Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/be1d82ad-92ed-344f-a01e-a8a8a392094f.roa
File:                     be1d82ad-92ed-344f-a01e-a8a8a392094f.roa (raw, json)
Hash identifier:          TuiO7b8WrzA8i8x5uxPTUKG7QGEzFIwxVIZxFnKk0WA=
Subject key identifier:   06:7E:0C:B2:7E:04:1C:6A:02:B0:73:7E:95:92:BB:51:07:30:50:EA
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584A0D6A898B5EE350E8AFAA6200
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/be1d82ad-92ed-344f-a01e-a8a8a392094f.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     7810
IP address blocks:        204.214.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:89:8b:5e:e3:50:e8:af:aa:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=3fc3a4e4-33c1-4102-a417-b87ccdfda5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e8:4b:a2:a0:9d:1c:01:86:c1:f3:5c:21:77:
                    fe:f5:14:a3:18:c4:3d:c4:e4:ad:2f:7d:c6:b4:fc:
                    09:d6:a7:0f:a0:d4:40:a2:81:53:5a:95:d6:76:6e:
                    8a:58:64:bc:b9:d5:61:70:6b:fc:29:24:13:23:a2:
                    9b:00:57:dc:17:d4:a4:00:9c:24:fd:e1:08:29:5a:
                    d9:9d:8c:15:79:fc:b7:3e:21:3a:53:13:d9:86:0f:
                    d8:0e:45:50:f2:3e:03:b2:19:bb:b5:0d:26:5c:d2:
                    c2:d9:35:ec:0a:e3:7a:20:0c:f0:7c:09:1a:70:4d:
                    32:04:cc:ea:ad:8b:60:05:fa:5d:75:f0:61:6c:2d:
                    8f:88:a9:20:b6:53:19:0a:55:6f:b9:7b:10:53:10:
                    85:df:2a:00:82:8c:ac:e5:aa:9c:86:e6:ac:d5:8f:
                    f9:2a:08:b3:5b:a2:fa:65:e6:28:de:fb:14:98:43:
                    1a:fb:34:9d:c9:79:6a:98:48:c4:d9:ab:03:1c:54:
                    22:22:f4:fc:18:80:1e:78:d2:72:3e:ee:15:d7:a8:
                    25:bf:25:fb:3a:85:b9:db:3d:be:bf:96:e1:eb:94:
                    dc:73:56:10:af:e1:d4:99:ef:54:87:7b:fd:85:ed:
                    90:bb:42:4c:1c:e4:19:5e:78:ce:82:61:30:16:73:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7E:0C:B2:7E:04:1C:6A:02:B0:73:7E:95:92:BB:51:07:30:50:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/be1d82ad-92ed-344f-a01e-a8a8a392094f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.214.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:38:2e:3d:50:78:69:39:12:bd:a0:ed:0a:76:78:0b:aa:74:
         e6:9d:c6:b9:8c:fb:f7:da:d6:90:9d:34:d5:e8:a7:33:0b:c4:
         6d:6a:28:67:44:be:44:ac:71:7c:46:e3:52:37:b2:0f:ff:9d:
         b5:c2:cd:e7:5e:eb:4d:82:0e:b0:42:b0:1e:33:ef:6a:0c:54:
         5c:27:60:39:35:ca:e1:41:8b:65:0e:d9:93:69:0b:8d:c1:85:
         0c:9b:06:73:ee:f9:e1:df:37:49:f1:9f:e7:76:a3:22:6d:5b:
         b8:28:23:23:e3:a0:7c:bf:22:fd:e1:2a:59:3a:2a:b6:91:8e:
         8d:37:8f:0d:e3:7b:bf:07:0c:a7:55:c0:9e:6e:db:93:ec:eb:
         13:d3:35:eb:ca:a9:cc:c3:dd:7b:e7:9c:c2:2f:87:f9:23:e2:
         26:93:80:3c:45:7c:37:48:5f:9f:1c:86:08:fe:03:ae:25:bd:
         da:9f:af:a6:74:59:b8:30:13:ed:00:cc:17:4a:ba:91:c4:8b:
         68:df:e6:6f:f9:7d:fc:41:e8:32:8c:e3:a3:c8:f5:2a:1d:28:
         49:61:6e:3b:ea:c0:2d:dd:fc:b2:78:9f:be:47:6d:f5:b7:33:
         5f:0e:4a:db:66:eb:07:8e:a2:d2:6f:04:17:ff:6f:87:a6:de:
         31:b4:68:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:43:40 2025 by rpki-client