Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f/9e06e4d7-3040-34f5-bff0-3e4dad692808.roa
File:                     9e06e4d7-3040-34f5-bff0-3e4dad692808.roa (raw, json)
Hash identifier:          NnuXQ+2eCUElX3IRI+fj64wmm89G6z+Q2CfpYVxn+1Q=
Subject key identifier:   70:93:3C:8B:AF:1D:71:3E:E6:07:25:2D:7D:DD:49:D3:63:03:77:AF
Certificate issuer:       /CN=eddf1acb-5049-45cb-bca5-5af458d9f04f
Certificate serial:       010D0C9F43285849D85FA62C42A0D7CD84D747E0
Authority key identifier: 57:26:99:63:A3:D8:A5:D9:6C:A1:5D:BB:37:63:12:26:80:6F:48:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f/9e06e4d7-3040-34f5-bff0-3e4dad692808.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     62692
IP address blocks:        204.174.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f/eddf1acb-5049-45cb-bca5-5af458d9f04f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f/eddf1acb-5049-45cb-bca5-5af458d9f04f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a6:2c:42:a0:d7:cd:84:d7:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eddf1acb-5049-45cb-bca5-5af458d9f04f
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=b48ec829-e983-4d44-be73-3205bf2eb81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:40:b7:c8:c1:ae:31:3c:2d:e9:ff:e4:ec:8e:
                    4e:23:9e:36:cf:a7:7a:e9:36:92:f1:69:f2:cf:c5:
                    1e:f4:cf:fc:4c:c4:74:af:09:8f:fa:c2:42:00:53:
                    31:7a:84:ff:38:df:f6:7a:30:80:94:e9:00:3f:f2:
                    3b:bc:21:e9:97:c1:dd:d7:dd:3a:dc:a0:1e:5b:db:
                    10:60:f9:5a:2c:a9:d4:80:57:7c:c1:28:72:29:ce:
                    ba:9c:5c:ab:66:80:42:aa:ba:5c:1e:60:94:a9:f5:
                    51:9e:e9:79:0f:84:74:13:8e:59:cf:f7:59:aa:12:
                    fe:3a:dc:5b:47:96:52:5e:f3:a2:a5:82:be:cd:53:
                    52:7b:89:60:b7:20:28:e2:78:5c:f8:6b:a0:36:21:
                    38:89:a8:f8:9a:46:96:f2:a4:8f:9c:6a:5d:71:3a:
                    57:03:ff:55:ed:76:52:df:7d:6e:41:07:11:48:8a:
                    50:56:15:32:59:3c:f9:30:2e:e3:d9:94:4f:a9:15:
                    38:28:09:fe:dd:cf:5b:f7:ab:d9:b3:84:c2:21:a6:
                    92:06:cd:12:b9:d4:51:2d:12:76:bb:0c:af:7d:2c:
                    53:7e:48:35:a5:70:a9:7d:00:23:a4:dd:5d:93:48:
                    8c:a2:cc:bf:aa:df:25:79:c6:2f:47:4a:57:42:23:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:93:3C:8B:AF:1D:71:3E:E6:07:25:2D:7D:DD:49:D3:63:03:77:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f/9e06e4d7-3040-34f5-bff0-3e4dad692808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f/eddf1acb-5049-45cb-bca5-5af458d9f04f.crl

            X509v3 Authority Key Identifier:
                keyid:57:26:99:63:A3:D8:A5:D9:6C:A1:5D:BB:37:63:12:26:80:6F:48:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eddf1acb-5049-45cb-bca5-5af458d9f04f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.174.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7f:bc:01:f4:78:45:55:c9:56:a7:2d:2c:64:66:55:55:52:
         de:5d:3d:82:d3:dd:d8:58:53:c0:ba:04:29:50:62:9a:04:48:
         db:65:cc:2c:fe:72:5b:d3:58:d9:78:8b:a4:7f:e9:da:f6:35:
         8e:0c:6b:9c:a1:82:23:7f:6d:60:b7:b1:da:e0:9d:58:7a:56:
         71:b7:b0:b8:11:dc:3f:37:a5:2e:14:14:6f:cb:04:19:a8:da:
         f5:20:21:94:92:7d:32:3f:70:52:4b:9b:f3:5d:a4:99:f9:c4:
         64:fd:9b:83:86:84:15:8d:96:58:32:f1:72:4f:5c:e1:4f:50:
         12:2b:4a:6e:49:c1:05:34:7c:06:98:68:3e:92:e2:30:ab:70:
         0e:5e:f0:96:dc:fd:d1:c7:20:1b:61:f8:1b:09:0a:b4:01:f9:
         0a:e1:b0:ad:ad:2f:8f:3c:cf:d2:ed:5f:8d:ee:b1:49:db:c4:
         c6:b1:84:bf:54:26:0a:77:37:da:86:fc:74:a5:b7:05:2a:11:
         66:50:cf:07:aa:f0:73:21:57:58:2f:ac:1c:c2:ca:a6:8b:75:
         f4:b1:1e:aa:f9:ab:69:e5:8b:af:ae:83:d6:b0:8d:1c:8f:4f:
         af:84:b0:ff:bc:f2:fa:15:c7:ef:f7:6d:30:07:b9:f4:94:7a:
         1e:54:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:54:25 2025 by rpki-client