Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa
File:                     e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa (raw, json)
Hash identifier:          brGelJ43djmc77M1U5InQMaZ3m2zf0xExFQxwrIPvWE=
Subject key identifier:   12:03:7B:4A:49:81:3B:C7:88:F4:71:47:0A:CA:EE:E6:7C:07:9D:89
Certificate issuer:       /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial:       010D0C9F43285849A8E9DB5740B8FBB89ECD12C0
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     21928
IP address blocks:        204.235.252.0/24 maxlen: 24
                          204.235.253.0/24 maxlen: 24
                          204.235.254.0/24 maxlen: 24
                          204.235.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:db:57:40:b8:fb:b8:9e:cd:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=274fc625-1979-418b-a460-45563d77e87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:17:bc:64:66:63:46:97:92:74:e7:f2:06:
                    61:0a:85:af:23:c3:48:1e:2d:55:76:ae:00:68:60:
                    47:3b:89:0c:ea:aa:11:59:7d:c6:fb:24:42:cb:72:
                    45:f3:49:bc:2d:08:3e:9e:5d:32:89:1d:f0:38:3e:
                    fa:97:5e:57:c8:91:d5:c3:8e:c0:ab:7a:36:fb:e8:
                    33:1f:ae:d1:c6:ce:1b:8c:d2:97:56:5b:39:10:9f:
                    be:08:9b:ab:48:23:d5:17:67:31:0e:c0:c4:3c:e4:
                    76:4a:0a:47:9c:6c:b3:22:a1:09:58:19:9b:52:1d:
                    ca:ce:76:d2:f5:b6:e5:57:29:d7:d0:7b:c9:17:f8:
                    8f:be:b4:1a:97:86:9a:0d:e2:8a:f0:e5:ac:3c:af:
                    eb:d1:2f:00:f2:5d:da:e2:03:27:c6:a5:32:6f:69:
                    f5:f4:20:11:3b:51:55:17:9b:25:9d:f3:d0:31:f5:
                    3a:37:a5:55:22:9f:c7:54:74:de:e2:a6:62:34:8a:
                    aa:77:ee:04:ba:6f:09:ca:3e:c1:cf:38:1c:a1:8c:
                    1d:2c:32:93:e6:bd:99:93:ae:d1:d2:f2:da:b7:df:
                    dd:19:ef:74:cf:38:b1:fa:f1:a2:bc:d7:ac:96:4a:
                    a9:4c:e9:bd:0d:6d:03:22:bb:fa:8a:4f:0a:9a:32:
                    05:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:03:7B:4A:49:81:3B:C7:88:F4:71:47:0A:CA:EE:E6:7C:07:9D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl

            X509v3 Authority Key Identifier:
                keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:81:c5:79:83:cf:21:fb:a0:e7:81:29:58:7d:a3:65:09:
         12:0a:dd:06:b9:a9:16:78:34:7d:86:12:20:6b:e1:82:ae:9c:
         a2:f0:34:cc:b9:40:34:b4:35:9c:30:54:17:05:29:62:ff:f6:
         2b:b1:6e:3b:4d:1a:e6:2d:0b:e0:17:a4:a7:5d:1a:62:59:77:
         4a:5b:ff:b9:7c:94:8b:ed:aa:bf:f4:a1:4a:2e:a4:a6:a1:ff:
         e3:5e:7f:44:76:04:bd:36:94:e0:c7:55:4f:00:76:f3:d3:34:
         9d:5d:1b:91:70:97:68:cc:6e:59:8c:ed:fb:29:29:ce:69:76:
         61:e8:2d:ae:b6:69:ef:d4:3b:15:6c:e9:08:6e:df:e7:48:80:
         95:de:87:85:0c:6e:61:82:3f:3a:6e:ea:02:e8:6b:71:1f:5a:
         05:f4:72:63:48:5d:ab:dd:4a:05:19:5a:80:09:1d:1c:32:69:
         63:6e:3b:3c:bd:10:0a:01:f5:6d:c0:5d:99:d0:ed:db:2c:7f:
         29:39:b1:43:d9:c6:1e:d3:b1:72:ff:12:df:38:19:49:e6:ae:
         45:22:27:06:c7:28:9f:5f:ae:3a:05:20:2e:d3:a3:e2:da:4b:
         1a:7d:b8:e1:c9:9b:60:2a:0e:f8:b1:d0:cc:fa:10:0a:59:ea:
         cd:e9:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:14:10 2025 by rpki-client