Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/49547ecb-c3c9-3e02-9152-a32064154275.roa
File:                     49547ecb-c3c9-3e02-9152-a32064154275.roa (raw, json)
Hash identifier:          NKE/AKs+cEfi+fGLam3iycwqjSwdWx22cKlECyWrlvI=
Subject key identifier:   C7:E9:32:85:1A:D9:E8:4D:77:47:95:52:ED:48:C8:00:EC:A7:BE:A2
Certificate issuer:       /CN=7a920796-5a78-4996-9f81-4e3af8d7a3d4
Certificate serial:       010D0C9F4328584ABD4B9DD18E6397A96DE7F500
Authority key identifier: EF:F0:09:80:5F:78:30:59:A6:09:7B:0B:1B:82:9C:98:1A:79:BF:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/49547ecb-c3c9-3e02-9152-a32064154275.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     36419
IP address blocks:        204.10.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9d:d1:8e:63:97:a9:6d:e7:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a920796-5a78-4996-9f81-4e3af8d7a3d4
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=1401a327-cfe6-4eae-a953-d674903d855d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:87:b9:09:6b:c1:b0:af:ec:c7:32:8a:d7:
                    13:9a:da:52:69:4d:6e:57:4e:ee:b0:b8:a0:73:40:
                    cb:f8:5d:87:1f:da:41:29:b3:b6:12:d4:da:dd:e5:
                    15:0c:af:de:f5:7b:e2:1f:87:40:25:97:50:47:d7:
                    24:8e:05:b6:ff:0b:1f:e6:f4:0d:3a:f4:e7:f4:04:
                    09:fd:b2:09:6a:ca:8f:53:40:87:6c:b3:83:35:2e:
                    47:c1:9a:c2:bf:a8:c6:f0:cc:7c:79:a6:95:83:8e:
                    b8:05:d5:32:ea:f8:19:c0:b2:e9:46:17:d7:a8:70:
                    cb:9c:f6:6d:88:d0:e1:0b:60:c7:a1:f9:e1:b6:00:
                    67:6f:1f:0b:37:2a:7b:49:70:58:19:c5:48:39:7f:
                    64:a2:da:03:12:2e:66:cb:93:64:cb:0c:c3:80:0c:
                    6e:b3:42:ea:05:ac:35:1d:0a:af:3f:dd:c6:22:cf:
                    ce:14:6c:c5:be:50:44:74:cf:ef:33:e0:3c:24:fd:
                    aa:0f:81:1b:07:5f:25:9d:2f:52:6f:2a:35:67:e8:
                    48:7f:ca:14:32:76:5a:2f:aa:6d:74:97:d7:d1:20:
                    67:54:9a:57:5d:f0:2e:fc:be:af:60:e7:aa:34:20:
                    62:0d:bb:fd:ba:a0:f4:4f:8a:07:01:7d:04:0f:c3:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:32:85:1A:D9:E8:4D:77:47:95:52:ED:48:C8:00:EC:A7:BE:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/49547ecb-c3c9-3e02-9152-a32064154275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.crl

            X509v3 Authority Key Identifier:
                keyid:EF:F0:09:80:5F:78:30:59:A6:09:7B:0B:1B:82:9C:98:1A:79:BF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:31:4b:df:56:09:88:b7:26:b7:d7:9e:66:e1:cb:56:fe:1c:
         ed:a8:78:b3:41:8b:24:b2:bd:8d:c0:59:d1:c7:be:4d:c7:f9:
         2f:4c:27:2b:0a:aa:5c:91:b7:6e:51:29:c9:de:89:ce:15:0c:
         46:8b:a5:c3:d8:43:d9:d8:91:6a:3a:0f:50:10:1a:50:0a:3a:
         f6:6d:0c:eb:19:b4:4a:8f:2d:05:39:6d:48:be:3a:48:27:5b:
         66:bd:8f:74:2d:cf:af:22:43:32:d1:30:6d:95:8d:79:15:c7:
         15:80:b8:e2:9a:1b:75:f8:54:0f:04:19:2e:9e:99:07:6a:c3:
         a3:8d:35:a1:a8:d3:de:22:64:9c:08:0b:14:3b:56:b4:bd:64:
         b1:98:c7:cb:b2:37:ea:77:ac:77:1d:2f:6d:e9:21:d8:d8:d9:
         72:06:9e:32:74:84:45:33:b0:67:30:bc:09:d2:72:00:c0:d3:
         e1:87:4b:8c:fa:a0:29:ef:62:cc:c3:6c:65:53:8e:86:64:4b:
         a2:02:d6:34:f2:f4:ab:38:d3:66:a1:1d:03:7e:c0:67:a0:f9:
         5c:df:4e:a4:3d:e1:5a:69:3a:3f:ba:a4:0f:6b:45:9f:13:02:
         34:73:d2:05:c6:8c:e8:31:ad:aa:4f:fd:fd:a6:49:3a:43:81:
         71:49:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:11 2025 by rpki-client