Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa
File:                     235cefab-f003-344e-a29e-ed3307aa2358.roa (raw, json)
Hash identifier:          ivF4LbcmegCJMR9VLorY4twfh+Yn3OltFwm2G7ALROg=
Subject key identifier:   24:E6:BB:05:63:7D:7C:E5:AE:D5:FA:93:DB:B0:E2:D2:F1:18:F5:EC
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F4328584A0A9FD2B13172EDDB7233EE70
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa
Signing time:             Sun 01 Jun 2025 01:00:49 +0000
ROA not before:           Sun 01 Jun 2025 01:00:49 +0000
ROA not after:            Sat 30 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        204.57.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0a:9f:d2:b1:31:72:ed:db:72:33:ee:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Jun  1 01:00:49 2025 GMT
            Not After : Aug 30 01:00:49 2025 GMT
        Subject: CN=62406fdf-ef48-42ef-ba16-24a51e3c5452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1b:13:98:98:1e:d7:57:b3:fa:71:ff:ae:b1:
                    49:4f:29:15:20:26:37:dd:16:cb:5d:a0:96:1a:d4:
                    7b:48:b9:3e:83:03:19:a5:06:db:85:2c:ae:f0:db:
                    e8:20:d1:f2:ab:a5:8e:4c:99:a2:35:64:17:39:64:
                    ea:5f:d1:4b:ad:b1:06:7c:f6:01:37:58:c1:e5:f3:
                    29:57:56:29:40:81:6a:51:79:04:4c:1d:d8:24:d8:
                    2b:63:91:0e:46:39:70:cf:44:91:08:bc:ab:2c:0c:
                    13:d0:3e:f8:5f:5f:08:7f:74:5d:0b:b0:71:96:dc:
                    26:be:eb:ef:91:d7:db:db:6f:82:d7:62:6d:49:b4:
                    a0:ed:10:d3:8b:95:12:1f:7b:25:3e:8c:1d:0e:13:
                    a4:b9:c4:3c:c1:21:73:01:07:82:66:42:36:c3:04:
                    41:d4:5d:69:4f:01:23:e2:90:5d:8e:b1:51:8e:3d:
                    a7:e9:96:b0:13:0c:9b:65:cd:f4:cf:d1:b7:ce:8d:
                    2d:4b:bd:06:32:ed:a7:e4:20:78:a8:21:99:42:b4:
                    02:55:7c:69:aa:19:ac:b7:7c:60:22:85:1b:ea:3d:
                    f9:5f:20:c4:e2:e2:b8:9b:c5:dc:a4:38:dc:a4:3e:
                    70:86:c8:c3:93:6b:b1:b2:5b:5a:b4:a3:b7:41:03:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E6:BB:05:63:7D:7C:E5:AE:D5:FA:93:DB:B0:E2:D2:F1:18:F5:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.57.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:94:be:c2:0c:fb:85:f7:0e:c1:67:21:26:41:81:cf:61:
         66:e5:ff:f2:93:36:20:95:3b:e7:7f:38:dc:4c:05:f1:28:81:
         1f:f4:9e:5b:9d:19:9d:be:ad:4f:35:34:88:bf:ff:13:16:93:
         5c:84:1b:fd:02:48:56:f9:2b:70:ac:8f:73:3c:a5:14:3f:cd:
         3e:14:c0:36:1f:3c:17:53:ea:71:bb:f4:80:ce:63:56:eb:64:
         26:62:db:4e:5b:98:b7:0b:66:ab:a4:27:44:11:4f:90:a8:e6:
         28:8e:28:44:ce:30:8b:94:11:5d:8f:97:5a:d1:33:ce:bc:82:
         a1:6e:7d:61:de:52:b4:d7:39:69:df:ce:a6:a7:85:66:60:43:
         6d:e5:7a:74:c4:96:9a:a3:a2:57:c1:44:11:c2:a4:c5:5c:fb:
         e6:fd:78:af:95:5a:ef:46:dd:50:a6:f2:5e:6b:51:f7:fa:8b:
         10:20:e9:69:81:c2:a2:a4:ad:27:6d:36:f6:a8:7c:d2:e1:27:
         f3:b9:fe:38:e5:bc:d9:8b:44:69:6c:32:6b:b0:90:87:5a:f8:
         f5:ec:e7:8a:0b:ec:da:71:c9:25:34:8a:e7:17:15:3f:27:de:
         ec:bf:ce:a0:bf:9b:7d:eb:fa:39:51:b7:fe:4b:2e:e2:1a:8f:
         3d:f9:1d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:22:02 2025 by rpki-client