Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/80804940-89a1-3af7-a961-f42619c7666f.roa
File:                     80804940-89a1-3af7-a961-f42619c7666f.roa (raw, json)
Hash identifier:          zvw7DfhnoVlHh+xQxHmKxIPhKffhPPTX7t7B9nLS0ec=
Subject key identifier:   44:25:BB:5A:B5:5B:99:05:A4:F4:DF:C0:51:89:88:D5:25:15:10:24
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584A2D8588F7D5AFDD6FDB329680
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/80804940-89a1-3af7-a961-f42619c7666f.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     22822
IP address blocks:        200.110.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:88:f7:d5:af:dd:6f:db:32:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=b4e7c550-98b5-411a-9240-d0b36143e06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:71:a4:9c:db:78:e2:a2:24:89:71:a8:ce:98:
                    7d:4b:0f:33:59:51:6d:b5:67:eb:18:bc:7a:5c:56:
                    2f:a7:ef:c8:97:32:3f:b6:4d:7b:ca:49:12:26:d8:
                    08:4a:4d:92:aa:19:5b:f6:69:c5:7a:f1:03:3e:89:
                    10:5d:12:85:68:52:30:ba:be:1b:b2:07:9f:b6:17:
                    17:c1:0a:d7:b5:c1:3f:04:1c:42:0d:b1:48:45:8b:
                    0d:c1:e2:38:3e:72:2c:ed:ff:16:a0:0a:47:17:2d:
                    14:28:20:44:87:76:85:fa:bb:f2:a3:d6:75:11:f1:
                    68:3c:19:2d:d7:f3:65:e1:d2:6b:c4:8b:0a:e7:26:
                    db:88:20:93:4c:52:93:35:73:34:ab:46:2c:cd:3b:
                    92:2f:a0:05:60:5c:97:31:f6:12:20:7e:6e:25:e7:
                    57:36:2b:b8:46:74:b6:84:95:c1:77:67:1e:56:3f:
                    08:26:76:7d:ec:8e:11:19:54:3a:1a:bf:73:5f:b2:
                    b2:f8:40:21:ff:98:4f:47:ea:55:2a:51:92:b3:a6:
                    bb:37:4c:22:47:4f:fd:a1:26:e8:dc:f8:e2:9a:d7:
                    3f:3e:6e:10:5d:05:90:06:60:b3:c5:08:48:78:55:
                    57:b0:75:71:37:a2:1e:df:9d:5a:b3:a2:1e:08:d9:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:25:BB:5A:B5:5B:99:05:A4:F4:DF:C0:51:89:88:D5:25:15:10:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/80804940-89a1-3af7-a961-f42619c7666f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9a:3a:4b:3e:37:a0:c1:1a:09:3e:83:2e:8e:86:25:b7:27:
         15:56:c6:7c:73:4b:42:60:a7:de:03:b9:9f:6b:3c:4c:10:ee:
         02:ee:63:83:bb:5e:5a:17:f5:be:a9:be:95:17:42:a6:d4:e0:
         9c:fb:73:60:4c:7b:d6:b8:82:0a:da:44:d1:1a:10:b7:a7:93:
         eb:80:59:5f:70:85:30:69:b9:05:d4:33:96:d8:b0:da:11:fd:
         b9:46:bb:ea:ed:77:8f:85:71:a2:53:c5:82:75:d5:15:cc:f4:
         c6:94:07:15:91:cd:37:c3:92:6b:03:a3:9b:75:96:59:5c:45:
         43:56:e9:e0:c8:20:eb:f2:f4:40:63:fd:cf:ed:25:03:50:cd:
         e1:1b:93:6e:7d:02:80:f7:48:b7:a8:8b:a0:6c:9d:50:e7:ac:
         4a:a8:b2:58:db:be:69:0c:64:93:ad:a6:69:42:b1:d2:fa:11:
         44:f9:09:20:93:55:a7:07:51:9f:93:58:8e:e5:5b:9a:34:da:
         1c:7d:75:01:93:9c:0d:38:fd:83:b6:bf:8b:64:93:bf:bc:6d:
         39:1a:60:2d:6a:93:d0:59:b5:bf:14:da:2e:22:e9:fb:2b:47:
         08:62:cc:00:a3:cb:f7:40:a4:93:c3:f8:c2:a3:07:e4:9b:c3:
         11:80:60:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:42 2025 by rpki-client