate issuer:       /CN=4c6110af-3017-4d96-90e3-d18a76894aa0
Certificate serial:       010D0C9F4328584A9900C278C4478723CB3F46C0
Authority key identifier: 1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     394333
IP address blocks:        204.69.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c2:78:c4:47:87:23:cb:3f:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6110af-3017-4d96-90e3-d18a76894aa0
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=7158c287-c625-4813-ae1e-a3ea7e203e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:65:cb:cf:bc:e2:93:7f:c9:53:78:33:0a:91:
                    9e:bc:57:5c:3d:12:c3:0a:82:0d:b3:7a:e7:a0:a1:
                    c0:f3:ff:82:06:22:db:8d:5f:df:98:b1:ec:6c:2a:
                    57:fd:4a:65:aa:cb:17:cc:9e:ff:c4:a8:c6:b5:b2:
                    2e:8b:66:0a:7b:82:75:04:2a:e9:02:dc:cc:99:62:
                    a3:59:e2:af:ec:d0:26:01:9a:c1:98:d6:ba:39:23:
                    bf:03:17:f4:4d:67:58:22:ed:32:0a:9b:e7:06:d4:
                    ae:da:fd:86:b8:3f:6a:f4:6f:3d:75:b6:c4:e9:ee:
                    53:4c:29:56:2c:af:27:c1:0f:8a:c8:18:cc:0f:a5:
                    e6:f5:f9:d4:35:25:03:ca:32:b4:fa:45:a8:cf:e8:
                    0c:f0:8e:20:df:a1:16:6d:33:56:04:c5:57:c3:cd:
                    85:f2:ae:58:c2:88:93:b5:dd:bc:1b:e1:cd:f9:c6:
                    e0:fd:46:95:eb:f1:3b:4e:53:2b:c1:35:2f:23:8e:
                    0a:63:fc:da:c7:11:b9:3a:6a:c3:04:3e:45:56:b9:
                    eb:d9:ca:ef:27:e5:38:05:57:36:de:3a:d1:5b:51:
                    e3:6b:1d:d8:94:88:bf:04:90:16:b6:4c:ea:c6:ab:
                    ef:1f:50:52:02:6d:66:08:92:14:a6:4b:63:ff:22:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F3:C4:47:41:BE:E6:6F:7E:BF:26:01:21:CE:E1:74:1B:16:CD:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl

            X509v3 Authority Key Identifier:
                keyid:1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:22:0e:11:46:84:57:d9:66:1e:79:f9:a5:f9:d9:03:61:94:
         44:d7:2a:3e:ab:e3:5f:83:e2:ee:e7:c5:f0:b1:49:e6:fe:54:
         ff:76:e7:04:bc:2f:18:e9:20:b0:40:48:42:c1:47:06:53:35:
         60:0b:df:66:da:4e:96:bf:36:73:3e:66:97:0a:27:62:f8:0f:
         c2:24:2f:21:71:58:88:37:2e:fd:b4:e9:7f:58:80:88:52:e9:
         0a:0b:44:ac:da:c3:c5:36:cc:cb:7c:5f:d4:62:59:13:1a:25:
         7a:b7:22:7f:53:dc:bd:d1:84:ac:fe:9c:09:42:fe:7c:c1:39:
         5c:5e:96:e1:ba:26:f9:be:69:7c:b9:4a:72:96:e1:89:c6:ac:
         6e:d6:c2:66:e8:a4:ff:d8:81:33:e3:03:a2:08:62:ff:24:b6:
         38:90:78:c4:61:34:36:92:c3:b5:b3:2d:ac:07:46:64:41:92:
         e6:50:d3:7d:36:1e:28:33:c7:e6:4b:66:1f:c7:a7:43:fd:cd:
         2e:58:81:b1:a0:12:e4:18:13:9c:41:cd:85:af:f9:d3:01:4c:
         a4:c3:8c:7f:2e:95:a4:00:a7:d3:d2:15:d0:68:1b:78:c2:96:
         d6:a0:df:fa:3e:89:36:9d:d1:16:bf:e6:46:a5:80:91:66:fe:
         4a:96:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:49 2025 by rpki-client