Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/49547ecb-c3c9-3e02-9152-a32064154275.roa
File:                     49547ecb-c3c9-3e02-9152-a32064154275.roa (raw, json)
Hash identifier:          hxW0LTKDZ0vfIlUrf3b/JpLDCIsqoRljxahtkIwah8E=
Subject key identifier:   4B:4C:1C:08:0B:E0:8E:09:6F:A9:80:6D:1D:B8:87:8A:1F:11:19:F4
Certificate issuer:       /CN=7a920796-5a78-4996-9f81-4e3af8d7a3d4
Certificate serial:       010D0C9F43285849DC8FC8231EBB910146949580
Authority key identifier: EF:F0:09:80:5F:78:30:59:A6:09:7B:0B:1B:82:9C:98:1A:79:BF:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/49547ecb-c3c9-3e02-9152-a32064154275.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     36419
IP address blocks:        204.10.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c8:23:1e:bb:91:01:46:94:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a920796-5a78-4996-9f81-4e3af8d7a3d4
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=22647d45-2f27-4661-9447-5ae9b3541af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:2b:7f:b7:02:c5:53:d8:52:24:fa:42:20:
                    e4:ce:5d:b6:60:d8:64:5e:65:cd:af:0c:aa:b1:18:
                    53:c9:8c:a6:41:0b:0d:f1:3e:93:e1:1f:18:22:48:
                    03:c4:2a:27:71:5f:b5:3f:f1:5c:f3:b4:a9:d1:78:
                    85:f4:61:0b:be:e0:59:53:83:df:3f:ff:14:d3:b0:
                    7b:99:db:e0:f3:cf:ec:d1:a4:f6:fd:21:ff:74:bb:
                    ff:e0:43:7d:76:84:b9:a4:90:52:eb:8e:3a:9f:c2:
                    8c:78:31:7c:b3:96:6a:f1:16:f2:73:f6:5f:6a:11:
                    e8:9d:51:8c:99:30:cc:75:e8:b2:ee:31:2d:a7:67:
                    19:15:b3:28:5d:38:b1:49:07:23:3d:f7:51:56:5f:
                    b3:52:28:e6:76:df:d9:13:7e:29:3d:c3:3d:fa:9b:
                    32:b1:e2:a6:74:94:81:aa:18:79:4f:59:21:30:6c:
                    cf:7b:45:5f:21:69:db:ee:2c:78:c4:39:c0:e1:d3:
                    5a:65:3a:d8:58:2b:0e:b7:95:35:24:ed:f6:9f:05:
                    dc:7b:18:b6:3a:21:49:82:42:d8:d0:87:fc:cf:98:
                    3e:8d:8e:9d:54:81:a6:5f:68:83:68:b8:61:66:f0:
                    7a:d3:a3:a2:90:ff:b0:cf:64:12:c3:f0:8d:f7:73:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4C:1C:08:0B:E0:8E:09:6F:A9:80:6D:1D:B8:87:8A:1F:11:19:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/49547ecb-c3c9-3e02-9152-a32064154275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4/7a920796-5a78-4996-9f81-4e3af8d7a3d4.crl

            X509v3 Authority Key Identifier:
                keyid:EF:F0:09:80:5F:78:30:59:A6:09:7B:0B:1B:82:9C:98:1A:79:BF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7a920796-5a78-4996-9f81-4e3af8d7a3d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:28:81:bc:bf:d4:a7:63:42:6d:44:17:35:fa:69:da:99:e1:
         46:ad:41:fb:20:20:97:39:35:13:5e:df:d8:1d:51:8e:8a:91:
         ef:83:06:ee:99:bb:ee:53:f9:4a:f3:0a:d9:9f:c4:e9:c8:9d:
         4b:bf:d3:e5:7d:b9:71:00:15:99:dc:b7:bc:75:20:c6:3e:c2:
         bb:ae:55:92:7e:b9:a3:a2:36:eb:ec:44:e3:45:cb:99:7b:18:
         66:54:e0:b9:e9:cb:e3:bc:9f:ae:92:a9:2b:8a:96:32:ee:37:
         e0:b8:21:c3:d1:fc:b2:b7:10:aa:cb:e1:7d:85:0c:0e:57:02:
         a9:04:ce:96:3a:73:ca:f5:b5:4d:8e:71:c0:90:ca:13:df:f4:
         f6:7d:36:4a:a0:69:ca:86:13:9b:ae:13:ce:41:2d:32:ee:7a:
         41:fb:84:fb:f4:c0:50:af:e8:dc:53:4b:20:d6:87:1a:85:87:
         77:19:06:60:ee:f4:da:3f:64:20:c5:a0:ad:5f:9e:d2:84:e2:
         d8:da:7e:b3:d9:f6:5d:17:70:9b:a9:00:01:95:f2:35:8d:e2:
         a4:c8:1a:48:c5:a9:57:37:21:bb:e5:9b:b9:a5:8c:b2:c2:21:
         dc:04:b6:16:75:f5:12:54:93:71:9e:f6:8e:e3:63:fc:e2:e3:
         d6:06:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:24:34 2025 by rpki-client